Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/663c53c6-48f7-33d3-92a5-6d8a1faaa728.roa
File:                     663c53c6-48f7-33d3-92a5-6d8a1faaa728.roa (raw, json)
Hash identifier:          IBblCRQUbrzPayBVieerSXMVuO+bO6rqOpsMltOasus=
Subject key identifier:   9D:65:0B:22:A2:BA:BF:53:5D:4B:EA:9A:30:20:8B:A9:88:3E:E2:04
Certificate issuer:       /CN=1d639366-c044-456e-b8c8-0de04a543a0c
Certificate serial:       010D0C9F4328584D359FDD4A2331F56D94AA5540
Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/663c53c6-48f7-33d3-92a5-6d8a1faaa728.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     6181
IP address blocks:        216.196.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:9f:dd:4a:23:31:f5:6d:94:aa:55:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=dc8af47d-e065-4f60-bb0c-0794f7bb3730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e0:62:01:60:70:a1:84:53:bd:1b:99:d1:9f:
                    24:54:e1:83:91:5c:24:5b:a0:4d:09:53:97:9f:9c:
                    ec:70:31:99:b0:a7:93:2d:ad:6f:51:dd:f1:b4:aa:
                    83:28:8e:2e:50:1a:8b:dc:8a:41:8f:16:f2:2e:28:
                    61:71:2b:87:b1:af:79:14:4c:cd:ad:7a:b9:e5:1e:
                    eb:b2:ba:c6:88:f4:c3:23:58:fc:89:e9:3d:c2:a9:
                    57:24:dd:05:c4:bc:26:dc:1f:3b:67:41:d6:53:b7:
                    22:c5:fc:b5:16:c5:03:c7:9e:f9:16:66:cc:b2:05:
                    83:cf:fb:46:57:49:24:f7:06:a7:6e:31:8a:07:23:
                    2d:1e:ff:7d:d2:d1:2a:01:bd:28:6d:d4:ad:57:f6:
                    96:ce:b0:ce:fd:db:5e:08:62:10:6b:6d:d1:ee:ea:
                    a6:79:d1:69:d8:60:63:1c:ba:83:0b:05:74:a1:d3:
                    37:4d:2f:71:96:c9:0c:6c:67:3f:58:73:3c:32:70:
                    5e:7d:f9:bd:f8:b8:14:bc:1f:c9:8e:e6:5d:83:73:
                    da:e2:59:47:11:47:b1:d7:d6:3d:7a:e9:a6:b0:7f:
                    42:f7:c7:32:db:5b:f5:e6:fa:3a:44:be:f0:36:40:
                    01:12:a2:34:da:9e:46:21:b4:b7:b6:8e:66:21:ca:
                    de:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:65:0B:22:A2:BA:BF:53:5D:4B:EA:9A:30:20:8B:A9:88:3E:E2:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/663c53c6-48f7-33d3-92a5-6d8a1faaa728.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl

            X509v3 Authority Key Identifier:
                keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.196.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:d5:6a:4c:86:98:b8:5f:d1:cc:ff:62:75:d2:9f:b1:ff:9f:
         e6:83:50:6d:49:4a:20:67:25:64:51:35:f6:aa:e2:b4:cc:a9:
         ce:86:52:e8:dc:c6:74:84:06:a2:d2:7c:53:9a:a9:9d:83:07:
         01:d0:ff:20:bd:4c:5c:88:03:52:81:35:0e:14:04:12:55:9d:
         91:b1:65:21:86:8f:2e:3f:25:4f:cc:19:fa:d1:46:75:5e:0a:
         2c:64:29:b8:b7:f1:8e:c6:b2:1e:5a:12:b4:9a:1a:99:cf:0f:
         9c:34:63:d5:b7:38:02:82:ae:a8:a7:94:33:45:14:36:4d:b0:
         ce:92:2c:ca:fc:73:d6:03:f2:c0:08:15:3d:f0:83:f1:8b:6a:
         92:01:2b:98:af:c9:52:8b:dc:f7:83:53:2f:e1:a4:2d:72:cd:
         10:00:5b:4a:6d:53:8e:f2:cd:21:f2:85:9b:29:d6:7f:91:e4:
         09:a6:b6:2b:aa:20:f3:04:14:4c:44:d6:91:bc:2d:2a:7c:18:
         86:c1:55:dc:0c:37:3f:81:fd:ff:1c:11:20:53:4f:39:8a:37:
         e0:5b:40:5a:5d:30:7a:d4:99:27:12:30:d9:7c:b8:00:df:04:
         07:73:f5:51:7b:3d:57:e0:83:02:c2:63:08:44:3c:87:c5:4a:
         b6:7e:8c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:01:37 2026 by rpki-client