Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/16255b9f-a25e-3220-a36b-c0b6c64c9125.roa
File:                     16255b9f-a25e-3220-a36b-c0b6c64c9125.roa (raw, json)
Hash identifier:          gZuliXqDMnoizTSeWYZkDO+H0HzWYHd0HCpr0yaZOxo=
Subject key identifier:   A1:70:2B:EC:A4:FA:D1:EA:8A:D4:0A:FA:9F:B2:65:E8:92:9D:83:D3
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584D9A202FD4DC18DC52F03E42E0
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/16255b9f-a25e-3220-a36b-c0b6c64c9125.roa
Signing time:             Thu 23 Apr 2026 13:00:32 +0000
ROA not before:           Thu 23 Apr 2026 13:00:32 +0000
ROA not after:            Wed 22 Jul 2026 13:00:32 +0000
asID:                     62904
IP address blocks:        173.232.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:20:2f:d4:dc:18:dc:52:f0:3e:42:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Apr 23 13:00:32 2026 GMT
            Not After : Jul 22 13:00:32 2026 GMT
        Subject: CN=6e746d11-b0ec-4bfa-8a5b-a4052e97c894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a7:77:de:f9:5d:fe:d6:0d:1c:87:29:3c:70:
                    93:8d:a6:6a:92:c6:04:9d:83:4c:af:80:86:95:9b:
                    be:ee:6b:37:1d:6b:1b:99:7d:9b:a0:8a:31:76:8c:
                    58:fd:c9:bf:d7:01:cd:51:fe:e5:c2:4a:dd:25:0e:
                    38:23:79:0c:3c:27:27:18:ff:a1:19:a3:a5:b2:80:
                    ad:88:4b:38:21:c2:90:72:b6:68:e7:02:2a:0b:91:
                    6b:29:14:92:36:f4:2a:96:3a:c1:91:a7:82:12:20:
                    f8:27:a1:c8:92:e4:98:10:1d:50:92:a1:ad:4b:49:
                    4c:9f:16:89:b1:69:4c:dc:59:99:35:aa:08:41:5f:
                    0c:7f:27:3d:d0:de:7a:b3:c4:9d:ed:5c:03:c0:4e:
                    55:7a:e5:e7:03:bd:7e:11:48:ae:df:de:69:78:fb:
                    a8:43:09:1c:6b:e6:0a:0d:7b:e7:63:ff:7b:2d:32:
                    38:c2:29:7b:13:1e:14:7b:6e:84:97:13:99:2d:0e:
                    45:a2:67:af:6a:dd:d0:95:48:54:3b:6a:92:8d:a2:
                    48:a7:95:43:5b:31:d0:89:e2:e0:f8:0c:8f:e0:9f:
                    3a:31:a9:f6:b1:60:d7:2a:95:59:d5:e8:fc:39:6c:
                    95:35:f7:5a:9c:87:ca:39:ff:f6:fd:f2:76:3c:4f:
                    8e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:70:2B:EC:A4:FA:D1:EA:8A:D4:0A:FA:9F:B2:65:E8:92:9D:83:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/16255b9f-a25e-3220-a36b-c0b6c64c9125.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.232.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:34:c0:98:ee:5b:12:90:e5:ff:34:39:ce:64:bf:ef:62:8b:
         d6:5c:80:57:b2:43:66:46:c6:79:d9:e0:6a:d2:93:7f:6e:d0:
         05:be:24:23:c2:40:03:a7:ef:c6:02:e2:e3:26:e5:48:ad:c1:
         0a:30:b6:05:e9:70:a1:c8:38:a5:b1:43:70:65:66:a8:67:1b:
         e5:f3:1d:2d:3c:5f:c5:d4:be:fe:a2:c5:e6:ce:83:cb:48:dc:
         8f:53:e5:70:9c:d1:b2:85:42:12:f1:71:fc:cf:44:c6:9c:fe:
         67:d1:8e:e2:78:16:1d:cd:55:00:d3:58:56:e9:fb:dc:98:68:
         63:6b:ed:65:70:69:a8:56:f8:4a:62:86:8d:c2:0e:31:6c:43:
         7d:4f:c2:13:ef:dd:dc:2c:36:a4:d5:b8:5d:56:14:b1:8e:1f:
         93:82:f3:ea:17:a1:f8:0a:7d:45:89:b5:73:8d:13:7c:00:af:
         87:3a:50:e4:5c:69:92:af:8c:c1:37:72:6e:d2:4b:95:55:0d:
         c3:d2:0c:20:33:68:c0:86:42:25:f4:cd:c1:39:9a:79:76:19:
         1e:d2:04:c4:dc:9d:de:39:8d:98:4d:66:24:7b:e8:3b:a3:33:
         5f:46:6a:99:8c:0a:4c:18:21:a3:ca:ed:28:f8:e3:f0:ae:03:
         81:e6:6a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:55:42 2026 by rpki-client