Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/0316894d-22d1-3c70-864c-1c0181c2247a.roa
File:                     0316894d-22d1-3c70-864c-1c0181c2247a.roa (raw, json)
Hash identifier:          YhJ/I7wrIqFSrO2YPbBL6gj6/IA6Kon9R/qdiMLa9N4=
Subject key identifier:   66:A0:AB:E3:6B:64:A4:F7:2D:00:2B:FD:7B:8D:37:62:B5:F9:7C:0E
Certificate issuer:       /CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
Certificate serial:       010D0C9F4328584DDE87F78CBF72CDD0601FB100
Authority key identifier: CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/0316894d-22d1-3c70-864c-1c0181c2247a.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     152672
IP address blocks:        216.105.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:87:f7:8c:bf:72:cd:d0:60:1f:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=7ecf4647-c088-440b-8630-16c052418e56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bd:c6:50:02:b3:33:7c:14:58:a4:62:0c:30:
                    09:c4:51:23:20:7c:25:46:22:6f:33:a6:6e:02:e1:
                    db:c9:73:f2:12:20:62:f5:9a:0a:63:1d:99:aa:1e:
                    6c:1c:d2:29:74:f4:18:cf:a8:d2:44:07:af:d0:11:
                    56:4a:69:9f:6f:04:ac:88:56:a9:e2:e6:7c:c6:9b:
                    49:b4:03:60:69:75:05:27:d1:e0:85:6d:69:bf:f4:
                    7d:6e:f8:16:dc:2f:73:d5:f6:5b:08:97:7f:41:0f:
                    a2:d5:bd:a9:51:68:15:73:50:b0:79:d4:e9:df:93:
                    de:df:c2:7d:4a:49:91:f0:bd:c1:0b:08:89:cf:9d:
                    bc:50:cb:eb:0c:ae:20:af:98:f7:1e:02:ae:d0:70:
                    a6:b7:bb:a3:1b:d2:c7:fc:b3:b7:88:72:26:73:79:
                    94:a6:90:5e:6f:ef:1b:7e:8d:b9:74:f3:a5:8d:9c:
                    a1:0c:54:12:05:61:0c:b5:6d:51:8f:07:b2:82:57:
                    f2:12:ad:12:80:6a:8c:85:70:df:df:dc:03:d7:3a:
                    69:0d:87:f6:68:d4:03:ae:47:81:75:49:b5:72:6c:
                    4b:5a:df:7a:20:d9:ff:28:9f:7a:cd:13:e6:87:7b:
                    74:2e:f2:6e:b5:c4:fd:ad:2b:af:8a:6d:a9:dd:4e:
                    1e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A0:AB:E3:6B:64:A4:F7:2D:00:2B:FD:7B:8D:37:62:B5:F9:7C:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/0316894d-22d1-3c70-864c-1c0181c2247a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl

            X509v3 Authority Key Identifier:
                keyid:CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.105.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:ef:48:37:6b:01:e6:1a:71:2c:3b:69:8f:72:68:09:bf:f7:
         77:8a:bc:1c:25:fb:d0:72:bb:f1:15:2c:61:4f:46:9a:f9:32:
         fd:da:e5:34:4e:93:e9:10:c6:a6:e3:2a:f8:e3:9b:de:66:d3:
         5b:f3:ba:7d:a9:64:e9:a6:09:0c:a6:1a:2f:b6:ed:4b:72:ce:
         7b:61:ce:1d:87:87:5a:72:0b:ae:3b:2b:f9:f6:63:77:b8:35:
         04:b4:f2:f4:3e:cb:7a:fd:9e:70:54:27:5c:50:64:ad:b7:46:
         c4:c1:53:b0:d3:6b:31:af:30:29:ec:bb:fc:e4:e6:a5:0f:26:
         79:43:05:6b:f6:10:f7:53:27:df:2c:40:10:4d:96:98:56:d0:
         08:d0:06:3d:04:99:da:40:01:a2:67:4c:1f:e2:e4:9d:f8:fe:
         ab:f6:af:97:2b:f7:9a:03:23:51:7b:3d:c7:d5:9f:ca:94:a3:
         60:0b:98:a7:97:c7:f3:30:24:4f:97:a9:62:55:b2:0a:ff:ea:
         5f:bb:49:22:1f:c4:82:a0:c4:59:a4:24:5f:46:1e:cc:15:b8:
         37:ab:95:6a:d4:36:3b:6b:55:e4:7e:12:b4:2c:c7:a6:84:77:
         95:7e:92:ad:05:76:f9:d3:9c:85:e8:08:ba:ce:27:22:c2:a9:
         0e:61:aa:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 13:10:38 2026 by rpki-client