Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b961a675-c7a9-39f0-9f9b-8aef0cf1650f.roa
File:                     b961a675-c7a9-39f0-9f9b-8aef0cf1650f.roa (raw, json)
Hash identifier:          ryxAkPidTUWlgjxv416HpYqErd/eO2lsFeV0jPL5x7g=
Subject key identifier:   92:23:19:D4:06:29:E1:42:4B:99:80:E8:7D:AE:3A:FB:69:46:65:06
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584D44FA46A54291A1A4CD4D5200
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b961a675-c7a9-39f0-9f9b-8aef0cf1650f.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     16417
IP address blocks:        216.71.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:46:a5:42:91:a1:a4:cd:4d:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=517d4a1d-f883-4e6b-beb2-f9b3bd7adab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:45:6e:00:79:0c:b0:14:58:8f:d5:b5:d2:79:
                    07:a6:48:87:a8:b1:84:35:5e:8d:ae:96:04:7f:9b:
                    1e:a5:65:91:cb:ed:71:57:f1:ca:ad:64:b5:b2:c6:
                    ce:49:75:df:ca:a2:bd:c9:1f:d2:4a:4d:7c:64:a9:
                    57:88:a4:dc:62:6c:f0:61:10:04:13:d4:c9:0c:1b:
                    1a:44:9c:a5:eb:1c:0e:0e:ca:3b:62:1e:0a:68:98:
                    fd:15:fb:6f:a2:0f:b2:ad:fd:11:8d:4b:d3:58:b5:
                    78:42:ac:21:d2:fa:9b:9b:f1:f6:e9:46:58:bb:3a:
                    e5:f6:1b:b7:08:ee:3a:d3:31:7e:df:fb:8d:31:92:
                    6c:c7:17:9a:fc:39:eb:8a:a8:ec:8d:5a:27:25:ed:
                    0f:d2:c7:03:50:02:6e:46:dd:0b:ec:f3:b7:d6:25:
                    34:f8:8c:85:59:91:d9:e9:86:55:53:c2:b4:cc:cc:
                    86:c4:5a:e9:39:3b:13:5f:74:7f:ea:67:1d:d9:1b:
                    4d:56:1e:28:52:e5:53:8b:ac:25:ba:13:38:8f:cb:
                    96:fc:f2:88:ce:85:ea:38:62:4c:6b:cc:11:7c:51:
                    ec:69:88:b2:55:3f:61:53:66:eb:83:d6:18:7d:f2:
                    d2:60:b3:c1:4e:2a:c5:0c:c5:d1:82:f4:25:0f:4c:
                    30:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:23:19:D4:06:29:E1:42:4B:99:80:E8:7D:AE:3A:FB:69:46:65:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b961a675-c7a9-39f0-9f9b-8aef0cf1650f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.71.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:20:d3:6a:c3:75:4d:3a:8c:17:0e:82:9f:50:7e:f4:cf:ea:
         90:59:ec:83:27:0a:16:34:0a:7e:63:26:83:46:8b:c6:9d:ee:
         ed:01:c9:d3:b6:cf:fe:8f:db:68:bb:dd:9b:60:27:49:aa:e3:
         1e:e4:85:dc:3e:58:83:3a:21:60:49:53:f7:1c:bc:f1:95:05:
         f3:cd:f9:35:11:1a:3d:9d:cc:0e:cb:87:fd:c5:9d:ea:8f:6f:
         63:fa:db:10:30:e2:b8:2e:44:6f:88:95:31:4c:be:fb:5d:ae:
         5e:ee:da:7e:77:db:63:f1:16:8e:32:f8:5d:fe:47:35:a3:df:
         99:b8:50:24:fe:7a:2f:e1:fa:2d:48:dd:1d:97:22:4d:63:70:
         0f:1a:63:a3:0c:2a:5e:e2:e1:ad:e1:6d:c8:2b:3b:ef:0d:28:
         07:4c:4d:4e:bd:b5:10:d8:28:e9:9f:07:38:16:48:22:10:07:
         13:4f:a0:17:17:f0:7c:a8:e4:3a:22:40:08:54:dc:62:04:a7:
         9e:bd:d3:a4:b4:70:76:b1:75:68:96:9d:90:26:80:a9:e3:dc:
         f6:b0:4a:2f:8b:0e:b6:b0:75:25:9e:39:21:39:7f:e2:ce:a1:
         f9:9d:90:fc:ec:87:70:c8:7b:e1:ba:12:be:8e:8c:9c:35:0f:
         07:8d:ba:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:52:05 2026 by rpki-client