Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7d5d9018-e952-3dc5-a7f5-8fa28ce0a03a.roa
File:                     7d5d9018-e952-3dc5-a7f5-8fa28ce0a03a.roa (raw, json)
Hash identifier:          gk1EXD38gNNonU1b6UCsoOXdJC92kDVBlvSd9EpvaQI=
Subject key identifier:   D4:8F:D7:44:97:62:7B:24:05:6F:AC:30:5A:EB:AB:7B:1A:3B:A8:99
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584D2BDA1BEC75F48AD9C12E1A40
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7d5d9018-e952-3dc5-a7f5-8fa28ce0a03a.roa
Signing time:             Sun 15 Mar 2026 01:00:32 +0000
ROA not before:           Sun 15 Mar 2026 01:00:32 +0000
ROA not after:            Sat 13 Jun 2026 01:00:32 +0000
asID:                     64267
IP address blocks:        216.213.24.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2b:da:1b:ec:75:f4:8a:d9:c1:2e:1a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 15 01:00:32 2026 GMT
            Not After : Jun 13 01:00:32 2026 GMT
        Subject: CN=f455ad69-db64-4a33-9dfd-8890ef9eeb6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c4:98:12:d6:40:d6:4a:ee:c8:e0:c4:88:44:
                    eb:a8:5f:d5:49:1c:ad:be:41:f4:be:35:5a:dd:08:
                    f8:8d:bc:e0:dd:36:72:56:64:8e:69:ee:17:4b:39:
                    3e:a2:85:32:b4:ef:27:eb:2e:04:b9:50:da:b6:f3:
                    7c:64:97:49:4d:5b:57:f1:94:dd:82:71:e9:32:9c:
                    84:db:c0:87:47:46:07:a2:de:6c:e3:fa:e3:00:c5:
                    db:e1:19:f7:44:b0:85:d2:6b:d0:61:58:6e:f5:38:
                    d2:e9:3a:7d:06:6e:fa:9e:4a:f9:d9:2d:f8:60:f7:
                    29:c8:0d:39:3c:16:d2:b7:28:0e:9f:ed:eb:a9:e4:
                    a3:b4:c4:13:35:91:c4:f7:84:5c:04:5f:52:6e:b3:
                    16:03:01:44:75:d1:85:ec:25:0e:3a:f5:fd:7a:7c:
                    e3:f0:9e:7f:8e:33:31:65:4b:27:79:fc:f5:3a:0d:
                    99:62:84:d6:f0:8c:46:d5:15:e0:9d:8d:3e:66:c5:
                    50:49:32:f5:5f:eb:79:10:df:f2:bb:81:b6:7a:2a:
                    1e:7b:c0:ae:ef:45:15:e1:15:17:3b:b7:6a:63:7d:
                    57:f2:e4:6b:f7:da:5f:28:0f:ce:0c:01:ed:10:ee:
                    7e:e4:c5:21:99:98:a5:8d:58:91:da:e0:2d:0d:a1:
                    f5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:8F:D7:44:97:62:7B:24:05:6F:AC:30:5A:EB:AB:7B:1A:3B:A8:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7d5d9018-e952-3dc5-a7f5-8fa28ce0a03a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.213.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:18:46:d6:20:87:00:75:27:03:8d:5b:08:9b:79:8b:c0:2c:
         ba:7a:ed:57:a9:7b:c9:f9:69:26:ec:89:f2:04:fd:4c:01:98:
         29:25:16:17:b7:63:12:e2:28:91:89:b9:71:28:6f:2a:c2:5a:
         d6:09:89:e0:75:8c:66:64:9e:91:09:c2:8e:4d:fd:4c:be:c4:
         95:35:a7:75:ef:7c:03:ed:66:ac:8b:07:8c:e2:18:a6:dd:25:
         d5:2e:e9:f1:30:23:72:23:40:5b:76:10:4e:91:4b:b0:4f:ce:
         54:72:00:5b:a3:a5:1c:b1:44:26:31:24:ac:76:6f:b6:9c:de:
         2f:c4:2d:81:8a:d8:19:0e:d8:74:09:12:aa:91:61:dc:74:56:
         09:78:7d:53:de:f4:77:ac:79:36:15:ce:65:f7:4e:fa:86:1b:
         4f:a6:02:55:aa:f8:44:66:c4:c2:71:93:41:21:2c:c1:3d:c5:
         85:78:ef:0b:5a:9a:17:06:31:ac:98:10:7a:a3:22:3e:81:90:
         a7:70:03:08:52:ba:af:20:e5:cf:7f:8f:eb:df:cc:ec:0c:7a:
         7e:93:5d:dd:a9:6e:b8:7e:5d:5c:74:6b:cb:39:66:62:51:88:
         44:93:c6:ad:d0:86:23:3a:50:68:6c:02:1c:de:1c:14:03:40:
         e9:75:a6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:08:28 2026 by rpki-client