Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/a4e09fff-effb-341c-b97f-cdb36ea277ae.roa
File:                     a4e09fff-effb-341c-b97f-cdb36ea277ae.roa (raw, json)
Hash identifier:          507wa3pbFQZzPIHRaqh292KBSsjQLTE1gG6bEYSQQLE=
Subject key identifier:   12:E3:44:DF:EF:5B:9F:3A:7D:94:1E:14:55:C4:92:8E:08:7A:EF:57
Certificate issuer:       /CN=70212b19-99d4-4532-a7e0-a5bdbef20170
Certificate serial:       010D0C9F4328584D8EF55BD857804BA8DF05C000
Authority key identifier: 10:3A:37:8A:5C:7E:F2:98:FB:74:3D:2C:6D:62:04:89:CA:64:A2:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/a4e09fff-effb-341c-b97f-cdb36ea277ae.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     17151
IP address blocks:        216.147.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/70212b19-99d4-4532-a7e0-a5bdbef20170.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/70212b19-99d4-4532-a7e0-a5bdbef20170.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:5b:d8:57:80:4b:a8:df:05:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70212b19-99d4-4532-a7e0-a5bdbef20170
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=c21b42a4-009b-47d0-9c77-d00ae7c276f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:91:fc:aa:ef:e0:52:1f:f2:e4:af:7d:56:7f:
                    1f:39:1b:d3:95:75:b8:58:96:ff:42:f0:35:69:1e:
                    3f:91:b0:3e:ef:c7:3c:da:26:70:39:bf:d6:af:41:
                    e3:7f:3a:e4:4d:3f:9f:15:9d:c8:25:45:65:41:df:
                    84:98:7d:c9:77:4c:34:f9:f5:fa:0e:9b:8c:64:b0:
                    fe:c0:dc:5b:7f:2d:fc:99:67:0c:97:4a:89:a6:b0:
                    05:02:fe:c9:5f:28:91:a4:85:a4:ec:c5:c6:b5:39:
                    44:b2:86:cc:cc:6d:9e:fe:c0:6f:41:b7:a3:31:84:
                    3b:cc:60:41:97:0e:18:b5:4c:28:ea:52:50:8d:e6:
                    15:56:0c:77:ea:22:e8:6a:b5:38:fa:e4:24:ed:0a:
                    d6:35:9a:33:64:7d:24:84:ef:85:39:fd:b2:80:c2:
                    00:42:07:c8:e9:bc:49:4c:ae:53:02:dd:df:e0:1c:
                    1e:62:46:4a:df:6e:1e:9b:5a:ec:fd:c4:4e:d1:e6:
                    50:53:ac:cf:5c:39:c7:96:5c:1f:81:80:c3:3e:02:
                    f1:1d:c1:35:31:ce:04:46:aa:25:42:60:82:bb:9d:
                    7f:40:67:90:85:45:7e:61:12:4d:01:72:09:8f:26:
                    30:2d:f3:1a:20:d0:5e:f8:66:ae:c6:4d:a1:a2:08:
                    09:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E3:44:DF:EF:5B:9F:3A:7D:94:1E:14:55:C4:92:8E:08:7A:EF:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/a4e09fff-effb-341c-b97f-cdb36ea277ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/70212b19-99d4-4532-a7e0-a5bdbef20170.crl

            X509v3 Authority Key Identifier:
                keyid:10:3A:37:8A:5C:7E:F2:98:FB:74:3D:2C:6D:62:04:89:CA:64:A2:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.147.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:ea:26:c6:7b:85:ca:91:99:ba:72:9b:01:4f:22:af:c3:2a:
         98:0f:ad:d8:c3:8f:66:24:18:36:41:dd:ae:2b:f3:2b:a1:d2:
         92:78:5e:da:ef:d6:98:e5:81:ac:af:a2:11:5d:c4:ce:0e:b6:
         0c:96:8d:8f:18:25:bf:b6:2a:ac:a0:7a:e9:d5:14:52:aa:5b:
         92:72:28:ae:a7:7e:53:cc:61:cb:5a:48:f6:65:81:dd:20:26:
         36:2f:e8:7e:3a:d8:b4:b3:a4:16:6d:4b:f0:ea:58:41:fe:f5:
         c3:97:3a:eb:58:1b:5a:86:56:cd:9a:df:3b:98:af:c3:45:51:
         71:8a:52:75:66:98:35:ef:b3:2b:f0:ad:fc:a9:4e:d7:d3:56:
         d5:ec:91:57:d6:f7:ff:6b:87:24:de:07:3f:67:62:54:35:37:
         0a:4b:04:de:c5:4b:36:19:0e:6a:43:73:a2:f3:ed:a6:91:18:
         a2:70:47:c8:ed:eb:06:19:72:d9:61:98:a4:dd:1e:c9:a6:d5:
         b2:bd:e3:66:20:65:6f:7c:8d:c2:31:da:7d:f1:3c:00:13:e3:
         f6:9d:d0:11:bb:23:e5:4b:fb:91:d2:0f:00:87:37:90:0e:e5:
         a7:d7:e8:89:ca:b3:cc:f4:ad:40:1a:1e:3a:c8:eb:f8:a3:4d:
         49:5f:74:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:12:13 2026 by rpki-client