Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/70c136ea-0cb9-3ed3-a923-d617d9c8975b.roa
File:                     70c136ea-0cb9-3ed3-a923-d617d9c8975b.roa (raw, json)
Hash identifier:          ixa9erfrq/q6yu/i+dAlMEMnl9Ct3yEHQAGhLOr1rQM=
Subject key identifier:   93:6D:76:A9:6A:EF:05:1D:0A:14:59:43:B0:28:AC:F0:FB:60:BC:99
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584DA6B0216DB70DAD2F54A6C6C0
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/70c136ea-0cb9-3ed3-a923-d617d9c8975b.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     396375
IP address blocks:        216.30.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:21:6d:b7:0d:ad:2f:54:a6:c6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=42f7533c-5c6b-4ed6-b9ff-ea6528925343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d9:8c:fa:30:55:1a:ed:47:22:80:32:f6:58:
                    0a:69:a4:46:7a:db:fc:49:d8:19:ac:8f:a2:15:b6:
                    48:ae:20:5d:07:15:e0:d1:e9:e8:a7:ff:a7:27:3c:
                    e0:18:75:3e:17:92:f5:20:92:0e:ab:a8:f2:26:e8:
                    21:14:2a:9a:a6:d2:88:5b:83:85:8f:95:87:7d:ab:
                    2e:7e:62:7d:48:f5:dc:fb:34:f9:83:eb:97:60:9e:
                    a7:84:79:52:a2:fd:ce:a9:f1:9b:0a:c0:14:69:28:
                    74:0b:06:d1:69:e2:ad:82:e5:64:96:bd:bb:ce:38:
                    0b:9a:a8:53:ed:7e:c8:65:3d:0f:88:a4:3d:60:8b:
                    10:de:ab:ae:60:42:e5:c7:06:35:02:a2:d2:7a:9a:
                    10:3b:80:21:57:e3:0b:8b:96:e5:48:14:21:28:21:
                    3c:ba:56:eb:2f:7e:56:04:98:aa:f2:c2:03:89:25:
                    be:be:ab:7a:2c:91:b3:76:b9:75:ba:52:7d:f3:39:
                    21:ec:99:7f:c6:b3:5c:e2:19:a7:3d:6b:f0:b2:5b:
                    ee:c6:95:9d:a0:b2:24:7e:7f:58:d4:88:81:cc:6d:
                    d1:9a:ba:e4:0e:44:e0:b1:4f:46:e4:8c:77:58:71:
                    00:70:c3:30:27:6f:c2:35:d5:7c:6f:a9:bb:4b:57:
                    7b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:6D:76:A9:6A:EF:05:1D:0A:14:59:43:B0:28:AC:F0:FB:60:BC:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/70c136ea-0cb9-3ed3-a923-d617d9c8975b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.30.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:ff:b3:9b:4c:40:5f:59:8b:e6:50:cc:cb:66:97:96:65:f7:
         77:c8:b2:2f:50:a6:25:ba:68:fd:f4:e9:52:dc:e7:5e:d4:7c:
         37:4c:af:da:e8:52:31:29:e7:af:ce:e7:19:c7:5f:f0:03:fd:
         bc:04:36:2d:48:0b:06:ef:04:49:29:2d:b6:c4:93:20:46:f9:
         2f:8e:dd:2b:5d:b6:58:45:64:be:8f:86:c2:e3:65:d3:6d:2a:
         88:0c:9c:10:43:b3:bb:b0:c4:c1:0e:e8:fa:c3:0c:88:c0:6a:
         f9:5c:61:b1:d0:3f:13:45:1b:20:08:9d:22:eb:f8:06:08:f7:
         ba:1a:a2:03:b5:0c:c3:da:d2:70:54:90:a2:0c:84:d3:aa:88:
         f6:3c:61:43:d8:ad:a4:bf:7a:6d:bd:7a:44:20:68:88:78:d5:
         9a:59:df:5c:e9:c6:66:32:80:a1:09:5a:e6:ca:5b:37:26:73:
         c6:e6:de:78:3b:97:24:6b:35:f2:a3:1f:37:2f:49:73:5f:16:
         96:88:c5:32:45:2f:d5:b5:35:48:13:76:c5:2b:0d:fb:57:9f:
         62:fc:bf:d5:6b:6f:10:66:eb:2e:e3:58:6f:50:61:68:d0:76:
         fd:6a:5e:b8:80:39:d5:13:99:3e:34:c3:2a:d0:4e:8f:f3:3f:
         76:e3:1d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:52:46 2026 by rpki-client