Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/68750166-4892-3351-8eee-2c8c63629289.roa
File:                     68750166-4892-3351-8eee-2c8c63629289.roa (raw, json)
Hash identifier:          T9fBweklRTqD+3lLucrl4dco8rR+YBqvTbcqadFo1eU=
Subject key identifier:   23:3B:42:1F:B9:C8:54:FB:C5:1B:F7:8D:62:08:A9:08:66:D5:C5:BD
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F4328584D0BDD016CF56E57D5B596C9A0
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/68750166-4892-3351-8eee-2c8c63629289.roa
Signing time:             Tue 03 Mar 2026 14:00:40 +0000
ROA not before:           Tue 03 Mar 2026 14:00:40 +0000
ROA not after:            Mon 01 Jun 2026 13:00:40 +0000
asID:                     15169
IP address blocks:        216.252.222.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0b:dd:01:6c:f5:6e:57:d5:b5:96:c9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Mar  3 14:00:40 2026 GMT
            Not After : Jun  1 13:00:40 2026 GMT
        Subject: CN=b110656f-ee5d-4d69-8bca-2dd1133ef8fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ae:19:80:9e:1e:95:fa:8f:dc:ea:19:4b:16:
                    3e:8c:a2:ef:b0:11:96:f4:97:a7:a6:a1:36:04:9a:
                    fb:41:0a:1a:07:c0:9e:43:e7:3d:40:9d:cf:56:2a:
                    2a:10:cf:01:8a:e5:e2:4c:99:b4:3f:cd:72:7a:4c:
                    18:6f:44:f0:8b:03:e5:40:d6:4d:88:47:af:76:89:
                    57:ee:dd:fc:ea:e9:84:28:74:da:33:c3:a5:83:45:
                    12:61:bf:3c:41:bc:ad:f2:00:2a:72:4f:54:f6:14:
                    7e:ef:cf:b7:2d:73:62:eb:54:8d:46:29:d4:50:a2:
                    f4:3d:13:e8:e2:bf:ef:95:dc:0d:0a:17:47:8b:34:
                    d9:09:31:92:8b:47:07:6f:c1:ff:27:2c:d2:5a:ee:
                    eb:17:6a:6e:b9:d1:d7:6a:19:ae:c1:c4:36:82:a0:
                    63:e0:8d:79:fa:cb:22:ee:3c:03:98:21:04:24:b1:
                    28:9d:df:ca:96:3f:36:c5:bd:82:90:1e:a7:f8:4a:
                    98:0b:86:17:54:1c:8d:d0:b1:a2:2f:3d:3b:6b:79:
                    81:24:b4:c8:cf:4e:46:ce:fe:54:22:d0:18:ce:dc:
                    6b:67:6e:f7:69:da:12:bf:41:da:52:0e:d9:59:93:
                    04:06:57:b8:a1:88:0f:02:d7:1a:08:6a:f5:3b:58:
                    b7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:3B:42:1F:B9:C8:54:FB:C5:1B:F7:8D:62:08:A9:08:66:D5:C5:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/68750166-4892-3351-8eee-2c8c63629289.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.252.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:ec:d6:95:20:e3:1d:df:6d:0a:07:3e:54:b6:b5:6c:cb:88:
         37:6d:c7:a2:74:a5:71:f9:08:f0:d6:19:16:b8:28:7a:c4:14:
         c7:02:d6:4a:ba:5c:91:98:1c:eb:d3:43:f8:b7:49:20:43:98:
         a5:76:4e:0e:3b:0f:b3:08:7d:3a:9c:27:8f:8c:29:6b:f7:53:
         da:24:f2:eb:36:7c:cb:ec:86:0e:1c:86:7d:7d:4b:b5:e6:90:
         51:41:9a:57:c3:e6:55:9f:af:dc:4d:a3:7b:30:75:81:bc:94:
         02:01:f0:e8:52:29:bc:84:8e:b3:70:85:f9:cb:9b:87:c2:cb:
         a3:3c:22:02:d7:dc:6d:7a:5e:29:d4:2d:73:e6:d2:64:70:5b:
         4e:00:9f:85:94:42:92:3e:28:88:92:ef:01:34:5a:2e:61:d2:
         07:c1:3f:c0:bc:ec:38:f5:02:66:78:3e:b4:83:0c:50:b5:e2:
         f7:6e:67:83:b2:aa:90:8c:3b:90:be:94:b2:94:20:60:40:55:
         a1:62:c2:e3:ca:a3:a0:ac:ab:90:b5:48:42:b6:ff:77:c1:5a:
         84:16:8f:33:f1:7a:fb:b2:c1:4c:c0:82:91:e2:64:85:6d:fa:
         43:5e:eb:08:48:48:5a:3a:dc:91:17:cf:a2:00:1e:a3:22:a0:
         b4:10:25:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:10:55 2026 by rpki-client