Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/ecceb7ee-c53a-37be-bf81-070820493d94.roa
File:                     ecceb7ee-c53a-37be-bf81-070820493d94.roa (raw, json)
Hash identifier:          OZ2i3IJjnUfQlHQCFDjiWBiyqCP6pmyOuSDZdNoidaM=
Subject key identifier:   42:5E:24:80:6A:1C:B6:AF:B3:40:D4:16:D9:C4:4F:CC:DC:33:B5:BB
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584DCAFB1EC5EEBC18E8717F1080
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/ecceb7ee-c53a-37be-bf81-070820493d94.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     4922
IP address blocks:        216.30.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fb:1e:c5:ee:bc:18:e8:71:7f:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=b804e42e-a062-4688-a410-55a21047787f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:11:1d:e9:89:37:a1:c9:94:43:89:3e:7c:1d:
                    fd:01:92:5d:63:d6:69:03:2f:ed:d3:b2:79:d9:2f:
                    03:52:1e:c6:c0:82:e0:92:87:45:3a:23:ae:76:a9:
                    4c:17:9b:d6:dc:58:10:be:ec:35:af:d5:8d:2c:8d:
                    fb:a3:dd:7b:1c:6b:4b:9d:a1:38:77:df:80:c9:5e:
                    c7:f3:b6:08:ca:5e:5c:e1:db:33:cf:d5:b3:0c:d0:
                    a3:a4:ab:a7:9b:fc:7c:bd:fd:c3:9b:71:67:85:ae:
                    05:81:ee:bf:57:d9:7f:38:a3:8e:0b:e7:f9:f3:34:
                    c3:4e:3c:d2:0e:88:32:41:ea:b8:f6:c2:7e:ab:c3:
                    14:50:71:6d:9e:1b:3e:3f:58:9b:72:71:ce:d0:a9:
                    c4:a1:4b:f7:a0:2e:b2:15:1f:19:16:7e:11:b4:c4:
                    e8:3d:a6:97:0f:8a:b0:f7:6d:91:bf:fd:a3:60:ca:
                    ff:d8:c9:0a:1d:9d:49:11:7a:73:96:37:04:56:c2:
                    94:eb:a1:11:41:fc:69:bb:35:20:e4:96:50:60:40:
                    ea:4a:64:ed:0c:b2:ae:23:46:14:34:59:2e:45:ae:
                    ec:d3:8b:2c:66:d0:d6:83:79:80:3f:0d:33:25:8d:
                    a5:72:89:46:ca:34:a3:a6:7e:1a:ad:6e:ef:9a:ff:
                    2e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:5E:24:80:6A:1C:B6:AF:B3:40:D4:16:D9:C4:4F:CC:DC:33:B5:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/ecceb7ee-c53a-37be-bf81-070820493d94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.30.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:89:0f:63:4e:d3:e8:fa:26:b1:7a:d5:5e:9e:fe:58:7b:a8:
         dc:b0:c5:18:e4:ba:7f:75:6a:5b:d9:12:ea:f3:38:66:0c:b7:
         a8:4e:f5:b6:c7:ca:23:27:5b:41:45:57:16:af:a9:04:39:7a:
         43:48:fc:fa:e0:dd:08:d8:60:3a:15:a8:90:58:64:37:fd:34:
         44:dc:4d:44:37:66:8d:85:a1:07:8e:ee:d0:24:99:8b:e8:9f:
         0c:37:64:86:b3:02:b0:1c:1a:43:fd:69:e0:e8:d1:28:aa:e9:
         12:38:ac:95:07:9e:9c:40:f7:02:11:e5:9d:23:48:76:a3:58:
         ab:12:ef:bd:7e:32:f1:e1:8c:97:15:93:57:75:4b:3a:a3:e7:
         30:59:d1:2c:41:14:77:5f:cf:97:c7:1f:aa:cc:1b:3c:84:cf:
         6c:27:fd:3e:91:45:15:e9:7a:f5:7f:93:71:fc:bc:68:11:38:
         16:ce:b5:2f:f2:da:de:cd:b6:22:c9:fd:0d:e4:b8:07:f8:51:
         09:ea:f5:77:c3:75:a1:61:63:9a:90:84:7b:78:e1:8c:2a:63:
         a7:d1:ab:c5:17:7b:03:e6:a8:76:fa:4d:a9:7d:96:7f:21:0c:
         74:56:df:63:d2:f6:e8:9c:dd:fe:ab:08:14:61:21:5d:ac:ac:
         a2:58:4a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:33:58 2026 by rpki-client