Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/43514f71-a744-3467-a212-dd18ec460efc.roa
File:                     43514f71-a744-3467-a212-dd18ec460efc.roa (raw, json)
Hash identifier:          nTUO1q3URFlbbcwo8kg12DoP96B6gKzalfsJGT3r0TE=
Subject key identifier:   0F:6E:6F:45:8A:07:E3:90:0C:50:BE:0C:03:C3:55:AB:22:58:68:78
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584D465F9820E0940836093B1CA0
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/43514f71-a744-3467-a212-dd18ec460efc.roa
Signing time:             Tue 24 Mar 2026 13:00:41 +0000
ROA not before:           Tue 24 Mar 2026 13:00:41 +0000
ROA not after:            Mon 22 Jun 2026 13:00:41 +0000
asID:                     63023
IP address blocks:        216.106.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:46:5f:98:20:e0:94:08:36:09:3b:1c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: Mar 24 13:00:41 2026 GMT
            Not After : Jun 22 13:00:41 2026 GMT
        Subject: CN=46965db8-29e0-4dae-9f69-9479608ab0f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:20:b6:f8:55:3a:62:67:3e:21:9c:c8:84:d1:
                    71:6b:fe:3d:5b:bc:3a:3b:89:5f:11:b1:64:11:36:
                    80:c6:34:77:40:8b:0e:76:86:1d:11:cf:56:22:f1:
                    b4:ab:26:fb:67:ab:d0:2c:fd:33:57:63:76:bf:e3:
                    5d:1b:5e:a1:0a:e7:1d:17:52:8c:1c:53:67:7f:0d:
                    f0:de:58:91:0d:5d:81:8e:ae:38:36:4b:42:91:60:
                    52:c2:4a:82:d7:2d:bf:07:2f:0b:05:e7:58:ba:42:
                    ec:cc:7c:5a:30:77:7c:c7:78:c9:f6:ee:ec:e5:48:
                    00:ec:7c:51:33:bc:81:65:f3:1c:b5:78:7b:74:05:
                    bb:6c:e0:cb:28:b3:da:75:0c:97:37:73:85:b5:fa:
                    19:25:3a:7c:8f:eb:23:ba:54:2a:0e:24:79:28:6e:
                    d8:9a:a3:69:bb:51:ae:57:3e:3a:f1:aa:60:e1:e8:
                    a7:92:c2:16:ec:44:d3:f6:c2:2a:7f:5d:3c:e4:af:
                    98:21:0b:e4:21:a0:93:d3:28:c2:b3:1c:d1:aa:ad:
                    2e:98:97:1a:b9:37:cf:b3:e0:87:cc:fb:5d:4c:c9:
                    02:c8:55:e6:32:9e:d4:aa:9e:fd:25:fd:75:f8:59:
                    a3:c7:3a:f0:62:d7:1b:f8:3c:89:d0:d7:96:1e:92:
                    e1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:6E:6F:45:8A:07:E3:90:0C:50:BE:0C:03:C3:55:AB:22:58:68:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/43514f71-a744-3467-a212-dd18ec460efc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.106.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:12:71:6f:53:20:6c:88:4b:2f:a1:c7:9c:1d:32:0f:27:f3:
         0d:b5:d9:e2:ba:1a:e4:ca:c7:5f:54:84:fb:04:4f:93:f9:e4:
         f0:14:5b:e6:3d:2a:f1:82:66:c2:5b:e1:e9:38:11:51:38:51:
         63:71:4d:18:22:2a:2c:63:d2:b0:1f:9a:c5:54:1b:87:4d:5c:
         09:b0:c1:cf:8d:2d:50:19:69:8a:8a:b4:4e:c0:4a:51:bd:c5:
         65:3b:a3:c5:16:c0:3c:ee:a8:6f:41:4b:90:d4:a5:d7:c8:b3:
         62:78:ae:ff:06:0d:82:3e:40:c7:ad:1b:8e:a5:b3:73:27:d5:
         14:de:02:0f:a4:f3:cd:54:48:75:e5:fb:63:62:3e:fd:eb:57:
         7d:15:d3:61:8b:b6:44:25:5a:cf:a9:c0:af:9f:18:9d:07:0e:
         39:a6:94:e4:ba:56:8f:35:dd:6f:eb:81:37:de:9c:b0:a3:ab:
         63:00:5f:85:30:a2:67:4b:be:db:2d:fc:9e:14:3c:64:b5:5e:
         d3:4c:57:e4:d4:6e:67:9f:18:f1:cd:11:4e:84:c7:92:90:12:
         e5:04:81:ec:11:39:7b:1f:57:d2:19:0e:58:32:cb:a3:f1:f0:
         3f:71:00:fc:fa:f7:88:f4:97:7b:fe:9d:0f:10:82:fb:5c:30:
         b9:eb:ff:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:35:12 2026 by rpki-client