Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/faafbe44-81d6-3cbd-a0ee-7fde2e980bed.roa
File:                     faafbe44-81d6-3cbd-a0ee-7fde2e980bed.roa (raw, json)
Hash identifier:          xpyDb+cbYUF1+DIxj3dTHKECVcVYmt+Za4N8nJIiLU8=
Subject key identifier:   91:F2:2F:B9:3B:B8:40:0B:66:D9:2C:55:4D:B7:93:0B:B9:A5:FD:A1
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584DCC606E8F5DFF05EB795D3B00
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/faafbe44-81d6-3cbd-a0ee-7fde2e980bed.roa
Signing time:             Mon 11 May 2026 13:00:31 +0000
ROA not before:           Mon 11 May 2026 13:00:31 +0000
ROA not after:            Sun 09 Aug 2026 13:00:31 +0000
asID:                     23473
IP address blocks:        216.171.0.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cc:60:6e:8f:5d:ff:05:eb:79:5d:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: May 11 13:00:31 2026 GMT
            Not After : Aug  9 13:00:31 2026 GMT
        Subject: CN=473efb73-1fb4-41a7-b644-d8b0803f6668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:10:03:a4:52:e9:d8:69:22:62:6a:9e:31:34:
                    32:80:28:ae:1f:a7:ba:8f:11:00:2d:e7:68:04:c7:
                    ff:08:c2:13:95:77:cd:d8:2c:04:89:83:d5:cb:f6:
                    99:5f:7d:fd:0a:a2:8d:2c:e0:7c:fd:4c:a9:64:e8:
                    f9:64:93:72:43:2c:96:7d:77:ce:ab:5f:11:5d:c8:
                    1b:a0:bd:3a:af:a9:cf:e7:e2:68:25:37:a9:77:49:
                    98:2b:f2:9c:df:90:bd:80:b4:f2:ab:53:58:d9:ec:
                    6c:e5:02:72:be:89:24:af:3a:1b:37:e2:a7:9f:b2:
                    c1:64:08:0c:c9:73:02:f4:fc:23:87:14:d4:0b:e7:
                    c8:50:81:dd:dc:ed:19:3b:ec:7d:21:7f:81:68:a2:
                    75:80:e6:64:fe:a3:6c:ac:e8:cf:e4:c9:c0:3b:7f:
                    af:cc:b7:60:0e:d0:9f:ee:4e:94:38:5a:bd:53:24:
                    de:c0:a1:7a:24:b0:79:dc:72:d4:f1:2e:6b:9f:c5:
                    7c:f5:c6:fd:2b:f5:9b:0b:dc:05:a9:a5:32:0f:46:
                    f3:01:2b:6a:d3:3e:6c:03:d9:db:84:92:85:0d:55:
                    58:69:f7:cb:ed:cf:b6:79:27:ec:08:23:d1:a5:b9:
                    c4:e2:cb:11:87:7a:6f:6e:3d:95:d6:65:d9:60:b0:
                    d1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F2:2F:B9:3B:B8:40:0B:66:D9:2C:55:4D:B7:93:0B:B9:A5:FD:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/faafbe44-81d6-3cbd-a0ee-7fde2e980bed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.171.0.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:fe:af:74:2d:51:92:c4:2e:f6:af:0e:64:50:04:ea:4d:fe:
         3d:3b:f2:e6:60:cc:67:6e:e4:64:6b:46:82:24:c3:c2:f1:5b:
         9c:43:cf:6d:f4:a2:8f:01:38:6b:47:4a:07:99:61:e7:6e:39:
         37:3e:a5:62:0d:7e:14:76:a0:ea:5e:fe:6f:20:c3:59:f3:a0:
         88:6e:12:12:1a:fe:09:15:19:da:64:b8:1a:b1:c0:a5:30:5c:
         0b:f3:d4:37:f5:d0:a3:fe:f1:9f:25:23:20:15:0f:2d:7d:f8:
         45:d2:dc:59:2c:48:7e:f2:9b:a5:85:6e:6d:30:1c:45:6f:aa:
         ad:c6:6b:90:43:4b:4b:da:98:5e:ef:a6:8f:e3:8b:16:a8:06:
         42:cf:75:81:30:1b:62:29:94:4b:93:e5:05:c5:45:2d:a4:3a:
         59:5a:1a:74:ed:b6:81:0c:d3:d2:01:8e:f5:5d:12:20:3d:87:
         c1:bc:90:6d:a8:2d:fd:d5:a8:25:06:ee:96:d7:d5:9d:6f:df:
         7b:08:10:47:2d:40:44:b1:94:ba:ce:73:ae:a0:c2:29:b4:ab:
         4f:2e:d6:62:fd:13:7d:f2:c3:e5:bf:ca:c2:54:54:81:ab:11:
         11:d2:d6:ee:9f:07:33:8e:43:70:3c:e0:86:5b:70:95:da:b7:
         01:bc:a7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:53:03 2026 by rpki-client