Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/7112a2d1-bb6b-3d78-b06e-d6ec546c1183.roa
File:                     7112a2d1-bb6b-3d78-b06e-d6ec546c1183.roa (raw, json)
Hash identifier:          YYMd5iHAtXxUDtuz1h2hSsX4TY7GaVKhcg45D7vBXK0=
Subject key identifier:   AB:E4:AA:89:74:C3:1A:E6:9B:3D:2D:72:A0:B9:BE:FC:A9:68:09:55
Certificate issuer:       /CN=1d639366-c044-456e-b8c8-0de04a543a0c
Certificate serial:       010D0C9F4328584D492A725569FB5014B57B9540
Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/7112a2d1-bb6b-3d78-b06e-d6ec546c1183.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     20040
IP address blocks:        216.68.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:72:55:69:fb:50:14:b5:7b:95:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=550aaa8b-a783-47b6-aa93-de4f0ec31803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a5:7f:ef:b5:e5:48:60:27:f8:1a:ad:97:48:
                    a3:35:cc:67:a3:a5:6d:0a:8c:56:3b:28:43:45:19:
                    cb:ef:8d:71:ca:c3:a9:4b:34:f9:ef:50:32:ec:1e:
                    af:ee:07:6f:75:5a:8c:d1:7a:99:7c:67:34:ed:71:
                    3f:ff:d7:91:64:da:c7:24:4a:9a:46:15:23:4f:be:
                    28:7f:d8:bc:63:6d:07:8e:0c:18:10:cf:62:ec:db:
                    af:5d:b6:a6:cf:78:65:9c:fd:b7:e2:4f:6b:08:f5:
                    27:8d:fc:3a:f4:69:9b:93:46:a0:d3:c7:5d:24:f7:
                    38:04:fd:69:c5:e6:62:39:93:a8:a9:bb:bb:1f:06:
                    70:06:9c:6a:96:71:ed:fd:1c:2f:1e:c7:9a:ae:62:
                    21:93:fd:a5:66:34:b9:cd:8b:cd:6b:76:2e:f2:8d:
                    8a:63:7b:67:3b:0c:69:cc:7c:aa:f7:15:2a:6f:22:
                    b9:df:78:03:c7:a2:d4:4e:e3:38:2d:c3:aa:44:f4:
                    44:b6:2e:09:b4:c1:b7:eb:26:4a:5d:98:d6:9e:3e:
                    e1:89:0e:f8:b0:36:6f:d7:64:82:0f:0a:64:c5:fa:
                    be:04:8b:12:e2:ea:93:8e:b5:95:2b:73:fd:9d:a6:
                    63:a6:c2:3d:da:94:35:5c:12:06:6a:03:3f:fd:43:
                    95:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E4:AA:89:74:C3:1A:E6:9B:3D:2D:72:A0:B9:BE:FC:A9:68:09:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/7112a2d1-bb6b-3d78-b06e-d6ec546c1183.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl

            X509v3 Authority Key Identifier:
                keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.68.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:35:d8:d9:cf:9e:73:e8:93:ea:ee:36:86:f7:31:9c:5c:62:
         d3:16:73:59:4c:91:31:ea:31:38:90:32:12:76:fd:b1:6e:4b:
         1c:88:ab:7f:95:3f:7c:fb:78:9d:b1:ec:64:a1:76:bc:40:cc:
         6c:73:e7:8a:a4:3c:fa:96:d4:a7:1e:69:6d:40:a5:14:64:c5:
         4d:56:2d:7d:5f:75:8f:6f:0c:df:50:29:5f:10:4e:0b:4e:e3:
         98:15:51:52:8b:20:bd:27:ac:23:67:08:b7:2b:0c:ff:3b:99:
         44:90:6b:d9:d2:41:c7:15:cf:5f:96:21:29:6f:97:84:53:e7:
         67:54:70:26:34:65:09:29:17:d1:43:ff:c8:11:e6:6a:c3:f3:
         10:34:6f:2a:53:fd:c2:9e:67:1f:80:59:f4:f2:84:58:3d:75:
         9e:95:45:46:c3:ee:71:a0:fe:24:24:cb:33:5d:13:8d:f1:6a:
         9e:01:d9:e0:b1:3d:f4:45:a1:ef:d9:36:10:5b:e9:77:81:d5:
         c1:81:7c:83:a6:0c:ed:e9:95:70:32:d0:f0:6d:6b:d1:9f:9e:
         66:ca:97:6c:c1:e0:be:5e:93:88:42:e5:18:98:e0:3a:0f:88:
         41:87:67:96:dd:c6:81:15:7b:b0:a7:6c:56:e8:cd:18:29:b1:
         e1:4a:ae:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:17 2026 by rpki-client