Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/9841a9ab-3f7f-38ad-b87c-5b34d9664937.roa
File:                     9841a9ab-3f7f-38ad-b87c-5b34d9664937.roa (raw, json)
Hash identifier:          TjVFNYg/0wAuNiFdpVtInwkXDliuQgaW1aYgWcVMokA=
Subject key identifier:   52:52:D9:0C:8C:7E:47:36:A6:AC:29:99:77:57:35:26:01:CB:84:BF
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584DBA3AFC28752656827AD9E080
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/9841a9ab-3f7f-38ad-b87c-5b34d9664937.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     203963
IP address blocks:        216.24.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3a:fc:28:75:26:56:82:7a:d9:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=d43e611f-aa67-4e7f-88ca-04c16c88dc8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:05:ce:b5:4b:69:c5:94:f4:88:57:58:05:45:
                    54:2f:94:7e:94:5e:c9:f3:a0:15:b9:36:cc:8a:18:
                    74:4b:c7:6d:0f:1b:a1:64:3f:26:40:bf:98:f4:dd:
                    f2:ee:f7:60:d6:0b:33:6f:3c:70:89:f4:4e:55:02:
                    3b:c6:0f:dc:4c:cd:cf:d4:98:fb:da:ed:fd:9a:5d:
                    0c:7e:5a:e3:6a:85:bc:2b:f7:0f:39:9c:cc:aa:10:
                    f5:64:fe:b9:20:00:82:6b:13:49:3e:1b:d6:51:be:
                    c8:1b:fd:32:24:a8:b7:44:8c:7f:4a:98:10:30:98:
                    c7:ea:42:3f:69:c8:1b:98:90:f8:f7:a7:43:b2:66:
                    ea:44:63:35:bc:e5:3f:bd:bb:86:f3:27:f6:91:61:
                    0c:33:f9:5c:aa:8c:6b:60:d0:df:c5:5a:39:94:58:
                    13:09:69:24:eb:8b:0a:da:d1:ae:c7:28:2b:25:89:
                    07:27:d4:63:b0:d4:d1:9d:fb:67:5c:94:d7:73:08:
                    db:28:ad:17:86:40:d2:ac:f3:a1:90:7d:5f:9a:1a:
                    7a:4d:11:c6:75:37:26:6f:7a:84:08:93:fb:07:c1:
                    40:73:ee:cf:6e:63:5b:c7:b9:aa:24:d0:95:fd:da:
                    14:08:6f:3a:ba:b3:7d:de:71:33:c6:d3:fd:7b:4f:
                    fb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:52:D9:0C:8C:7E:47:36:A6:AC:29:99:77:57:35:26:01:CB:84:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/9841a9ab-3f7f-38ad-b87c-5b34d9664937.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.24.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:4c:7f:43:96:ed:a0:31:9e:af:52:10:74:87:17:72:af:e0:
         f2:ef:5c:f2:dc:30:94:db:aa:1c:02:9f:33:c9:b4:f7:a7:59:
         bd:73:44:35:55:0b:25:0c:0a:d9:f9:50:c3:14:b6:27:5f:8d:
         59:f9:25:fb:76:f8:12:81:fb:89:4d:80:c9:ed:c4:4e:a7:14:
         9a:61:1a:c3:2c:e0:be:3f:99:cb:85:cd:23:ad:7a:93:80:98:
         0f:a4:2d:1a:79:c2:b6:b9:0c:da:a1:c2:2b:c3:64:e8:09:15:
         2d:30:90:0d:1b:d6:0f:9a:1d:ba:4b:05:2c:b8:e7:14:f1:08:
         99:61:de:53:75:eb:a3:aa:40:ab:c3:20:4e:fc:e9:61:91:bc:
         06:bb:5c:a7:85:15:8f:34:82:57:64:2a:3a:9c:10:ff:e4:ea:
         92:d2:f4:a5:23:c9:2b:0e:8f:24:33:a0:6c:4c:c4:95:a0:79:
         50:4b:97:00:79:b5:e8:c6:8d:4e:59:7e:27:ec:56:70:a4:fa:
         88:ae:5c:27:06:c1:34:e0:b0:95:1e:9e:e3:8c:b1:98:86:e9:
         e8:fe:f0:57:22:0a:9d:31:59:48:3c:ea:36:f3:fb:8d:59:86:
         32:35:20:7e:0b:b0:ae:d6:37:b3:fc:0c:bb:09:e0:6b:48:72:
         a2:17:fb:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:09:59 2026 by rpki-client