Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/5a9046dc-7b17-3fa0-94c3-3970d27d9709.roa
File:                     5a9046dc-7b17-3fa0-94c3-3970d27d9709.roa (raw, json)
Hash identifier:          uUuVV7xszhC1amgTlF5okr/Mgpl4CapgG/QafYghW7Q=
Subject key identifier:   5E:13:81:E3:F6:4A:6C:69:81:74:DF:83:F5:C3:0F:FE:A7:59:C1:A3
Certificate issuer:       /CN=c3fbdc8c-2f4c-4dea-b420-52e582992086
Certificate serial:       010D0C9F4328584D386A58341D4CCC672A2653C0
Authority key identifier: 88:EC:1B:EE:A2:0C:53:B3:99:38:A4:26:8C:5E:B1:EE:56:2C:E4:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/5a9046dc-7b17-3fa0-94c3-3970d27d9709.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     398700
IP address blocks:        216.98.224.0/23 maxlen: 23
                          216.98.236.0/22 maxlen: 22
                          216.98.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/c3fbdc8c-2f4c-4dea-b420-52e582992086.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/c3fbdc8c-2f4c-4dea-b420-52e582992086.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:58:34:1d:4c:cc:67:2a:26:53:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3fbdc8c-2f4c-4dea-b420-52e582992086
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=cb29bb4b-cfe3-4c3d-a7ef-2ab8d6c761ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:3f:fa:d3:8a:e8:3e:cb:6a:0f:ed:c5:96:21:
                    68:43:21:d2:90:12:82:82:70:f3:12:59:9e:b7:46:
                    51:2c:ff:c9:73:c4:d9:a8:be:fc:c9:c1:50:11:e0:
                    7e:f6:ea:03:80:3d:6f:a5:a2:f5:df:55:25:bb:a4:
                    97:f8:15:bf:25:63:da:6b:92:7a:81:87:27:c3:ec:
                    50:bb:3a:4e:f6:54:57:19:28:2b:22:6b:a8:6b:58:
                    36:53:92:ad:46:9e:96:f5:ff:3c:94:52:dc:99:08:
                    9b:c1:c3:6d:f4:cb:22:24:75:b7:7b:fe:f0:dc:94:
                    48:35:a1:5a:3b:ee:27:27:eb:03:5a:d4:44:01:c4:
                    aa:9b:da:bd:31:04:6d:b4:e8:6e:07:f9:76:ce:7d:
                    02:a0:f7:14:36:9a:1c:57:33:7a:36:67:3a:61:58:
                    59:d4:55:0a:d5:2b:61:aa:54:ec:7f:62:71:d6:88:
                    f0:da:32:e2:4f:00:92:3b:2a:66:84:48:6c:b2:8d:
                    13:57:78:3b:7e:16:a4:f5:5d:6b:44:ec:4a:40:45:
                    23:ff:2b:1c:87:14:38:f2:c6:17:3a:69:24:8d:4e:
                    d5:44:63:d4:d3:b9:d1:bc:f5:c3:06:74:9b:91:cf:
                    7c:a9:1b:89:44:95:b8:4c:1f:df:ab:72:a8:b9:98:
                    0b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:13:81:E3:F6:4A:6C:69:81:74:DF:83:F5:C3:0F:FE:A7:59:C1:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/5a9046dc-7b17-3fa0-94c3-3970d27d9709.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/c3fbdc8c-2f4c-4dea-b420-52e582992086.crl

            X509v3 Authority Key Identifier:
                keyid:88:EC:1B:EE:A2:0C:53:B3:99:38:A4:26:8C:5E:B1:EE:56:2C:E4:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.98.224.0/23
                  216.98.236.0-216.98.241.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:e5:45:90:90:41:da:14:aa:7c:dc:34:2e:02:7b:0d:20:6d:
         d2:14:44:3f:a6:c7:09:6a:b6:cb:15:9d:5c:4e:1a:cb:a4:60:
         06:dd:cc:97:5b:e1:cd:9b:47:3f:47:7e:0c:fc:fb:d3:76:91:
         ae:89:25:43:86:35:75:f5:fa:12:9c:c2:d0:9d:f3:92:f7:b9:
         21:8e:51:34:74:1b:ad:ba:79:38:2a:ea:4a:22:07:54:61:63:
         07:9d:3a:3a:d5:f6:85:d3:af:12:29:3e:39:73:49:b0:40:e4:
         31:fd:27:85:d1:ee:76:2b:fa:8c:44:75:73:2a:39:11:f4:31:
         85:5d:78:b2:b4:ad:97:d9:1d:42:e4:c8:8f:56:b4:db:b5:6a:
         e2:00:b3:df:e7:7f:93:96:8e:b6:8d:2c:01:4e:fb:af:e1:37:
         50:0e:e6:c0:26:ba:81:0a:ec:f7:5f:af:f3:4e:59:43:f5:8f:
         f9:20:94:80:82:72:f3:13:8a:09:39:69:a4:2f:92:d8:41:eb:
         db:bc:91:e2:0f:d0:95:75:31:9b:76:9b:ea:b4:57:e5:ff:43:
         51:4c:cb:21:d8:85:33:df:3c:a4:fa:b6:22:dd:65:5f:97:f8:
         1c:35:0b:22:e4:38:e6:98:71:aa:7b:05:a9:03:e1:b3:b9:96:
         cb:29:ae:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:14:31 2026 by rpki-client