Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/5d5e9cfa-65df-3536-bd71-8854db468e18.roa
File:                     5d5e9cfa-65df-3536-bd71-8854db468e18.roa (raw, json)
Hash identifier:          lfo5tis/4gDy/4NIKs13+Gi2G0UgMRmo2CqWCazzdGA=
Subject key identifier:   8B:18:26:DA:43:A0:36:82:FB:CE:F2:BF:80:C2:01:6A:FF:19:15:D9
Certificate issuer:       /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial:       010D0C9F4328584D091266F49D5E22B1BB41CB80
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/5d5e9cfa-65df-3536-bd71-8854db468e18.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     13536
IP address blocks:        216.59.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:66:f4:9d:5e:22:b1:bb:41:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=9b0ee9f2-5744-443a-844a-2fdcbaa85ce7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:eb:35:b4:4b:ae:aa:35:45:9b:51:87:bb:79:
                    a8:5c:00:08:e1:68:4e:c6:91:8f:4a:85:35:79:a3:
                    1d:7d:7f:8f:d2:69:e3:39:b0:de:c5:b7:29:d5:e9:
                    b0:75:c4:a1:12:bf:91:c4:dd:43:1d:30:80:5b:e7:
                    e4:40:cd:52:95:43:aa:a4:2c:0b:d7:2d:42:99:20:
                    db:6b:1d:40:af:50:b1:79:5d:f3:80:a3:26:b1:53:
                    4c:6e:9b:ca:19:5c:07:d1:c3:4b:07:67:fe:3d:15:
                    9b:86:5e:43:21:56:9c:47:1e:19:79:15:67:52:4e:
                    63:08:c6:11:dc:01:46:75:e6:06:ea:b8:17:a5:90:
                    f4:49:f7:97:98:43:35:ea:27:33:36:cc:73:94:ac:
                    a2:c5:3a:6a:d1:91:42:8f:f9:bf:ff:06:23:73:5e:
                    33:de:f2:96:63:8f:62:eb:22:c6:4a:cb:20:ee:8a:
                    2e:a1:f4:4c:bd:56:20:64:26:d7:28:53:9c:44:f8:
                    47:25:76:2e:48:49:60:c8:13:1c:f3:f4:db:81:dc:
                    2f:b3:28:0f:72:0e:9d:7b:74:cd:80:6f:2e:d6:eb:
                    79:d7:31:08:6c:0e:e5:3f:f9:eb:f4:07:38:e7:18:
                    23:1d:5c:3a:24:3c:1f:13:b7:6b:6c:13:07:5a:44:
                    ff:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:18:26:DA:43:A0:36:82:FB:CE:F2:BF:80:C2:01:6A:FF:19:15:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/5d5e9cfa-65df-3536-bd71-8854db468e18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl

            X509v3 Authority Key Identifier:
                keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.59.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:16:72:47:1c:28:81:bc:aa:ed:02:25:5b:2a:0e:ee:ee:c2:
         e2:b0:23:7e:2e:46:ae:e1:69:aa:4f:56:05:be:b0:e7:aa:70:
         f5:78:76:13:21:5a:50:a4:30:2e:1b:ca:2e:e0:06:01:7e:9b:
         ea:39:9f:66:96:52:1d:17:9b:12:59:11:3b:21:6b:4a:a7:cd:
         6e:51:68:a0:2c:d6:5c:ad:a3:65:2b:af:1f:a1:06:51:a4:68:
         fd:c6:00:60:00:25:8b:48:8b:35:8c:7e:d4:48:24:e3:af:80:
         be:a6:26:52:b3:0d:64:f6:df:10:da:ce:63:76:2f:9f:8a:ec:
         19:5f:20:86:d5:0d:a1:a2:be:7b:48:d2:22:1c:50:71:35:34:
         3b:77:c0:1d:54:e5:ab:06:5d:68:c2:20:12:bb:4e:a7:72:71:
         fa:88:9c:5a:79:97:54:08:e0:fc:35:95:fe:13:b6:ab:1e:bc:
         f2:32:0a:e9:7e:33:50:12:f4:2a:d4:13:ac:7e:88:bf:68:6e:
         7b:e9:55:9b:a9:d7:dc:52:65:e2:6b:41:fb:dd:37:64:b9:5d:
         04:0f:d5:ed:62:e3:66:52:63:dc:c4:bd:a7:0d:2e:40:30:0f:
         cc:79:11:11:98:08:da:dc:87:0e:62:b5:80:11:8f:cc:aa:6d:
         f4:57:36:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:49:11 2026 by rpki-client