Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/2f4c0677-baa4-36b5-8c33-1d2d186f9545.roa
File:                     2f4c0677-baa4-36b5-8c33-1d2d186f9545.roa (raw, json)
Hash identifier:          wU4c+O4dijXLql59HmEcZfENEEuCDY1NYKnsAFoiJ4w=
Subject key identifier:   CE:32:09:32:A6:77:87:66:54:B7:88:04:7E:27:01:38:A4:5B:BC:61
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F4328584E3764781D1238BFA947A7B300
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/2f4c0677-baa4-36b5-8c33-1d2d186f9545.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     14618
IP address blocks:        216.157.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:78:1d:12:38:bf:a9:47:a7:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=47ef9220-39d8-41b5-8d9c-189826031801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:17:8c:85:4f:c3:eb:ef:9b:36:86:4d:89:75:
                    00:75:e2:a2:7e:af:16:15:47:0d:d4:68:3c:75:44:
                    b6:cf:ac:ec:88:ea:63:34:f4:4e:a5:a4:97:3c:ae:
                    63:0f:c6:83:b1:a7:c2:1c:d0:96:ad:93:1c:3c:2c:
                    f8:00:8c:bb:38:b7:bb:d7:b0:f4:43:5a:a3:99:b0:
                    1c:26:e9:fd:40:58:26:0e:00:b0:26:da:b6:bd:59:
                    bd:0c:8a:d3:b2:c0:48:fd:38:ed:8b:9a:53:f9:ab:
                    06:40:6a:d4:46:b3:26:a4:dd:ab:74:74:00:ed:ee:
                    fb:1a:0e:b9:4c:dd:53:fa:8e:ad:df:59:6c:6e:95:
                    1b:6e:b0:c2:04:d4:4d:ee:ce:a0:61:d2:54:86:40:
                    64:64:77:70:78:da:a4:f6:7f:c6:bc:2f:21:a5:9c:
                    f5:c5:43:fc:7b:75:d2:91:62:0f:ff:12:1a:8d:0b:
                    29:12:97:66:3e:32:ab:66:c4:3c:6c:5b:aa:67:e9:
                    ed:26:aa:6c:74:42:f6:c5:57:59:6f:53:08:08:61:
                    02:2e:a9:54:94:22:d4:dd:cf:98:80:ad:dd:3d:c2:
                    58:71:78:6d:8f:64:46:cd:b7:96:ac:1b:4b:0b:02:
                    46:a6:69:d8:c0:0b:b1:0e:c6:e2:89:52:97:0d:4d:
                    1a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:32:09:32:A6:77:87:66:54:B7:88:04:7E:27:01:38:A4:5B:BC:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/2f4c0677-baa4-36b5-8c33-1d2d186f9545.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.157.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:ed:25:1b:e1:46:3e:0c:45:0e:a1:e6:4f:98:b9:80:81:f8:
         eb:0d:13:3c:41:d4:8a:0a:15:2b:97:86:4a:98:cb:b3:19:4c:
         c5:1f:d9:91:e4:ca:25:7e:71:9c:d9:e8:fc:1e:52:c7:71:4d:
         67:0c:8d:76:b6:a2:28:2b:5f:a7:e7:70:f4:e4:6e:32:7b:1d:
         6e:65:ae:bd:b4:3d:a8:5f:ef:36:74:56:5b:7f:cc:50:0a:06:
         e5:bd:45:6f:00:1f:60:11:21:19:97:93:1d:73:e5:70:86:c8:
         59:d6:a3:19:c4:23:e6:61:d5:64:bb:b1:5c:86:32:dd:21:be:
         bf:c5:7e:83:f3:72:04:cf:58:a2:31:7f:09:83:ef:49:da:f6:
         57:5c:b9:47:7a:bb:a8:ef:ac:08:f2:f0:74:7d:14:c2:2c:b5:
         fd:10:1b:1b:3f:d5:f1:f0:e7:f7:a3:16:6c:15:99:ef:45:d7:
         16:35:63:b6:f5:0f:81:9d:e8:ca:ae:9c:8a:82:fa:bb:16:51:
         f5:9f:be:7d:58:28:bb:ce:dd:91:87:64:1d:36:28:d7:65:7c:
         bb:7e:ca:93:48:fe:59:d6:fd:af:5e:8f:3a:ba:cf:3f:59:7d:
         2f:30:4c:e0:36:2c:70:74:6b:73:37:c7:54:22:cb:f2:53:a6:
         61:0e:50:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:20:54 2026 by rpki-client