Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f22a97e2-6b52-3092-9e30-da9958902a1f.roa
File:                     f22a97e2-6b52-3092-9e30-da9958902a1f.roa (raw, json)
Hash identifier:          chntjqe/+umwaa77B6nB2Vpz8DLe3m42mFyHA6+vLkk=
Subject key identifier:   A0:26:6E:31:7D:33:79:E3:FD:DE:9D:C9:7E:E5:5D:07:8F:72:BA:03
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F4328584D98BAA446ABFDBDB627783680
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f22a97e2-6b52-3092-9e30-da9958902a1f.roa
Signing time:             Thu 23 Apr 2026 01:00:24 +0000
ROA not before:           Thu 23 Apr 2026 01:00:24 +0000
ROA not after:            Wed 22 Jul 2026 01:00:24 +0000
asID:                     13576
IP address blocks:        216.249.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:98:ba:a4:46:ab:fd:bd:b6:27:78:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Apr 23 01:00:24 2026 GMT
            Not After : Jul 22 01:00:24 2026 GMT
        Subject: CN=00de3c9d-8215-4f95-a295-7106483489a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:34:63:e1:71:38:c3:c7:5a:ae:32:7d:c0:b4:
                    3a:c4:45:4d:05:1e:e5:0a:14:e6:37:45:0b:71:37:
                    71:59:ac:cc:8f:8d:b7:11:ff:95:34:71:bf:e4:35:
                    d6:ff:65:07:b1:a9:81:0f:93:ee:d1:0a:7b:7e:fe:
                    33:15:91:0e:1b:14:c0:ec:bd:01:c8:4d:9a:c8:fa:
                    21:5c:16:95:5e:7a:42:a6:4e:b2:67:cc:ca:a6:fd:
                    36:08:34:be:0d:45:35:ca:6f:3c:dd:8a:a9:fb:bf:
                    5a:60:e8:d7:d8:6c:17:4a:83:c5:b5:d2:94:ac:0d:
                    d2:2a:ad:ab:2f:7f:3a:07:eb:e3:63:f9:b6:7e:74:
                    26:f4:7a:91:2d:1e:21:07:6c:c8:bd:a2:55:93:fd:
                    62:00:2d:9e:d2:c5:4c:04:cc:69:d7:07:72:ef:fe:
                    02:e4:92:5e:f2:f9:c3:da:8c:d5:9f:80:32:86:d7:
                    59:05:b2:dc:18:4e:10:c7:46:a8:ad:0f:f7:80:21:
                    c4:84:16:08:f4:94:35:aa:be:fb:39:52:1d:bf:c7:
                    20:84:92:1b:67:cd:ab:9e:00:52:e3:6e:bf:4e:af:
                    54:48:b1:d4:3e:38:d2:bd:0b:12:59:16:f7:f9:af:
                    87:22:5d:51:6d:63:af:11:fc:08:98:e1:47:fd:3a:
                    f2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:26:6E:31:7D:33:79:E3:FD:DE:9D:C9:7E:E5:5D:07:8F:72:BA:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f22a97e2-6b52-3092-9e30-da9958902a1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.249.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:7f:e7:c5:e6:4f:ab:1e:40:bf:d6:6c:d7:d6:86:dc:89:be:
         26:0c:71:bd:ef:90:58:cf:29:ff:35:78:01:ac:81:c2:82:c0:
         1a:01:58:00:87:72:5b:8a:2f:1e:cb:f3:43:d5:e9:9e:8b:89:
         39:37:a1:3f:87:ae:b5:9b:c8:c4:8d:df:cc:df:94:63:40:75:
         9c:5d:19:84:11:f3:ed:f0:56:d5:21:58:f1:ef:03:c2:bf:c4:
         37:71:ac:48:5a:e1:e9:a8:2f:bf:f8:54:c7:a4:eb:e1:1e:41:
         57:ce:df:03:d0:a9:53:3e:e2:db:d4:df:8a:a8:14:f5:9b:ac:
         64:b4:e1:37:2f:74:ca:57:8b:e4:02:73:dc:33:a4:dc:db:c1:
         4e:dd:10:ec:62:33:10:34:6d:10:51:f1:e1:3b:e4:5d:9a:44:
         3b:e7:30:c7:8f:4d:98:0a:d0:ec:a0:ff:99:d2:10:37:89:c3:
         77:0c:54:a5:4f:92:b9:99:52:6c:ff:d2:15:18:7b:76:4a:e2:
         40:79:c6:7c:45:fd:77:9f:4d:5e:31:e4:3f:db:5d:76:cf:08:
         39:08:db:a9:99:cc:fe:a5:9f:ce:dc:7d:07:0f:3a:be:ba:8a:
         b9:d5:67:5e:73:8d:f2:52:d5:49:b2:f0:1d:8f:79:06:2a:48:
         57:56:f5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:12:48 2026 by rpki-client