Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/e652628c-2fb6-3fb8-af0d-563e710e91a7.roa
File:                     e652628c-2fb6-3fb8-af0d-563e710e91a7.roa (raw, json)
Hash identifier:          rx8l5e+ZWRc8CGV7MMRqA9V8u0YAO5dyuRLknZHS2Rw=
Subject key identifier:   2D:6B:BA:34:B3:AF:1B:E7:BA:B4:E3:8C:F3:91:38:CF:EB:E4:86:33
Certificate issuer:       /CN=553f7a6d-a8af-4a8d-94c5-858b0b23ab9a
Certificate serial:       010D0C9F4328584D44FA2A778872F5001E325700
Authority key identifier: 2E:15:F5:D4:69:C6:E2:78:C0:E1:5D:15:43:02:AF:9C:83:71:BA:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/e652628c-2fb6-3fb8-af0d-563e710e91a7.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     1054
IP address blocks:        216.40.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:2a:77:88:72:f5:00:1e:32:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=553f7a6d-a8af-4a8d-94c5-858b0b23ab9a
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=eed916d0-2db3-4a99-99a6-2a39420fb1d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b4:1e:37:3c:be:79:43:f8:b2:6f:4d:b0:05:
                    c9:7b:9c:06:9c:1b:3a:61:1d:4e:ab:6c:c2:02:b2:
                    54:36:e8:bd:76:90:e1:91:57:87:bb:21:c6:2f:12:
                    8a:9a:97:ff:34:0d:0c:65:a6:ba:41:f4:5f:c8:1a:
                    67:7a:a8:bc:1a:b4:c0:ef:1a:f1:00:ab:96:59:5b:
                    c0:01:ce:e8:48:61:06:3d:29:1a:93:25:5f:48:68:
                    0f:ab:a9:51:5e:c3:8c:e6:27:f0:6d:f7:ea:53:ca:
                    9c:92:ac:7b:70:be:c7:3a:5c:ab:b3:e9:be:99:85:
                    59:fd:84:63:5c:52:ef:cd:5c:a7:f9:56:43:d6:69:
                    c0:dc:f1:93:9f:30:63:f6:6c:84:e4:86:84:6c:e2:
                    77:14:66:2f:1e:18:9c:e5:6d:e7:8f:60:4d:e2:ea:
                    b4:fb:f0:88:80:44:d1:41:5f:97:75:51:0d:63:ff:
                    43:fe:7d:58:2d:19:18:2b:80:22:af:73:4b:43:7d:
                    7e:dd:52:b6:88:77:e1:94:20:51:2d:c6:40:5b:1b:
                    45:5c:1d:21:55:d5:74:39:80:2d:71:6b:05:f7:c4:
                    09:00:f0:dc:80:fc:fc:13:8d:a7:f1:9e:ae:7d:da:
                    0f:de:4d:8d:d0:55:4c:7f:6f:49:b4:f8:a5:23:2b:
                    da:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:6B:BA:34:B3:AF:1B:E7:BA:B4:E3:8C:F3:91:38:CF:EB:E4:86:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/e652628c-2fb6-3fb8-af0d-563e710e91a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.crl

            X509v3 Authority Key Identifier:
                keyid:2E:15:F5:D4:69:C6:E2:78:C0:E1:5D:15:43:02:AF:9C:83:71:BA:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.40.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:53:03:31:d2:d8:62:5d:d7:e4:2e:1d:b0:0c:bb:e0:ac:fe:
         c2:ea:6c:14:f5:25:87:74:21:95:3c:84:b5:b7:2f:5e:a9:ea:
         9a:1b:51:6e:01:7e:0f:f5:11:e2:95:52:88:60:24:43:9d:98:
         cd:7a:eb:16:d9:2d:1a:d0:43:66:42:27:b0:b0:96:69:59:a2:
         0b:78:48:1c:ba:a1:79:a4:6b:61:76:d5:1c:72:ff:57:b9:34:
         57:ad:25:42:4f:ec:12:91:43:b0:0c:e1:a3:35:5d:f2:11:67:
         4a:f0:03:47:ef:53:80:16:e9:0a:03:cf:62:b4:8a:51:18:9b:
         ff:f0:ba:32:8b:03:63:e5:86:aa:59:d9:26:a8:7d:82:05:f5:
         c1:da:62:09:ef:a3:18:10:e8:f2:ca:fa:a2:ee:6c:85:e0:17:
         3d:a5:22:0d:09:a9:22:9e:44:cc:73:a9:d9:41:5c:a5:49:6c:
         53:88:27:4f:a1:ec:ab:27:5d:8c:33:5e:ed:aa:e2:7b:4b:17:
         7b:38:46:66:38:ff:10:d7:d7:be:f2:7a:ad:60:b5:72:55:89:
         6d:fb:27:b8:47:cc:48:17:b9:90:3f:b0:80:05:62:2b:90:b4:
         43:cd:41:d8:42:a9:53:a4:94:ef:5c:43:e1:5c:ad:8b:75:b9:
         33:1b:e7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:36:19 2026 by rpki-client