Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8b6fff14-b094-3713-a051-4308275fdb21.roa
File:                     8b6fff14-b094-3713-a051-4308275fdb21.roa (raw, json)
Hash identifier:          /HUPTOAf8OlnJ5mreOv6K39Ky3Lc6m5MzZfGDtkBMH8=
Subject key identifier:   9B:DF:9F:A2:1F:BC:11:1B:5A:E4:1C:CC:9D:67:F9:79:61:36:FD:DD
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D47C508E72AC8612F27D2D580
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8b6fff14-b094-3713-a051-4308275fdb21.roa
Signing time:             Wed 25 Mar 2026 01:00:32 +0000
ROA not before:           Wed 25 Mar 2026 01:00:32 +0000
ROA not after:            Tue 23 Jun 2026 01:00:32 +0000
asID:                     5065
IP address blocks:        216.132.124.0/24 maxlen: 24
                          216.132.125.0/24 maxlen: 24
                          216.132.132.0/24 maxlen: 24
                          216.132.133.0/24 maxlen: 24
                          216.132.134.0/24 maxlen: 24
                          216.132.135.0/24 maxlen: 24
                          216.132.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:47:c5:08:e7:2a:c8:61:2f:27:d2:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Mar 25 01:00:32 2026 GMT
            Not After : Jun 23 01:00:32 2026 GMT
        Subject: CN=a2b30ab0-4569-44d0-9ac4-809a6cd0b69b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b1:40:62:45:ad:71:4c:9f:2b:0b:e6:f5:95:
                    38:cd:31:27:f1:c4:03:b8:93:0a:3d:4b:79:84:52:
                    dc:bf:39:a1:a1:a7:08:2d:69:69:d7:7a:ad:bc:66:
                    38:32:5f:6e:4d:3e:79:b3:d3:a8:ff:5b:f0:f2:ae:
                    7b:83:b8:25:e0:09:3c:c2:9f:f0:9d:e7:69:54:70:
                    3f:45:fc:e6:0d:6a:2d:e5:7b:e4:27:fa:05:79:0d:
                    c7:c4:13:1e:a6:3f:14:4c:9f:be:3c:30:06:34:5e:
                    28:a0:b5:e0:46:18:52:12:a6:02:ec:95:be:f0:eb:
                    45:d3:32:9b:73:45:bf:c0:e4:5f:62:60:c6:05:28:
                    e8:74:a5:55:a6:ac:73:96:f7:cf:26:bd:05:e8:55:
                    a9:66:1b:6b:f3:f4:36:9d:d0:f0:4f:18:8a:94:65:
                    0a:34:71:77:88:b0:c3:90:e7:68:e5:63:9f:0f:e4:
                    27:ea:94:9c:f5:80:ec:30:ee:51:5c:ac:06:9f:bf:
                    15:64:08:97:0b:16:b8:4c:d0:2e:7c:b8:88:14:b1:
                    f3:54:cf:df:71:34:49:da:e0:8a:e2:1d:44:0d:90:
                    64:d6:ad:26:f5:86:af:cf:fa:0c:24:27:a5:d5:16:
                    84:bd:43:58:67:ec:e5:25:99:f4:02:2c:2d:ec:e3:
                    8f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:DF:9F:A2:1F:BC:11:1B:5A:E4:1C:CC:9D:67:F9:79:61:36:FD:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8b6fff14-b094-3713-a051-4308275fdb21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.132.124.0/23
                  216.132.132.0/22
                  216.132.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:e6:8f:3f:87:21:ef:ae:5a:14:c4:7a:49:d8:d0:c5:dc:3c:
         40:19:d1:50:e3:76:b3:c7:2f:3c:e3:cf:39:7f:62:9a:d9:e0:
         a8:92:8c:1a:68:67:39:a0:6e:91:9b:15:17:de:7c:70:0f:3d:
         3c:31:f4:f7:bf:76:b9:50:70:8b:93:be:d4:5d:ff:8e:77:d9:
         9f:58:94:20:58:90:5e:21:d7:6d:83:0a:8b:56:9d:54:24:67:
         cf:d9:46:26:ea:cf:ff:9a:98:d0:0e:5f:ed:6b:11:46:67:2f:
         c0:e8:b2:a9:29:ab:4a:f5:ba:71:71:35:89:72:d1:db:23:c1:
         bf:29:e8:73:2d:00:4d:b8:34:d2:7e:2f:66:c0:4a:6e:11:b5:
         64:3f:ee:1d:cd:32:cf:7f:6e:f5:0b:91:8f:d8:83:2e:12:22:
         ab:ce:2b:b2:d6:0d:54:69:e9:29:8d:b2:60:af:11:91:63:1d:
         2a:8a:f1:6d:c4:bb:b3:64:33:fc:93:df:27:95:a4:2d:4d:dd:
         c6:85:86:d7:99:ed:9c:fe:79:8b:1e:bc:55:be:7c:6e:e3:93:
         ab:74:6f:82:db:df:5c:c7:b2:c0:ed:b0:b4:e9:29:39:63:91:
         bd:3e:d7:f5:bb:5c:db:88:25:01:7f:de:d6:8c:b0:5a:cc:4c:
         79:22:52:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:35:54 2026 by rpki-client