Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/f613540b-de36-377b-b7f4-b7fee8139d0f.roa
File:                     f613540b-de36-377b-b7f4-b7fee8139d0f.roa (raw, json)
Hash identifier:          VzdQPJKnRp8qiTAoJq7j5PUgF3Icmy8/sw12LFE7WyM=
Subject key identifier:   FB:8F:A2:98:B0:43:3E:34:DD:D8:D8:0E:99:0D:24:85:07:E3:4F:0C
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584E2AD44AE21CD44FFE68A64180
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/f613540b-de36-377b-b7f4-b7fee8139d0f.roa
Signing time:             Sun 14 Jun 2026 09:00:11 +0000
ROA not before:           Sun 14 Jun 2026 09:00:11 +0000
ROA not after:            Sat 12 Sep 2026 09:00:11 +0000
asID:                     63023
IP address blocks:        216.152.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:d4:4a:e2:1c:d4:4f:fe:68:a6:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: Jun 14 09:00:11 2026 GMT
            Not After : Sep 12 09:00:11 2026 GMT
        Subject: CN=8245bdb7-c29e-4f9e-8870-5256c6b1adc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:67:00:b6:48:93:69:e4:04:4b:0b:a7:39:b9:
                    bc:28:1c:fe:68:31:ab:2b:76:91:13:97:7a:1a:64:
                    1f:c5:06:d6:53:3b:1a:98:38:7d:eb:c0:4b:41:49:
                    f8:11:21:10:56:52:a2:62:8b:2b:c1:34:40:fd:48:
                    af:b5:51:2a:5a:c3:92:98:e4:93:a2:09:bf:8a:a1:
                    68:da:64:77:24:7e:0a:0a:d0:47:70:6c:5d:05:04:
                    94:42:e0:d2:5d:9b:e7:42:df:3e:97:89:5e:55:0e:
                    c5:4f:30:90:c8:04:cb:25:e4:ac:73:e9:b7:bd:d2:
                    26:40:9f:7f:60:c9:a4:94:0a:91:9c:fd:07:d2:cf:
                    38:e5:f7:bf:74:90:a5:cf:cc:bd:ab:93:af:98:da:
                    e2:ad:ad:49:2e:5f:a9:9b:b5:2e:c0:dd:13:ec:27:
                    72:4b:b6:95:86:7b:0e:fc:9c:28:f6:b7:ff:6c:1e:
                    51:cd:d0:13:f9:5c:4a:99:49:98:b0:11:86:4f:b0:
                    33:9a:5e:76:cb:92:e0:dc:7d:e0:b2:2d:0b:4e:d5:
                    c9:5e:fc:01:8d:75:ab:4c:e8:50:b5:15:0c:8b:75:
                    26:9e:dc:f6:be:9b:93:25:6e:9a:ad:ae:9e:a9:a6:
                    d2:27:a2:e7:ed:e8:ea:a2:f4:c6:d5:a1:3a:ed:74:
                    62:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:8F:A2:98:B0:43:3E:34:DD:D8:D8:0E:99:0D:24:85:07:E3:4F:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/f613540b-de36-377b-b7f4-b7fee8139d0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.152.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:16:f1:24:03:8c:48:ab:e6:7e:06:85:17:4f:c6:95:a0:18:
         8a:92:2b:c2:6f:c3:28:be:d6:52:a6:7b:01:3f:91:f5:19:f5:
         e3:f8:f5:53:b4:86:ff:23:07:66:d2:9b:1a:ab:18:91:15:1a:
         88:40:c6:f8:0a:5a:fb:00:26:0b:4f:29:84:30:6c:ea:4d:e0:
         84:28:cc:41:87:33:5e:b2:b3:55:da:34:b3:ce:32:89:54:14:
         28:9f:96:1f:2d:cd:4d:d3:9c:41:91:3f:b3:a5:e1:17:6d:ff:
         c8:5e:ae:bb:d3:f7:6e:0e:a0:16:9a:98:12:42:6e:18:b0:15:
         10:ad:ca:e0:58:46:75:5f:7b:93:6e:ec:b0:2b:5e:cc:bb:af:
         68:fe:c4:77:7d:1b:70:70:82:ff:cf:d5:68:87:52:b7:cd:c7:
         15:c5:4f:1b:4e:7f:be:0e:c0:5f:b2:39:a8:c3:f7:a3:ae:4f:
         7f:be:2e:3e:18:7e:fc:7c:5b:ff:3d:a8:b5:e1:9c:8e:4d:d1:
         0d:8b:5b:72:f9:b6:22:c8:05:c4:ce:83:a7:eb:b7:7e:50:9a:
         33:3f:c8:cb:00:1e:0d:99:fe:c3:14:ea:92:fc:1b:20:70:65:
         99:23:6e:ca:5b:2e:94:22:f9:10:31:55:fb:ef:66:e2:9a:0e:
         55:c4:74:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 19:23:05 2026 by rpki-client