Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/fa1af220-f9c8-3b0a-a546-dec63eb2a94e.roa
File:                     fa1af220-f9c8-3b0a-a546-dec63eb2a94e.roa (raw, json)
Hash identifier:          U4QNWX30ubN6KKjHJyoZyG03hPbXgS5vZkTGtLS3M9Q=
Subject key identifier:   D1:99:62:6E:BA:13:A6:EC:37:A9:0E:BF:8D:01:93:0A:97:AB:D4:D3
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584D300A58359A6C5425D4F74DC0
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/fa1af220-f9c8-3b0a-a546-dec63eb2a94e.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     13692
IP address blocks:        216.110.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:58:35:9a:6c:54:25:d4:f7:4d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=9353600b-5b0c-45c6-86f2-4f66076a4b3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:de:9f:8d:ec:f9:33:de:e8:25:e5:74:d6:74:
                    29:51:ad:ef:83:71:43:ef:df:b1:78:28:37:7c:95:
                    fc:ad:c6:00:0e:c0:43:48:60:35:fb:c2:ff:0e:9f:
                    5d:3c:5b:62:50:0d:40:ae:d2:ec:d6:74:06:f5:57:
                    c0:f3:42:99:7c:4e:32:b9:94:4b:e4:96:35:6e:21:
                    03:64:fe:42:9d:00:6c:4d:1a:6a:a9:ca:4c:97:12:
                    eb:ef:f4:72:3d:d5:66:60:62:8a:32:54:cc:72:cb:
                    c5:c0:82:06:89:02:17:52:e9:f2:df:1f:75:d8:f1:
                    fc:e6:39:de:ea:8e:ab:8e:22:cd:8f:17:7e:eb:39:
                    7c:dc:35:fd:e6:da:7b:5b:18:cc:aa:ce:7a:d6:21:
                    51:92:b1:e3:25:7f:cf:b1:0c:0c:44:bf:fe:c9:16:
                    07:36:9b:15:34:fd:ab:d2:57:f6:45:5a:9c:79:e6:
                    4c:d4:4a:b0:dc:90:8b:4b:8b:9d:17:75:e1:dc:cc:
                    21:c5:45:c3:23:92:f3:df:a1:ad:b6:fb:47:d8:64:
                    74:74:c3:61:83:52:4b:6a:80:e4:ea:b3:e5:28:f8:
                    88:8f:98:5e:c3:9c:94:21:92:9e:df:e7:6b:3e:c7:
                    8e:2d:c5:45:d2:13:10:bf:a8:e5:8a:2f:83:e9:aa:
                    56:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:99:62:6E:BA:13:A6:EC:37:A9:0E:BF:8D:01:93:0A:97:AB:D4:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/fa1af220-f9c8-3b0a-a546-dec63eb2a94e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.110.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:f4:36:67:bd:fd:4e:3d:a6:8c:16:6c:4d:5e:10:3c:11:f5:
         3b:1e:95:d6:18:01:07:83:74:b1:e2:f1:28:7a:d8:1e:2b:51:
         fc:6f:0f:c8:af:2c:04:d8:b1:01:c8:05:26:0d:95:17:42:37:
         7d:32:28:9a:90:32:c7:74:91:68:6b:d8:0d:83:33:8b:eb:49:
         9b:2c:05:21:a6:e9:3e:b0:89:b3:b5:d5:b8:2c:89:17:96:a8:
         c4:ed:96:dd:9d:61:b1:91:16:f1:c2:0a:75:af:be:c6:51:f7:
         e0:e6:2d:04:2b:53:b7:d7:a1:e7:a4:35:10:68:33:d3:d6:1a:
         ac:76:13:7e:8f:69:9b:42:19:41:ba:b6:63:1b:21:6d:b4:76:
         c3:ec:e4:35:19:e0:ff:73:f8:55:db:56:68:3d:c1:3f:3b:94:
         0f:cf:9f:a7:51:c2:62:52:d9:78:df:3a:4d:5e:dc:40:7a:c9:
         01:6b:60:64:ed:f3:c3:fd:76:a9:51:62:52:c1:9c:63:0e:36:
         9c:de:a3:1e:3b:c5:58:c5:36:b2:4d:0c:48:7f:31:78:e8:58:
         f0:1c:f4:1d:26:39:2b:4c:71:0b:e1:4e:6b:53:7e:da:4c:21:
         c7:ce:b2:83:4f:90:42:13:58:78:bc:7a:f2:af:f2:b2:b7:fe:
         ea:66:bf:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:06:37 2026 by rpki-client