Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f166d33e-0be8-387d-8a90-ec9a5d24a4c4.roa
File:                     f166d33e-0be8-387d-8a90-ec9a5d24a4c4.roa (raw, json)
Hash identifier:          WrjXdLjF92swaYTZ1hvcpeNO2KoKs9GwD/MuWlesWa4=
Subject key identifier:   0F:60:81:7A:7D:0A:EE:E5:A2:A6:CE:2A:85:89:CA:FB:B6:56:09:AA
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584D3F64FE4FEF50F2CD7ADA9590
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f166d33e-0be8-387d-8a90-ec9a5d24a4c4.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     396610
IP address blocks:        216.87.145.53/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:64:fe:4f:ef:50:f2:cd:7a:da:95:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=36f63cb1-f2bf-43c7-a8ba-8c63c183c9a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ac:e7:c4:6f:37:45:d5:9c:c2:3f:07:91:bf:
                    56:57:a0:9d:1d:82:8f:36:dd:24:c5:8c:9b:8d:cf:
                    21:94:fd:ae:26:dc:03:9d:c4:cd:c6:08:be:e7:0f:
                    4e:0e:5a:cb:b7:80:1c:eb:09:88:be:f0:98:f6:07:
                    14:dd:ca:f9:05:e7:85:c5:a7:cd:8b:c3:c9:f8:c4:
                    0d:0f:e8:8a:4b:7e:3b:1a:b6:3e:de:b9:a4:cb:22:
                    96:af:8c:1b:52:a1:e4:94:3d:50:a9:74:d1:15:82:
                    2d:7e:8e:d2:27:70:d9:3d:8c:9a:6d:f7:23:ae:d0:
                    3b:61:8b:4d:b6:23:6a:7c:71:9c:d8:50:96:33:51:
                    cf:61:2b:c1:ac:2f:a6:0a:d7:2a:b6:15:00:e2:1d:
                    19:44:d3:98:78:fd:2e:04:9d:77:13:02:4e:0c:d2:
                    a5:fd:de:7f:dc:76:62:11:21:49:75:5f:f5:6d:89:
                    06:99:06:47:97:a8:61:34:41:37:c2:a8:fc:f3:89:
                    3a:05:0a:50:33:ec:ef:16:2e:8f:44:ee:61:c2:70:
                    5c:3f:15:07:cd:1f:08:ce:0b:b6:59:a9:bb:9a:c9:
                    d6:d9:10:48:93:2d:41:e3:e8:46:63:5b:3b:76:95:
                    4d:b8:b2:af:1e:03:45:0d:c3:19:45:70:ab:c3:6a:
                    6b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:60:81:7A:7D:0A:EE:E5:A2:A6:CE:2A:85:89:CA:FB:B6:56:09:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f166d33e-0be8-387d-8a90-ec9a5d24a4c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.145.53/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:75:70:3a:81:e5:6a:4e:36:ab:6a:c9:b6:f8:18:93:fd:19:
         e6:88:a8:be:4c:9b:06:46:87:db:9c:80:5e:79:55:4c:74:6c:
         26:30:ac:18:89:66:0b:50:bd:66:b5:61:ca:d4:e7:34:6b:34:
         74:e9:a5:29:cf:1f:d8:cc:57:32:af:7d:a4:93:f6:c1:55:34:
         b5:4b:d1:91:3d:d0:bc:92:0a:87:2a:d6:fe:15:f9:c3:ea:c4:
         92:24:38:92:e5:92:bc:b9:de:32:1b:ba:31:5f:d8:b0:3c:f6:
         c0:a7:62:b8:31:71:43:42:1f:8b:bc:48:e9:7e:0a:84:d0:dc:
         59:36:95:0f:f9:1c:78:6f:36:8a:3e:e8:3d:aa:51:6c:43:88:
         7b:b3:74:f6:c8:f0:96:64:ce:e0:fa:7f:21:75:05:8a:52:5c:
         0d:93:03:c5:5e:46:b3:f5:e6:f9:e4:35:7b:d3:ff:ae:47:ab:
         5a:c6:10:3e:a7:c2:12:38:d4:33:e8:68:09:1d:c3:63:57:0a:
         4e:bb:fc:4e:dc:6b:bc:2f:11:81:35:1a:3c:49:0e:32:de:21:
         e6:28:14:2c:04:87:d5:3e:4f:32:82:97:d4:fd:8a:43:54:4d:
         aa:f5:38:2a:c9:a8:53:bb:cc:89:46:4c:72:65:35:ab:4e:68:
         5b:14:e0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:27:26 2026 by rpki-client