Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/e28da1e8-5371-3e37-80fb-bf2da9dda40f.roa
File:                     e28da1e8-5371-3e37-80fb-bf2da9dda40f.roa (raw, json)
Hash identifier:          v6j3l1A+Hjra0oDzA8S4AQIVS1vCNeveNaj4nRU1Zkk=
Subject key identifier:   B7:F6:BE:3C:43:1A:46:50:2C:22:CF:93:F1:23:B2:03:1D:C0:31:36
Certificate issuer:       /CN=1d639366-c044-456e-b8c8-0de04a543a0c
Certificate serial:       010D0C9F4328584D492A72B3331DC149E5594FC0
Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/e28da1e8-5371-3e37-80fb-bf2da9dda40f.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     27203
IP address blocks:        216.68.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:72:b3:33:1d:c1:49:e5:59:4f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=512622cf-b2d2-497b-94c2-aefa102a1506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c5:68:9f:c0:fb:7b:57:52:e6:d4:0c:0c:4e:
                    83:29:ea:10:67:bd:b1:43:f2:7a:2b:d2:0c:9e:04:
                    51:a9:f5:a7:87:71:ad:9b:7a:49:82:8e:c2:fd:27:
                    2f:9c:29:17:d0:c3:45:a3:83:9c:fe:ef:2c:cb:d7:
                    b8:fd:88:3d:62:c7:c2:de:e9:5f:e5:0d:65:78:ac:
                    6a:73:5c:39:14:23:1e:51:74:ce:97:d5:39:ec:dc:
                    e6:ed:9e:9e:4d:0b:ac:66:ba:d5:31:14:2e:26:9e:
                    5b:ea:4c:a3:f1:74:5d:e4:7d:dd:77:72:8a:8c:cc:
                    6a:bb:ea:4c:70:38:7f:e9:af:94:9f:99:83:4a:5b:
                    2a:3e:8a:5e:9f:90:ca:c1:fc:d4:c8:cd:05:a1:ef:
                    d0:91:f1:bc:5b:4c:04:79:26:71:ba:af:c3:f6:59:
                    26:07:f9:03:53:a9:1f:a6:df:26:cf:dc:0d:51:ce:
                    32:d1:f4:46:f4:ba:a6:f0:27:34:fd:63:5e:ec:a1:
                    21:5c:58:9d:4b:8b:47:8e:90:18:0b:4b:5b:7c:66:
                    e3:13:4f:db:09:ad:b8:0f:4d:4b:38:9d:77:a5:d5:
                    34:0c:6a:09:8a:f2:48:27:73:29:79:7a:9f:a4:6f:
                    f1:fb:22:ae:12:9e:18:79:5c:f5:46:c9:41:67:38:
                    be:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F6:BE:3C:43:1A:46:50:2C:22:CF:93:F1:23:B2:03:1D:C0:31:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/e28da1e8-5371-3e37-80fb-bf2da9dda40f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl

            X509v3 Authority Key Identifier:
                keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.68.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:e2:29:a8:71:77:32:5a:5d:69:a4:93:c0:99:20:e7:39:59:
         e4:45:a9:9d:44:a1:83:b3:e8:dc:67:ac:0c:ec:87:7c:1a:3d:
         18:a7:d1:55:ae:fe:a5:76:ff:68:89:9c:3f:c2:76:9b:82:1f:
         21:bc:2f:7a:60:2f:10:fc:c4:5c:f1:46:69:44:46:10:f7:79:
         43:ac:71:0e:f0:6a:d4:9a:da:20:f9:47:da:5c:e2:3c:9e:de:
         16:42:4a:df:3e:ca:69:c6:7f:82:c2:38:00:13:da:0a:7e:7f:
         14:98:eb:e3:c8:95:f7:89:48:5b:81:5d:1d:56:41:90:b6:be:
         d8:a6:c1:31:a0:20:91:e2:ef:90:61:a9:86:28:9d:8c:71:12:
         d4:d2:4e:80:b2:a7:78:1f:12:8d:98:ca:15:32:d1:1f:c1:79:
         b1:ee:0a:64:a8:d8:27:7e:e4:9d:c8:d0:2a:43:11:60:35:79:
         cc:dd:51:0a:30:78:65:10:c8:22:ae:51:89:5f:79:49:08:df:
         a3:25:31:1b:2f:1c:0c:95:f5:35:c5:e1:40:85:d0:43:29:0b:
         e1:0f:fe:8c:7a:73:f7:59:18:a7:e7:69:50:87:b3:62:c9:7e:
         07:48:0e:a6:17:54:94:83:4f:1a:f9:dc:0b:af:08:d6:c1:a3:
         00:86:24:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:46 2026 by rpki-client