Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/5584634c-07a6-3f85-9f96-cebd2ae0742b.roa
File:                     5584634c-07a6-3f85-9f96-cebd2ae0742b.roa (raw, json)
Hash identifier:          SN7loAy4aPFX4uk1BqYZm862Yz84i5s6MM5PmqfVig4=
Subject key identifier:   1C:07:58:4D:83:5D:B1:5A:D3:D8:4F:46:9C:F9:7F:8F:08:DB:FE:71
Certificate issuer:       /CN=171c42a2-3dc6-43af-b734-e91956bdfe19
Certificate serial:       010D0C9F4328584E2D9F17B62B9BC18385F0AE60
Authority key identifier: EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/5584634c-07a6-3f85-9f96-cebd2ae0742b.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     397865
IP address blocks:        216.168.136.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:17:b6:2b:9b:c1:83:85:f0:ae:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171c42a2-3dc6-43af-b734-e91956bdfe19
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=0fb7accb-f1c8-4619-a82e-0b34d027ae51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4f:16:ea:8a:00:3d:3a:ca:53:b0:e9:6a:4c:
                    86:fc:4f:e6:bb:23:41:d3:b0:70:e5:50:e2:d1:cf:
                    b7:cc:48:e6:5c:11:e9:e4:16:3d:bf:ec:69:2d:78:
                    f8:02:57:12:58:d1:dc:38:de:c8:c5:14:66:8c:56:
                    7a:75:a1:f2:e8:4c:3e:df:23:65:68:b3:e1:b7:da:
                    ec:39:07:92:e9:87:6f:33:b1:9d:7e:2c:1c:14:d7:
                    89:ad:02:ba:0b:d8:1f:f5:fd:14:d8:39:20:4e:0a:
                    d4:8b:a3:48:39:3d:5b:53:26:ec:80:4c:da:5c:6f:
                    40:72:68:d4:2b:ae:4a:65:8a:f6:4d:63:be:e2:ee:
                    8d:16:6d:47:8a:cf:14:b8:e2:b9:3e:98:70:66:7b:
                    bc:d1:88:0a:58:c1:6a:43:52:63:c5:98:08:03:49:
                    6b:27:f0:c8:54:46:f9:40:4a:83:c0:97:31:10:e4:
                    c7:b6:1b:e5:9b:ba:f3:91:51:2c:4a:0f:01:28:ac:
                    c3:54:7c:87:b0:c6:b5:7a:14:62:2c:39:90:03:24:
                    f0:55:4e:4d:9e:bc:6b:fb:61:3e:9b:f2:2a:ef:cc:
                    76:23:34:83:38:84:ba:52:28:e9:a4:3d:0c:f0:5c:
                    42:06:14:7f:10:17:7d:3c:e3:6b:c2:93:fd:0c:69:
                    60:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:07:58:4D:83:5D:B1:5A:D3:D8:4F:46:9C:F9:7F:8F:08:DB:FE:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/5584634c-07a6-3f85-9f96-cebd2ae0742b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl

            X509v3 Authority Key Identifier:
                keyid:EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.168.136.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:99:dd:f1:9e:74:5a:d6:da:20:14:ad:3c:4b:2f:4e:23:8d:
         22:54:48:28:ec:25:2b:46:71:d4:93:83:5d:2b:f3:bc:ee:02:
         1c:63:b0:94:a1:d3:1d:15:0c:1c:1b:1c:80:7b:49:dd:17:78:
         6e:87:04:80:84:d6:74:18:06:b7:da:73:81:cd:be:ed:2e:5b:
         dd:16:df:4e:f0:78:52:d9:7a:d8:9d:44:cc:7b:d7:82:93:a7:
         37:c9:6f:ca:4b:46:bc:bf:08:6f:3a:27:6f:f7:91:5c:ed:a8:
         6d:cd:c2:3d:f3:10:3c:4e:38:1d:4c:72:a7:5d:36:11:0f:49:
         2c:08:0c:67:d9:45:71:4e:2b:04:ac:da:b5:22:b7:4f:f2:05:
         f6:2b:4a:97:ce:7e:ec:6b:86:cb:17:fc:6a:1c:ae:69:df:63:
         6e:b9:92:f0:04:13:87:61:22:7e:b8:3d:d6:55:33:b2:b9:5a:
         6e:7f:57:0e:a0:6d:76:5c:f9:cd:6d:5e:66:ef:85:06:ed:2c:
         05:72:25:80:54:a4:b5:71:50:23:1a:f2:39:8e:a8:78:a1:38:
         a2:3f:92:7c:f8:f0:75:aa:19:cc:af:63:d3:9d:09:5d:1e:53:
         75:b0:4e:73:b9:91:3c:c8:21:31:5d:86:60:24:cf:41:b0:58:
         4a:a7:d4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:14:39 2026 by rpki-client