Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4ba3e652-087b-33e9-8d50-d564ee0a9fc6.roa
File:                     4ba3e652-087b-33e9-8d50-d564ee0a9fc6.roa (raw, json)
Hash identifier:          TykWCgxPrheEJN3D1zc9xJs75VVtoFtiPGdqLBgdnCU=
Subject key identifier:   DA:FD:61:EF:60:73:8C:FD:21:A7:9B:28:62:92:53:36:14:5B:81:78
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584DCC60532ABCCCC2F197A86180
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4ba3e652-087b-33e9-8d50-d564ee0a9fc6.roa
Signing time:             Mon 11 May 2026 13:00:31 +0000
ROA not before:           Mon 11 May 2026 13:00:31 +0000
ROA not after:            Sun 09 Aug 2026 13:00:31 +0000
asID:                     23473
IP address blocks:        216.171.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cc:60:53:2a:bc:cc:c2:f1:97:a8:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: May 11 13:00:31 2026 GMT
            Not After : Aug  9 13:00:31 2026 GMT
        Subject: CN=99bb2413-89d8-4f2a-a4ba-1844f9bc09fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9a:52:17:b4:6d:29:82:35:e7:ab:85:5e:0c:
                    f6:30:05:1b:90:48:85:3d:de:74:0f:e1:a6:9e:1e:
                    c8:e3:75:63:80:94:3a:81:4c:f0:06:c0:b9:1b:53:
                    c7:32:e8:e6:68:ae:ca:31:5d:6e:f7:eb:d3:34:7c:
                    dc:ec:fe:87:36:8e:ba:db:d9:f3:21:af:35:f3:0a:
                    2d:16:ca:fe:cf:8c:b7:65:4b:f0:d3:8e:31:5e:2c:
                    ce:e0:19:9e:ca:7d:23:35:86:a8:25:c7:1b:63:4b:
                    a8:6c:a3:e0:03:44:c3:1b:61:52:65:42:b1:af:13:
                    40:97:5a:a7:82:09:dd:28:e0:41:a9:20:8b:ac:bf:
                    83:bb:d4:c2:d0:b0:1b:1d:9d:f7:bd:3f:6f:af:cb:
                    35:ef:ac:80:56:d2:16:ff:f3:a2:1e:a5:3d:ee:99:
                    4d:41:98:f4:ce:4d:40:af:85:de:10:21:53:30:7f:
                    4c:a1:7e:c9:20:a0:af:cd:63:db:18:48:9d:dc:ce:
                    bc:a9:53:2a:a8:17:b9:ce:da:ea:46:da:fd:5d:ac:
                    fb:af:ef:6b:7a:d2:64:42:98:18:6c:d8:71:38:65:
                    04:1f:ec:1d:88:66:79:3e:c2:e5:c0:5a:e6:7e:6b:
                    e2:07:df:1a:10:6d:45:a9:59:7c:af:29:27:5f:98:
                    1d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:FD:61:EF:60:73:8C:FD:21:A7:9B:28:62:92:53:36:14:5B:81:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4ba3e652-087b-33e9-8d50-d564ee0a9fc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.171.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:61:60:b3:de:e7:fd:50:4a:bb:46:f1:de:88:9b:42:86:2a:
         d6:f9:51:46:ba:ea:c3:35:ac:2d:25:16:96:d7:30:59:63:8f:
         06:5d:55:24:95:bc:0e:b5:68:6a:5d:4a:94:81:73:ee:72:f1:
         f0:1a:94:09:65:25:3f:81:37:e6:0a:a5:ba:18:9c:c0:6a:6a:
         c2:16:6b:ec:b5:54:17:1d:53:19:78:ca:02:b1:9b:05:be:23:
         b7:41:5b:a5:6c:f6:2d:04:5e:73:ea:80:d6:3e:47:fb:9b:9e:
         0e:a9:a3:12:26:c1:43:60:cf:e7:2b:81:72:1a:0e:5c:fc:6e:
         40:c7:41:71:cc:48:ac:ab:fd:57:5a:2b:a2:b7:46:da:d9:c8:
         56:c9:73:d5:fc:33:4d:6f:f1:58:81:73:06:35:05:92:d8:75:
         39:7a:8d:5c:c0:20:85:cb:6b:ed:16:7e:1d:6b:ff:c4:71:10:
         c8:dd:32:7c:ee:de:bd:ef:88:2a:67:dc:24:9b:cd:2e:05:e3:
         8c:8d:5b:9a:b6:8d:74:3e:b8:99:d0:bb:e1:b5:0e:ff:38:82:
         1a:f9:0f:73:ba:c5:71:ef:0f:f7:ff:54:32:13:e3:75:ce:26:
         d9:fd:0f:69:5d:c1:07:e5:01:6f:a5:a7:c0:d1:3a:ea:f6:cd:
         31:8d:50:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:05:55 2026 by rpki-client