Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/a659fc53-0207-3ef3-98bb-577b375fc7f5.roa
File:                     a659fc53-0207-3ef3-98bb-577b375fc7f5.roa (raw, json)
Hash identifier:          6YZ08tJsch0Vj68LpiTNdvtZ2D1h4V1CXsBlI868y6I=
Subject key identifier:   22:B4:0D:20:E2:FC:6D:F0:9B:B1:F2:8F:AD:4F:F5:4B:90:56:89:20
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584D95682CBB3CF96F57E1CD8700
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/a659fc53-0207-3ef3-98bb-577b375fc7f5.roa
Signing time:             Tue 21 Apr 2026 20:26:55 +0000
ROA not before:           Tue 21 Apr 2026 20:26:55 +0000
ROA not after:            Mon 20 Jul 2026 20:26:55 +0000
asID:                     62651
IP address blocks:        216.131.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:68:2c:bb:3c:f9:6f:57:e1:cd:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Apr 21 20:26:55 2026 GMT
            Not After : Jul 20 20:26:55 2026 GMT
        Subject: CN=793179b3-546f-4bc2-9cd8-9c53679634c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:cb:c4:1e:66:00:13:0d:f5:39:bb:92:26:a7:
                    da:61:32:51:05:db:9d:0e:bb:fe:9f:4c:c3:a5:fa:
                    fb:57:77:9b:d0:b1:00:73:68:d1:f2:d1:7f:54:94:
                    20:9b:e5:0f:48:ab:8b:67:8f:3f:bf:4c:76:94:f5:
                    ef:a3:4c:93:de:13:52:80:64:cc:84:d4:df:30:c6:
                    6c:19:ec:e8:47:c6:7b:8a:bd:17:9f:ca:ec:2d:b6:
                    12:6b:61:64:3d:bc:30:31:94:82:ae:ff:2e:d6:b6:
                    9f:31:a7:36:4d:00:d1:f4:3a:56:84:cf:c5:64:7c:
                    38:bc:0e:08:ce:e7:78:b1:f8:0d:82:d9:55:2d:da:
                    d0:00:2d:3e:ed:2b:8c:de:97:48:ba:03:ef:f8:bc:
                    df:10:b2:07:c7:b9:17:fa:17:9a:10:d9:db:86:1e:
                    87:ad:47:f3:e3:3d:2c:d3:5b:57:7d:91:46:71:50:
                    1a:9c:06:3a:63:88:2a:9d:f1:3e:0c:0e:10:47:8c:
                    b4:ee:48:77:97:9a:0b:c4:05:b8:7b:cc:e6:dd:3f:
                    8f:75:af:7e:fd:24:55:19:8d:77:2b:bc:0c:d6:e9:
                    26:da:90:f9:74:6f:fe:c7:b8:da:e3:a8:36:c2:ca:
                    01:93:fa:4e:db:3a:a4:e5:26:32:b5:f5:1f:d6:a1:
                    76:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B4:0D:20:E2:FC:6D:F0:9B:B1:F2:8F:AD:4F:F5:4B:90:56:89:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/a659fc53-0207-3ef3-98bb-577b375fc7f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.131.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:ce:b8:66:f1:7e:6a:88:d0:23:ce:40:04:0c:11:cd:a8:e8:
         06:0f:f3:80:e5:ef:5e:00:5a:b4:dd:aa:e3:78:89:9c:e0:b9:
         f7:e1:94:91:51:64:40:e5:b6:81:a1:2c:de:10:50:b3:92:2a:
         e2:8f:f8:35:de:91:f8:f9:d7:b3:c2:f3:09:91:43:6c:bb:e1:
         1d:88:8a:f6:af:6b:70:b1:3a:a5:72:4d:bd:7b:e8:01:c4:5b:
         14:56:a2:c5:f4:2b:7f:30:82:73:05:24:f3:da:30:12:20:1e:
         e7:ec:f5:ee:fe:23:31:da:6b:69:d0:4d:be:1a:ac:5e:e6:bc:
         9b:57:47:9d:f3:d6:d2:73:8a:72:4f:ea:3f:13:92:14:c5:e8:
         fd:a7:62:79:4d:6e:05:d6:27:90:3d:69:2b:df:96:d1:5b:ee:
         c3:16:86:b5:f1:cf:d1:63:fa:bd:3c:f4:65:bc:37:b2:f5:9b:
         c5:5c:38:79:76:d7:6d:29:96:13:eb:c1:6e:1d:e8:5c:1a:19:
         72:4f:d9:85:66:5a:8c:36:cc:b2:79:41:b8:b2:f8:ca:d1:cf:
         57:d7:ea:e7:a7:59:f1:36:66:7c:4b:76:a8:d9:09:3d:a9:05:
         4c:37:28:ea:36:33:cb:16:28:10:8b:7c:5e:d5:39:cd:1b:86:
         e3:b0:2e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 07:04:10 2026 by rpki-client