Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/2368fd7e-fbda-392f-9bd8-2250c599ae21.roa
File:                     2368fd7e-fbda-392f-9bd8-2250c599ae21.roa (raw, json)
Hash identifier:          4HhHo/ttm1byYbyPP3DCx1mmQyuLS51PtlXRPfmZSPM=
Subject key identifier:   36:D0:81:25:53:89:EA:D3:DA:97:B7:DA:9D:99:12:05:8D:B2:CB:4B
Certificate issuer:       /CN=6c86d366-9f08-4852-b060-53c54ef6dda0
Certificate serial:       010D0C9F4328584D98BAB1FB261A7AA350244080
Authority key identifier: AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/2368fd7e-fbda-392f-9bd8-2250c599ae21.roa
Signing time:             Thu 23 Apr 2026 01:00:24 +0000
ROA not before:           Thu 23 Apr 2026 01:00:24 +0000
ROA not after:            Wed 22 Jul 2026 01:00:24 +0000
asID:                     16570
IP address blocks:        164.153.184.0/23 maxlen: 32
                          164.153.188.0/22 maxlen: 32
                          164.153.224.0/24 maxlen: 32
                          164.153.225.0/24 maxlen: 32
                          164.153.226.0/24 maxlen: 32
                          164.153.227.0/24 maxlen: 32
                          164.153.228.0/24 maxlen: 32
                          164.153.229.0/24 maxlen: 32
                          164.153.230.0/24 maxlen: 32
                          164.153.231.0/24 maxlen: 32
                          204.138.52.0/24 maxlen: 32
                          204.138.53.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:98:ba:b1:fb:26:1a:7a:a3:50:24:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c86d366-9f08-4852-b060-53c54ef6dda0
        Validity
            Not Before: Apr 23 01:00:24 2026 GMT
            Not After : Jul 22 01:00:24 2026 GMT
        Subject: CN=28e0e1d3-68b8-4cd7-9d20-651392b638a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fa:14:64:49:91:d6:e5:48:37:2b:e6:79:bf:
                    0b:00:34:63:15:8f:a5:e2:8f:a3:7f:be:53:88:92:
                    3c:bf:08:18:15:0d:32:b5:2b:21:27:de:48:92:13:
                    57:3b:5d:97:7c:1f:40:13:21:8b:15:e7:a2:d8:56:
                    a8:a8:ae:a2:00:64:5f:9c:63:d0:93:4b:c6:d3:71:
                    af:2c:3e:2c:0f:f8:99:aa:cc:c0:0d:02:2a:62:73:
                    14:5b:6d:57:03:d0:80:c7:6b:18:36:f6:f1:d8:38:
                    f5:25:18:c8:93:d7:a5:f3:36:60:01:7b:6c:bf:c7:
                    20:01:81:cc:fa:20:85:f6:33:3d:3a:7c:76:89:6d:
                    79:5b:f5:64:f6:77:0d:73:4f:80:5d:9c:e6:62:d0:
                    96:a2:07:38:f7:a4:e0:44:db:e2:35:0f:43:a0:a0:
                    8d:55:65:97:43:e4:1f:52:b6:c2:cd:99:5e:ad:f2:
                    65:e4:f3:d3:24:e6:85:4d:68:7b:1d:70:23:8c:b9:
                    13:16:33:10:91:aa:7b:8c:7b:73:74:4c:fb:4d:02:
                    eb:1c:29:4e:cb:02:5f:81:56:26:43:b1:7c:c3:ac:
                    cf:cf:72:46:b6:1c:96:25:ae:01:35:11:a8:6b:7b:
                    42:f7:c4:b1:9a:ff:46:6c:68:8e:98:c7:6e:c4:96:
                    c9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D0:81:25:53:89:EA:D3:DA:97:B7:DA:9D:99:12:05:8D:B2:CB:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/2368fd7e-fbda-392f-9bd8-2250c599ae21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl

            X509v3 Authority Key Identifier:
                keyid:AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.153.184.0/23
                  164.153.188.0/22
                  164.153.224.0/21
                  204.138.52.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:82:3e:3a:1a:4c:ef:b8:e9:95:ea:c6:86:60:e0:b6:0a:e3:
         86:49:47:49:3c:63:af:d2:30:12:f7:55:75:8d:98:f2:3a:e1:
         fb:9a:69:19:46:4d:fe:d7:56:a2:26:c1:77:2b:14:22:d4:e8:
         4a:df:28:ff:3b:e7:7b:50:42:0e:bc:3e:1d:b4:9b:37:7e:e2:
         70:56:e7:a2:e8:ca:d5:d7:9b:0c:70:65:82:4a:c7:bd:b2:94:
         cf:9e:e9:e5:d9:27:3c:a7:78:64:1d:78:22:bc:9c:c9:00:7a:
         60:74:b3:4a:7e:d9:a2:63:40:0a:f2:85:f4:fc:b4:f3:7d:95:
         4e:f3:40:1d:8c:b4:fc:b4:8e:db:03:10:39:af:8e:c4:ad:05:
         61:de:cc:41:1f:18:34:e8:86:2f:71:22:95:27:d1:ea:5e:e4:
         a0:b9:4f:54:e3:6c:a0:d4:53:76:77:87:5b:38:f1:38:89:c3:
         9f:55:d7:1a:8b:c7:22:f6:05:68:48:a8:94:08:b6:51:25:a8:
         57:a6:94:9b:a7:c8:c6:d3:d7:01:4c:2f:51:bd:b4:0b:33:1f:
         1d:9a:e1:f0:af:10:6d:72:08:31:43:b9:06:30:f7:f5:ce:35:
         9c:8e:61:f7:01:b5:88:1d:05:43:0d:92:16:8e:d7:be:18:f1:
         02:02:d1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:52:58 2026 by rpki-client