Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/5170e487-be86-387d-a381-02dc8e5e077d.roa
File:                     5170e487-be86-387d-a381-02dc8e5e077d.roa (raw, json)
Hash identifier:          OLlbtRg/g7RIRc9WnlsIcNT0B+eDx91UvQcwsEDECtY=
Subject key identifier:   E4:F1:59:CB:EB:36:E1:C2:16:9D:CC:C0:54:C7:1C:BA:34:14:D7:49
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584D465F98EB161D2D6A92F6A940
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/5170e487-be86-387d-a381-02dc8e5e077d.roa
Signing time:             Tue 24 Mar 2026 13:00:41 +0000
ROA not before:           Tue 24 Mar 2026 13:00:41 +0000
ROA not after:            Mon 22 Jun 2026 13:00:41 +0000
asID:                     63023
IP address blocks:        216.106.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:46:5f:98:eb:16:1d:2d:6a:92:f6:a9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: Mar 24 13:00:41 2026 GMT
            Not After : Jun 22 13:00:41 2026 GMT
        Subject: CN=b3a6e2e0-8286-46ba-aa50-5b500706f8c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8e:82:84:3b:f8:85:74:13:cf:62:d8:52:eb:
                    5e:2e:e8:4c:18:46:62:b1:39:73:99:15:c1:9e:4a:
                    81:05:6b:64:0f:4b:df:19:3a:74:fd:be:ff:05:56:
                    b1:7f:66:51:37:2c:f5:50:26:9d:16:27:9e:37:60:
                    44:7a:7e:88:6b:9e:dd:db:67:2b:5d:2b:d5:ee:c1:
                    ea:88:60:b7:78:00:65:92:13:e3:1d:e5:e3:fe:e4:
                    9d:94:8c:ab:59:13:3f:96:ac:e1:37:fc:42:e6:58:
                    8d:a6:ba:ca:46:d0:a0:a4:61:b8:c0:5c:09:f7:d8:
                    f7:b2:7a:16:24:2b:58:6f:cf:02:f8:b7:06:f8:9f:
                    e6:e1:a4:95:e9:c8:27:d1:b4:c8:50:14:14:5f:34:
                    f7:f7:1e:9b:1f:19:7b:33:7b:a6:cb:f9:12:44:99:
                    18:07:7a:f4:53:48:47:93:59:07:d5:98:66:ad:64:
                    a4:3b:f5:90:b6:8d:41:77:2a:9a:26:07:98:c2:27:
                    4c:82:dc:d4:e8:8b:9f:d9:c6:13:de:7e:fd:33:3e:
                    89:fd:d1:ce:15:fd:62:ac:a9:23:b4:c6:78:24:10:
                    c6:69:d2:61:7d:8c:32:92:1b:37:fd:60:7e:1c:9f:
                    7a:c3:a7:73:78:77:ee:46:bc:12:01:38:3d:bf:4d:
                    5d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F1:59:CB:EB:36:E1:C2:16:9D:CC:C0:54:C7:1C:BA:34:14:D7:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/5170e487-be86-387d-a381-02dc8e5e077d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.106.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:87:c7:bd:ba:45:01:5d:79:2f:84:0b:1a:7a:92:c0:c3:d5:
         94:42:30:27:42:67:c8:45:ce:c2:6c:e7:c3:8a:b8:af:66:87:
         ab:17:54:8a:8b:61:5d:26:cc:10:73:e4:e1:ef:86:32:e3:c4:
         98:b1:2a:9d:6c:48:d1:6c:9a:37:3e:f7:6c:89:e4:8e:46:a1:
         e7:d0:6d:9d:51:5e:6a:e2:80:df:50:d3:8e:07:b8:fa:f2:30:
         2e:27:6d:1a:08:72:d1:46:25:ef:57:ce:98:80:d0:41:c8:fd:
         8f:59:8a:3d:e3:85:5e:07:48:a7:27:aa:90:bf:97:8c:e8:b3:
         38:26:d0:e3:89:e4:50:03:b4:94:64:4e:fd:e6:bc:ea:2a:3b:
         78:8a:c5:e9:fe:01:3f:03:62:3d:cc:71:a5:5b:e6:da:46:d1:
         6c:3a:dd:d7:82:2a:b6:ee:8a:21:92:62:17:d8:6b:f8:81:2a:
         d1:a2:db:05:f1:17:89:7b:3c:5f:fb:3c:34:61:ec:fb:57:9a:
         35:ba:ac:ef:86:2b:2d:49:6d:f8:7b:26:40:e7:10:f7:78:79:
         69:39:80:69:0a:47:e6:b3:a8:d2:b8:76:26:c0:8d:bf:0a:76:
         51:ba:3b:a6:e6:ae:97:75:60:12:d0:7d:9f:f8:4b:83:f9:34:
         c6:30:7d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:11:10 2026 by rpki-client