Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/f3ee6206-5ccc-3c8d-82d7-33540b7bfcad.roa
File:                     f3ee6206-5ccc-3c8d-82d7-33540b7bfcad.roa (raw, json)
Hash identifier:          W3sJUGJGJaB82MbcnzElnDhmqPRiJNfpXRdvQhYq31Y=
Subject key identifier:   17:A1:F1:8D:5B:46:B1:9E:5F:DB:2F:A6:B9:69:FA:A0:73:FD:D6:40
Certificate issuer:       /CN=24652152-0111-4df2-a7ef-61ad3cdecb58
Certificate serial:       010D0C9F4328584DBBA0580829D4245F8020C680
Authority key identifier: 59:0F:20:E3:0E:B7:11:6E:4F:E7:33:BD:03:59:36:F0:2B:C5:EC:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/f3ee6206-5ccc-3c8d-82d7-33540b7bfcad.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     13389
IP address blocks:        216.179.132.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/24652152-0111-4df2-a7ef-61ad3cdecb58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/24652152-0111-4df2-a7ef-61ad3cdecb58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:58:08:29:d4:24:5f:80:20:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24652152-0111-4df2-a7ef-61ad3cdecb58
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=43d59682-6afc-44b5-9791-87c8e9021afc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8b:62:91:20:3f:93:ce:45:03:60:ac:15:6f:
                    0c:cf:7a:97:33:3f:6a:94:16:13:0b:83:3d:0b:a7:
                    b6:56:e8:1d:d0:1d:af:ce:45:af:da:09:07:20:3f:
                    c7:66:1f:83:42:e8:80:f8:46:76:a7:1c:85:9d:0c:
                    9c:6b:55:3c:f5:1d:84:b8:74:62:93:bc:59:5d:0c:
                    89:df:48:e3:96:0e:22:c6:c8:df:a1:b0:e7:a4:70:
                    ab:b9:7f:51:0d:ed:92:53:a2:91:89:7d:6b:fc:20:
                    8b:20:91:10:67:b6:0f:83:a7:c9:9e:a3:96:35:f1:
                    b8:b5:b0:ac:4a:9d:79:11:8c:29:07:5e:be:83:f3:
                    92:bd:d7:1f:7a:5a:82:ce:6a:d1:44:57:14:09:d1:
                    ae:37:d4:93:99:ca:93:db:e6:49:22:26:6d:9a:1b:
                    91:3d:f8:62:83:32:53:73:8e:8d:bd:37:dd:c6:f5:
                    ba:b1:08:ec:d9:6e:c1:91:73:b4:da:c2:37:7b:ad:
                    8d:3d:4a:48:6b:e6:1c:3b:ac:92:13:a4:0f:91:57:
                    79:ac:c5:bf:be:65:5b:67:4c:b1:02:ca:58:51:dc:
                    e0:eb:9f:94:d0:30:75:21:9b:e0:05:3c:ce:9d:98:
                    ac:47:61:7a:b9:4b:78:91:f7:6e:a6:76:f4:46:5e:
                    40:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A1:F1:8D:5B:46:B1:9E:5F:DB:2F:A6:B9:69:FA:A0:73:FD:D6:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/f3ee6206-5ccc-3c8d-82d7-33540b7bfcad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/24652152-0111-4df2-a7ef-61ad3cdecb58.crl

            X509v3 Authority Key Identifier:
                keyid:59:0F:20:E3:0E:B7:11:6E:4F:E7:33:BD:03:59:36:F0:2B:C5:EC:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.179.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:08:c0:12:78:86:85:94:df:66:61:35:f1:11:61:8b:51:74:
         66:98:40:69:45:68:9e:be:2d:6f:5d:b1:92:65:28:6f:e1:31:
         34:9f:0e:60:5a:ad:cd:20:29:f9:5d:cd:bb:cb:57:e1:45:8c:
         66:3f:ad:4e:ca:c1:8b:5d:7e:c4:8f:f1:b6:2c:e5:f7:1a:bd:
         5e:94:33:15:66:d0:d6:3e:2d:6d:99:c3:d3:5b:5d:e1:8b:77:
         64:84:26:b5:4f:8f:e4:08:4c:bc:66:bb:91:5b:d3:e1:d6:e7:
         9a:22:ee:3d:7c:40:fd:7b:26:88:81:7b:38:21:7e:df:2e:c9:
         dc:66:76:f0:92:cf:54:81:bb:4d:9a:71:8f:f2:f1:3c:f7:c4:
         2e:42:d8:87:68:03:ef:16:5b:40:3c:c6:c5:cd:7e:74:97:0c:
         73:c6:50:b4:95:6b:54:a7:0c:62:a1:3d:dd:cb:a5:ae:74:12:
         ec:6d:52:f0:47:7b:21:81:4c:f5:d3:60:45:e6:33:2c:d5:23:
         6d:36:86:83:09:b3:82:f1:fa:19:30:e4:89:52:17:5b:0e:fc:
         6e:40:f3:22:b3:e1:dd:de:f6:2e:d4:c9:28:6a:34:21:29:af:
         8b:2e:cb:58:21:5c:23:64:c4:93:11:95:8a:cb:a7:cc:65:b7:
         33:a0:42:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:12:42 2026 by rpki-client