Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/0a0a7cf3-e3b3-3035-9148-3d40125001d8.roa
File:                     0a0a7cf3-e3b3-3035-9148-3d40125001d8.roa (raw, json)
Hash identifier:          HJZvJ/77UDr/DfcEZKEYuHvvB6GHCAdhLpVIj4mowds=
Subject key identifier:   F8:09:9F:10:75:2A:FA:3E:C8:05:CB:92:9D:61:DD:9F:3B:1A:D1:D6
Certificate issuer:       /CN=484f9c2c-238b-4d23-8e8b-ab2f5a0147c1
Certificate serial:       010D0C9F4328584D0EA7C16C75283B044959E600
Authority key identifier: 26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/0a0a7cf3-e3b3-3035-9148-3d40125001d8.roa
Signing time:             Wed 04 Mar 2026 14:00:41 +0000
ROA not before:           Wed 04 Mar 2026 14:00:41 +0000
ROA not after:            Tue 02 Jun 2026 13:00:41 +0000
asID:                     32554
IP address blocks:        216.162.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0e:a7:c1:6c:75:28:3b:04:49:59:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=484f9c2c-238b-4d23-8e8b-ab2f5a0147c1
        Validity
            Not Before: Mar  4 14:00:41 2026 GMT
            Not After : Jun  2 13:00:41 2026 GMT
        Subject: CN=4eabed69-2e8c-4ae6-a8a8-b7bf89ad666b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:25:aa:f1:95:40:1c:bf:5a:2f:79:3c:33:7e:
                    e9:84:11:c0:46:aa:7c:33:54:25:36:60:d5:51:ed:
                    15:3e:20:9e:ca:26:f9:02:54:1e:ca:4c:0f:e1:29:
                    b9:3f:85:fb:3b:0e:7d:39:68:5f:65:f7:87:c0:df:
                    5a:3a:0e:95:bb:b8:17:3e:9c:4a:0c:d7:99:23:2c:
                    39:2a:81:3f:ef:11:61:2f:8c:aa:40:44:a5:24:0c:
                    31:b4:50:50:47:0e:89:9a:27:97:d5:67:ac:78:55:
                    50:a7:01:78:c3:57:bd:0a:14:5f:7c:e7:08:b1:24:
                    e6:3e:c8:28:68:b7:f7:a7:c4:7c:f9:f3:b5:a1:15:
                    e9:e0:e3:c5:a6:1a:6a:5e:d0:3c:ff:3d:56:29:ce:
                    03:62:2e:33:7e:8d:ef:1a:c6:68:9c:8b:57:58:13:
                    39:12:18:a5:e8:ca:8f:e9:81:12:db:e1:2f:2a:ac:
                    ad:d0:c3:4e:99:bb:2f:f6:6a:5e:54:bf:8b:f6:82:
                    fb:08:69:ea:a5:f3:8f:47:d1:c6:cf:ca:a6:7b:22:
                    a0:0f:f3:79:66:9c:28:8b:e4:c9:0b:cf:ec:9f:67:
                    15:78:36:c5:43:a9:c6:1e:38:ba:bd:18:84:fa:2c:
                    5a:e3:9e:40:1a:05:bd:fd:dc:b7:36:cb:db:a6:2a:
                    77:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:09:9F:10:75:2A:FA:3E:C8:05:CB:92:9D:61:DD:9F:3B:1A:D1:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/0a0a7cf3-e3b3-3035-9148-3d40125001d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.crl

            X509v3 Authority Key Identifier:
                keyid:26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.162.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:82:cc:23:36:53:b2:3c:22:80:6c:ed:66:75:29:f7:b7:c3:
         83:dc:1f:f7:3e:a0:6c:1e:24:eb:48:9c:2c:6a:d8:9c:68:14:
         c1:66:71:bf:e7:3b:69:89:00:13:f3:00:3e:44:9e:03:81:b5:
         8b:c4:06:83:37:ef:41:58:a5:80:46:0a:02:38:40:1f:96:c8:
         b1:77:f2:fe:28:02:1b:db:89:3a:3b:f7:ec:eb:11:7f:94:01:
         8f:33:a9:56:6d:59:1c:b7:d8:cd:00:20:e3:0e:5b:bd:31:52:
         22:1e:de:ba:3f:b7:67:e2:50:5c:c8:c9:80:ae:9d:21:c5:a5:
         1a:96:9d:f7:1b:39:39:98:55:86:c6:09:4a:45:c1:9a:ce:41:
         eb:2b:5f:62:00:ce:3e:ba:77:8a:f3:c2:93:db:02:cc:e3:77:
         46:63:0f:57:14:56:ee:8d:bf:7b:70:63:8e:a3:08:f8:24:c9:
         5e:73:ca:61:97:10:be:6f:db:a2:df:61:9d:bb:85:43:23:ac:
         f6:9c:de:3f:fa:1d:8c:44:f1:eb:12:04:d2:29:4f:12:b0:f1:
         eb:49:1e:f7:12:c8:95:4e:50:37:c2:c1:ac:14:9a:96:36:3e:
         dc:63:b8:49:d0:f2:8f:52:44:32:db:11:8e:cd:9c:15:1c:56:
         42:62:fc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:30:25 2026 by rpki-client