Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8bd8ebd0-3552-3108-aa02-ab7386e4101b.roa
File:                     8bd8ebd0-3552-3108-aa02-ab7386e4101b.roa (raw, json)
Hash identifier:          eBg7mo8xi/TLZIGTZHkmylQnYeDN1pvSfkse/lMvSEY=
Subject key identifier:   F6:01:80:87:B8:AC:B4:9E:C9:39:FE:45:68:DB:C0:73:92:D5:57:9B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DBD05CA6D20CD009ED840DB20
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8bd8ebd0-3552-3108-aa02-ab7386e4101b.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     701
IP address blocks:        216.233.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:ca:6d:20:cd:00:9e:d8:40:db:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=3e279a58-d4e8-4785-b1d9-412b45dfb12a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e1:69:17:0d:42:0d:7a:75:ef:a0:26:49:08:
                    57:f7:f4:72:ee:78:e0:86:8d:fd:5a:99:72:17:1d:
                    7d:12:92:29:31:ae:7b:32:de:fe:78:c8:94:8b:47:
                    35:4a:ae:dc:b9:b9:9b:82:22:d6:f4:80:e9:81:b2:
                    8c:60:7e:32:a0:de:b2:bf:81:a6:4e:5f:54:10:e4:
                    10:7e:76:d8:f2:db:b1:74:93:58:28:10:19:6f:45:
                    a7:56:22:27:2c:ff:ae:1e:7e:36:f8:4e:e2:5e:47:
                    2d:cf:d6:56:e4:cc:ad:27:8c:c0:0e:95:ac:2d:27:
                    69:19:a9:df:9d:0c:02:fe:f8:cb:a1:69:2e:7d:b3:
                    97:ab:cf:82:51:60:9f:f3:44:b9:14:12:94:3f:01:
                    7e:d7:c9:98:4a:d8:df:58:f4:c6:1e:2d:75:e7:07:
                    31:17:a3:aa:af:54:ee:ee:43:65:eb:fe:2a:d2:d3:
                    28:3a:d9:be:ba:38:35:57:f5:c0:c0:e6:b8:19:91:
                    70:48:c3:f1:6b:97:ab:c9:57:f0:1e:b9:b5:f9:68:
                    7e:1f:04:0b:ed:37:05:40:42:2e:e6:f4:a8:ac:be:
                    6a:fb:70:d7:cd:ce:7d:5f:fd:68:4f:1c:fa:62:6b:
                    2d:1f:bf:d3:4c:ac:04:6f:21:8c:6c:ac:26:d7:48:
                    59:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:01:80:87:B8:AC:B4:9E:C9:39:FE:45:68:DB:C0:73:92:D5:57:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8bd8ebd0-3552-3108-aa02-ab7386e4101b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.233.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:22:3d:8d:aa:51:a7:ea:a4:bf:ed:8f:92:4f:f7:40:d3:90:
         d1:04:2d:66:b8:12:10:19:1c:59:df:7a:13:2d:d9:55:1a:5a:
         7b:d4:aa:f2:ba:2f:44:47:52:e6:ee:6f:f1:0a:e2:f3:04:db:
         79:cf:d2:7c:11:58:29:bc:94:4d:3e:24:15:4b:bf:c2:dd:3f:
         30:74:cb:47:3b:c2:e7:09:76:45:41:6f:8b:21:0a:cc:e3:21:
         7f:ab:c5:db:36:80:0f:70:53:87:ba:b4:6d:a1:93:d7:76:26:
         68:14:a1:26:fc:1c:45:09:70:8f:9b:2f:f9:f0:6e:01:62:c5:
         fb:91:b2:bd:cd:07:f2:c0:1d:eb:1c:70:af:5e:a3:3f:81:1e:
         25:1d:97:7a:98:80:fe:50:42:be:ba:67:6f:9d:ea:97:91:74:
         8b:e1:12:78:8a:84:a2:2e:6b:65:6e:d3:42:59:19:95:bd:f6:
         ef:a0:38:06:ba:b4:f5:32:17:88:fb:9b:85:f1:9c:10:27:6b:
         35:74:43:a9:a6:90:5d:a6:0c:b9:44:fc:e6:2e:fd:6b:35:8e:
         c4:92:b1:74:5e:81:3d:80:3e:6b:6d:f4:af:ba:26:92:60:94:
         61:ab:f2:0b:bd:84:05:bd:49:1a:b2:a0:0b:53:1b:35:15:58:
         74:0c:59:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:38:41 2026 by rpki-client