Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/24291536-f227-380c-b6e6-170feafbf341.roa
File:                     24291536-f227-380c-b6e6-170feafbf341.roa (raw, json)
Hash identifier:          XLoVQaw83lPQYPwmvbOufjplOu+ixpFcgFFb8JRl1pk=
Subject key identifier:   F8:36:57:85:76:4D:5F:A5:25:D2:C6:AF:50:69:4F:40:46:8F:69:20
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584D343A1DDEC841387933B5E960
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/24291536-f227-380c-b6e6-170feafbf341.roa
Signing time:             Wed 18 Mar 2026 01:00:33 +0000
ROA not before:           Wed 18 Mar 2026 01:00:33 +0000
ROA not after:            Tue 16 Jun 2026 01:00:33 +0000
asID:                     55246
IP address blocks:        216.110.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:34:3a:1d:de:c8:41:38:79:33:b5:e9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Mar 18 01:00:33 2026 GMT
            Not After : Jun 16 01:00:33 2026 GMT
        Subject: CN=bf478408-77c7-4be6-97fd-b1dba887c5ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1d:5d:bd:7e:7c:7b:d4:41:03:4b:3a:c2:90:
                    b8:f3:b9:cc:35:82:ea:40:bf:a1:7b:56:9e:a0:8a:
                    bb:ca:84:26:68:9a:32:6a:78:23:8d:72:c7:a6:fc:
                    95:11:1b:9f:55:b7:3d:01:8d:f2:d1:3e:5a:c5:55:
                    af:28:71:fc:b5:e3:11:91:c1:b6:7e:59:21:f5:1a:
                    57:4a:ed:f1:c3:89:aa:89:7a:80:a9:f5:6e:56:ff:
                    17:0a:f2:5f:38:48:bd:e1:fa:d1:06:02:7a:d9:d5:
                    f1:36:bd:8b:a0:6a:5a:c7:14:3a:f0:01:e7:1e:d7:
                    c8:d9:a0:1e:0c:87:f1:de:2b:5a:90:6b:71:ab:b2:
                    73:d2:ab:8f:b7:20:d3:5b:9e:f9:5d:ca:96:2e:82:
                    dc:1d:82:6b:69:67:15:98:7d:0a:a2:0b:f5:4b:c2:
                    d8:9b:ba:b9:42:8e:19:a5:82:42:73:d6:48:53:73:
                    e4:f8:36:16:e7:70:c0:ae:d8:73:a2:ec:49:60:42:
                    63:a8:ae:c8:9e:37:26:3c:d7:8b:b1:68:57:85:11:
                    40:e1:48:02:74:90:9c:92:90:41:11:49:02:00:c4:
                    5a:1f:dc:24:e0:77:1f:ea:84:cf:4f:51:9d:cb:f0:
                    d5:e9:5a:ed:f1:74:0c:d2:ac:7d:e8:ae:f3:dc:31:
                    18:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:36:57:85:76:4D:5F:A5:25:D2:C6:AF:50:69:4F:40:46:8F:69:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/24291536-f227-380c-b6e6-170feafbf341.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.110.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:6d:80:c1:5b:51:27:a0:b9:d3:ad:17:1d:0e:94:39:b9:97:
         c6:8c:2d:ba:9c:70:6b:b1:c4:e6:a3:26:d5:67:d5:60:c1:06:
         b3:7b:ae:c4:44:be:52:de:7f:47:fd:4f:2b:91:37:d5:9f:61:
         f2:3b:ff:9d:95:d3:d6:2b:74:71:ce:a6:eb:69:be:0c:f4:da:
         35:79:0e:84:27:eb:f4:f8:2f:7b:ff:26:8b:be:33:59:11:29:
         05:ec:96:82:25:a4:4d:9f:d8:9c:43:34:aa:18:55:e6:89:22:
         ed:42:dc:dc:37:4b:b9:56:85:f8:0f:60:8e:b3:a2:be:31:08:
         84:42:08:55:3b:b6:ea:7a:29:7f:90:fe:10:3a:26:f6:15:35:
         0c:c9:8d:77:aa:37:3d:b3:b5:b7:d5:72:7d:2e:f1:c9:56:9d:
         f3:3a:42:39:47:6a:ae:99:0c:0b:bd:b2:71:c0:05:0f:91:05:
         bc:ad:ba:33:44:da:35:fa:f3:d7:2b:9b:09:b1:93:8b:64:ab:
         a7:e9:cf:23:4b:81:e6:32:df:89:65:9b:e0:1b:52:ce:5c:68:
         10:27:f2:a3:48:03:fd:fa:09:97:e4:43:03:2e:60:cc:02:cf:
         25:70:64:e0:ed:84:e0:de:c4:e4:68:fd:cf:06:1c:48:f0:0e:
         f0:d6:dc:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:02:01 2026 by rpki-client