Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/a1e68bbb-553c-3456-9cb1-105008ad29db.roa
File:                     a1e68bbb-553c-3456-9cb1-105008ad29db.roa (raw, json)
Hash identifier:          F+hVlZZ87egwttIvBbwSolFrNgiRdIGRdHQdROMJSsY=
Subject key identifier:   55:C1:50:C1:77:EA:CC:F8:FC:A2:25:99:50:F6:8C:2A:78:EC:3F:FA
Certificate issuer:       /CN=70212b19-99d4-4532-a7e0-a5bdbef20170
Certificate serial:       010D0C9F4328584D6AAA7267DF7BF7C06CF54688
Authority key identifier: 10:3A:37:8A:5C:7E:F2:98:FB:74:3D:2C:6D:62:04:89:CA:64:A2:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/a1e68bbb-553c-3456-9cb1-105008ad29db.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     16509
IP address blocks:        216.147.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/70212b19-99d4-4532-a7e0-a5bdbef20170.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/70212b19-99d4-4532-a7e0-a5bdbef20170.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:72:67:df:7b:f7:c0:6c:f5:46:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70212b19-99d4-4532-a7e0-a5bdbef20170
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=c7093df1-7c46-4fef-a56e-f6ec06b64fb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ec:aa:70:1a:01:21:17:08:f9:72:40:0a:92:
                    63:16:07:1d:f5:11:84:47:80:95:3f:d6:3c:9b:2d:
                    39:2b:88:d1:15:34:92:b3:40:6b:99:b6:5e:b8:10:
                    49:61:ca:a1:7d:56:d1:a3:58:f4:0a:33:0b:a2:b6:
                    ed:9e:2a:64:78:e0:69:a3:5e:df:e9:5d:6e:43:14:
                    d0:17:c9:a7:e6:9f:9e:77:82:91:3c:60:36:f9:f9:
                    f6:c3:e7:69:59:a4:9b:8f:70:d6:db:8f:93:65:dc:
                    87:1d:e3:10:0b:89:21:bb:4a:fd:75:a8:a7:4f:50:
                    fd:fe:78:70:79:9a:1a:d7:b8:60:58:06:29:53:dd:
                    c9:d7:f7:33:f2:3b:e9:93:65:4e:33:f7:9a:ef:e7:
                    1d:1e:c5:f0:49:7e:16:9d:ee:25:4f:76:40:2a:d2:
                    23:98:88:97:ee:cd:90:11:df:d2:06:a4:a2:22:2b:
                    b1:3c:49:30:23:bb:4f:32:50:cd:8f:03:57:e8:de:
                    c7:8b:3c:5f:81:33:67:28:6c:93:67:c8:7f:8b:e8:
                    7b:41:90:4e:43:49:e2:31:d2:05:fb:d9:f7:77:36:
                    3a:21:77:4f:c3:31:9e:ae:66:57:05:24:e0:70:4a:
                    1c:bd:fa:b0:3f:82:5b:96:dc:43:71:98:6e:ee:bf:
                    97:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C1:50:C1:77:EA:CC:F8:FC:A2:25:99:50:F6:8C:2A:78:EC:3F:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/a1e68bbb-553c-3456-9cb1-105008ad29db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/70212b19-99d4-4532-a7e0-a5bdbef20170.crl

            X509v3 Authority Key Identifier:
                keyid:10:3A:37:8A:5C:7E:F2:98:FB:74:3D:2C:6D:62:04:89:CA:64:A2:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.147.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:52:e8:fc:9d:c9:bd:16:ec:1f:70:98:62:cb:6a:bf:a7:77:
         82:70:76:ce:95:82:97:ef:56:d5:a9:a3:51:5b:6b:bf:55:2f:
         5d:de:af:69:4e:47:13:7d:d0:8d:cc:5d:31:2c:6c:43:c1:e6:
         a4:0e:08:6c:52:c1:a4:2e:cc:e2:43:da:b3:91:cc:bf:07:11:
         96:d5:4d:b3:4f:1b:df:41:dc:4f:b9:69:f5:1b:41:b5:c4:47:
         ea:d7:e9:9c:fc:12:02:c0:d8:f8:51:6b:65:db:0d:58:f9:bb:
         8c:89:b3:c8:52:ba:08:1e:0e:12:4c:18:b4:b9:86:95:a4:0e:
         93:2e:e5:28:97:66:d3:e0:a6:9d:b8:0c:89:9a:2d:78:e5:49:
         83:06:81:9a:9a:e2:4a:b3:fe:a5:01:a3:36:64:b5:f0:75:4c:
         b7:51:4f:59:ab:85:e3:7e:cb:fb:ee:82:2c:71:c9:c6:6e:01:
         39:a5:33:29:b1:9d:23:85:1f:45:4c:0b:46:63:74:cf:c4:40:
         67:6e:19:21:06:d0:af:ae:e9:5d:8a:12:2b:a7:2f:62:04:25:
         0a:7a:29:dd:4a:f3:0c:c6:b1:6c:49:86:20:44:c3:24:c3:25:
         bf:6c:42:26:e9:b7:60:9a:51:0f:b8:e0:f2:14:cb:59:12:aa:
         32:5c:75:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 14:07:53 2026 by rpki-client