Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/5934f569-60d1-301f-83c3-a995ce9bab5f.roa
File:                     5934f569-60d1-301f-83c3-a995ce9bab5f.roa (raw, json)
Hash identifier:          TDwO0Vuc2Hs/qWwKHSVANatBGeZ9kW+J/kCyQvmqlR0=
Subject key identifier:   D7:54:30:3F:F2:CF:51:5B:2D:40:49:4F:71:7A:0A:E8:B9:05:18:E8
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584D465F9ADEEB27111811921F80
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/5934f569-60d1-301f-83c3-a995ce9bab5f.roa
Signing time:             Tue 24 Mar 2026 13:00:41 +0000
ROA not before:           Tue 24 Mar 2026 13:00:41 +0000
ROA not after:            Mon 22 Jun 2026 13:00:41 +0000
asID:                     63023
IP address blocks:        216.106.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:46:5f:9a:de:eb:27:11:18:11:92:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: Mar 24 13:00:41 2026 GMT
            Not After : Jun 22 13:00:41 2026 GMT
        Subject: CN=9ed885bb-ddb6-419c-bcdc-a4ca3e379487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:48:48:7f:a0:1c:51:72:a8:f7:62:7d:c5:5e:
                    57:cd:fb:27:9f:b0:b4:1b:8f:f6:ab:52:31:4b:45:
                    9f:7b:b4:70:45:d6:e0:a4:a0:0c:b7:e1:0e:a5:a9:
                    86:90:b1:ac:67:cb:b3:d6:9a:16:de:5c:51:a5:ce:
                    71:ad:42:f6:5e:d4:68:42:bf:9d:c9:fa:0a:e0:3b:
                    c0:ac:dd:ec:09:05:af:65:f8:a0:a2:85:c0:be:4d:
                    d1:44:a9:8d:03:83:1a:ac:0d:a3:a1:d6:91:92:d5:
                    a8:b4:77:77:42:99:1f:f4:dd:c9:7f:40:de:e5:3e:
                    47:d7:54:02:eb:40:52:60:32:72:7d:47:a5:57:12:
                    87:05:2c:84:d4:2f:78:39:33:08:9b:e0:a9:bb:75:
                    2f:12:82:aa:ad:d3:85:82:25:80:9b:14:bb:46:d3:
                    84:60:c7:4e:a0:75:01:45:24:04:91:35:30:a1:43:
                    25:d6:6f:5c:12:29:c3:31:28:90:85:39:e4:a2:73:
                    2a:75:ae:c6:06:da:a5:dc:5f:a3:c3:30:f2:e7:7d:
                    cd:f8:d9:e3:c3:e9:fa:d9:3c:9d:1f:ea:ea:f0:fd:
                    5c:c2:00:d6:ce:d9:e1:d4:19:d4:85:1f:32:46:55:
                    fe:ec:20:e7:64:9f:11:3b:c2:ef:53:84:02:06:cd:
                    4e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:54:30:3F:F2:CF:51:5B:2D:40:49:4F:71:7A:0A:E8:B9:05:18:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/5934f569-60d1-301f-83c3-a995ce9bab5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.106.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:20:cc:e5:71:48:a0:7c:53:ef:38:51:d1:0c:11:00:18:80:
         13:40:a4:c8:70:aa:83:8c:da:b5:d3:af:a9:e5:e6:4a:a0:58:
         0b:a2:43:0f:c3:0b:d9:ef:e6:b2:55:74:ca:ea:3f:6e:e3:68:
         a9:b5:48:05:ba:1e:3f:50:9b:fb:e9:af:01:99:fb:c8:6a:6b:
         a7:4c:70:64:64:c0:82:48:15:79:67:1b:b0:53:a3:4e:f6:fe:
         78:b1:3c:5b:67:47:8c:ba:3d:61:2e:95:bc:a2:33:2f:54:13:
         a1:34:de:3c:ce:3c:34:62:e2:85:72:bf:d2:8e:72:2a:2c:0f:
         fd:33:8c:50:ed:37:6f:6a:92:a1:f8:c8:d6:44:1e:7e:32:7a:
         97:48:2f:ea:76:c6:33:28:10:98:62:77:51:00:a8:4e:0f:bb:
         98:2a:58:79:17:79:2e:ba:48:98:45:35:05:cb:4d:8a:15:77:
         dd:6f:bc:b2:a3:d0:84:48:f0:6e:d5:18:09:f2:ee:2d:eb:ba:
         3e:95:ce:58:d1:6e:06:c9:13:12:0f:1d:70:97:30:1c:a9:67:
         dd:80:a3:7e:b8:5f:b2:be:28:d1:f9:ca:f5:62:7d:af:c1:4f:
         bc:f8:b3:10:cd:fc:e6:c0:e3:5c:5d:a7:56:f2:d2:7a:6b:de:
         96:df:6c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:44:18 2026 by rpki-client