Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202/5f6d20f4-1ccf-376c-a4d3-1747fb90c69f.roa
File:                     5f6d20f4-1ccf-376c-a4d3-1747fb90c69f.roa (raw, json)
Hash identifier:          QWG+Ei9OF1apoRNU83HV041WxGpKwjz+l7G09oYXb4M=
Subject key identifier:   6F:4D:88:AE:12:7D:79:28:83:02:9D:D9:B4:8E:A5:36:3C:F7:1F:9D
Certificate issuer:       /CN=d91f505a-0b78-4bc4-a857-f86d34163202
Certificate serial:       010D0C9F4328584DCF2B0D59983C4249CC0D1C00
Authority key identifier: B4:AB:B9:C6:85:42:EB:2D:83:E8:01:5B:2F:4A:89:ED:EB:A7:19:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202/5f6d20f4-1ccf-376c-a4d3-1747fb90c69f.roa
Signing time:             Tue 12 May 2026 13:00:30 +0000
ROA not before:           Tue 12 May 2026 13:00:30 +0000
ROA not after:            Mon 10 Aug 2026 13:00:30 +0000
asID:                     14618
IP address blocks:        216.211.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202/d91f505a-0b78-4bc4-a857-f86d34163202.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202/d91f505a-0b78-4bc4-a857-f86d34163202.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2b:0d:59:98:3c:42:49:cc:0d:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d91f505a-0b78-4bc4-a857-f86d34163202
        Validity
            Not Before: May 12 13:00:30 2026 GMT
            Not After : Aug 10 13:00:30 2026 GMT
        Subject: CN=a523091f-71ca-4151-a818-55c4ab7ab8d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a0:8c:0e:a9:e9:09:54:64:86:9e:eb:93:83:
                    c0:2a:1c:66:e9:de:8b:91:a8:23:b0:eb:db:fa:88:
                    e2:ee:39:94:4b:c6:b8:6a:05:12:75:92:33:b6:8d:
                    f0:46:d8:26:b5:d3:20:45:53:df:04:1b:cb:be:c6:
                    56:74:cf:56:a9:ba:00:c1:32:22:70:f8:a7:8e:f6:
                    fd:d7:02:be:5a:c3:fa:15:44:02:b6:7e:9e:0e:77:
                    0a:66:48:de:ad:ff:11:4d:32:69:7c:36:cf:08:9b:
                    a7:e1:5e:27:f3:66:e8:f4:42:8b:fb:4e:7a:2f:79:
                    31:77:ed:92:18:5f:1a:f4:17:fc:5f:ed:34:65:4e:
                    3f:8a:d2:c2:b5:25:c8:aa:4a:8b:c8:29:b8:c2:b9:
                    bf:81:4c:fa:5c:ff:cd:d7:bd:95:0f:f1:71:76:ae:
                    7b:2a:07:e6:de:d7:5b:a7:63:7f:02:b6:ca:61:e0:
                    cf:0b:27:91:c8:0f:67:7f:45:c9:b7:c8:c9:7e:e0:
                    4b:84:8f:a0:bb:38:74:73:96:40:26:54:93:78:c8:
                    e9:7f:10:40:e5:d6:7d:6b:49:f8:68:32:c8:69:64:
                    82:af:65:34:48:4f:18:14:fd:08:e7:12:97:82:2a:
                    d7:05:26:e6:8b:75:e0:1d:ec:30:e7:43:1f:69:d1:
                    f9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:4D:88:AE:12:7D:79:28:83:02:9D:D9:B4:8E:A5:36:3C:F7:1F:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202/5f6d20f4-1ccf-376c-a4d3-1747fb90c69f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202/d91f505a-0b78-4bc4-a857-f86d34163202.crl

            X509v3 Authority Key Identifier:
                keyid:B4:AB:B9:C6:85:42:EB:2D:83:E8:01:5B:2F:4A:89:ED:EB:A7:19:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.211.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:bb:51:91:fd:e4:fc:1c:8b:e2:ae:2e:b4:9d:45:5d:58:3e:
         a1:4c:84:5b:76:de:fa:c6:80:26:77:d7:d7:7d:5a:47:a3:6c:
         0e:cc:61:25:de:97:17:b6:8d:f7:0f:90:bf:5f:0d:61:60:02:
         39:1a:0a:7f:a4:90:98:fe:1f:28:7b:5e:fc:44:ec:f2:33:cd:
         f1:97:36:0d:04:88:76:af:66:bc:fc:8b:a5:7a:2e:a3:33:eb:
         d9:f4:91:e1:a1:ab:40:37:ca:94:f6:f7:50:71:26:d4:f9:b5:
         0d:24:67:25:e3:d1:bb:6b:97:ac:e9:06:7d:c5:35:82:f4:76:
         60:3c:be:c0:0e:f9:ec:58:7e:39:79:e0:a3:0a:1d:33:44:4a:
         91:8c:0c:48:e3:a3:96:d5:72:bf:10:3c:85:14:da:e6:1f:a8:
         54:0f:60:43:92:48:3d:52:6b:ae:7d:46:7e:ff:b3:0f:63:71:
         6e:b2:03:b5:b6:9b:31:88:9c:a6:9c:65:a4:08:72:0a:20:f0:
         d8:c5:62:a0:4a:ed:76:e3:d7:97:a1:f8:c8:09:68:83:71:9e:
         fe:ab:5f:db:ac:c3:6d:e7:58:b8:5a:d6:02:a7:cc:d4:a0:85:
         55:fd:f2:48:6e:30:1c:14:bb:7d:cc:9d:bb:f8:aa:65:03:4e:
         80:6e:b4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:59:44 2026 by rpki-client