Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1b166864-6f5a-3661-9e33-e8fbcebda55e.roa
File:                     1b166864-6f5a-3661-9e33-e8fbcebda55e.roa (raw, json)
Hash identifier:          AcYQghs42f3NPwyFcm13nVSWKeeVCw/S9Vvq8cZT26M=
Subject key identifier:   C7:21:45:17:6C:EE:39:1B:D5:A7:41:8B:35:D8:05:2E:63:F9:BE:58
Certificate issuer:       /CN=1d639366-c044-456e-b8c8-0de04a543a0c
Certificate serial:       010D0C9F4328584E296F10F3305C2D83BDBD5240
Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1b166864-6f5a-3661-9e33-e8fbcebda55e.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     62533
IP address blocks:        216.68.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6f:10:f3:30:5c:2d:83:bd:bd:52:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=ad1b313a-6822-41b6-b0f3-ca65b74d0322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:90:10:ad:45:d4:b1:76:fd:1a:3f:70:ec:50:
                    e4:21:e1:bd:a6:3f:7e:ac:5c:ca:38:f2:5d:01:14:
                    72:8f:e4:46:cb:d8:a7:87:b3:bc:ac:4a:d2:15:91:
                    41:79:92:29:a8:4e:04:2a:27:35:04:dd:79:bc:76:
                    61:a9:31:96:d0:8a:2b:bc:b7:cd:f6:a9:3c:69:68:
                    9d:3b:a2:66:2e:7c:be:3a:22:e0:ef:65:69:ea:de:
                    57:51:21:2e:e4:ca:96:cb:28:50:47:d3:22:50:60:
                    41:63:79:29:09:7c:33:2f:58:bf:2a:69:00:98:ba:
                    af:3e:b5:fe:d9:bb:2b:2b:a2:be:c6:7e:17:b1:5f:
                    c4:53:e9:c0:46:52:1d:8a:cc:1e:13:e3:e0:d2:d5:
                    88:ae:e1:51:96:2c:bd:02:c9:f4:64:32:ed:2a:07:
                    85:9e:55:ba:1b:29:c2:07:fa:fb:33:1e:0a:37:af:
                    37:8c:07:fa:98:32:ab:f3:ef:82:5d:d5:c9:05:b4:
                    68:5f:be:56:16:6d:ca:a2:41:3e:5a:3d:2d:8d:ed:
                    9d:6b:68:e3:50:5c:2f:98:7c:61:9f:b4:8a:cb:fd:
                    64:66:b0:0b:6a:7b:75:b4:13:53:27:de:d8:df:f2:
                    44:9e:9a:9e:e6:75:ec:6f:45:ed:8d:8a:ae:ef:39:
                    c8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:21:45:17:6C:EE:39:1B:D5:A7:41:8B:35:D8:05:2E:63:F9:BE:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1b166864-6f5a-3661-9e33-e8fbcebda55e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl

            X509v3 Authority Key Identifier:
                keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.68.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:3c:17:04:2a:32:f6:b8:57:04:59:5c:3d:95:a6:b5:34:18:
         ff:ee:3d:7b:35:7e:4c:f8:fd:f0:14:e7:66:26:a8:bf:af:b0:
         d6:fc:fe:a9:7d:40:f4:3c:33:f6:ed:4c:37:0a:05:b8:18:cf:
         e5:53:ed:69:01:9e:32:19:28:9d:7c:ca:6c:05:96:45:9e:8e:
         78:af:0f:85:ab:d0:4a:9f:58:b0:81:d2:19:fb:7f:c7:26:31:
         51:a7:44:96:5c:65:d1:be:79:3a:b5:d3:a5:aa:0b:af:81:65:
         10:88:a7:9e:bb:3e:c4:fb:d1:b2:64:57:ff:ec:5e:ce:f0:3e:
         fc:49:1b:3c:b4:f9:68:11:9d:9a:9d:34:03:46:57:1f:76:6d:
         17:fc:dd:72:81:7c:d6:c6:cf:fc:14:fe:db:aa:49:ae:64:74:
         70:97:da:02:3d:29:19:2e:cb:56:fe:99:b3:33:1e:63:01:8e:
         27:80:47:a0:40:15:6a:e9:e6:b3:80:e0:39:c0:c7:51:05:7a:
         65:a9:1b:01:60:51:c9:d8:2b:88:0e:58:f4:0c:91:7f:07:53:
         ec:38:1b:8d:f8:8d:63:0e:db:71:fd:af:fd:6c:d8:5d:04:32:
         c5:13:2d:ab:90:a1:a5:6f:f1:ca:af:39:d6:5f:4b:dd:b2:b5:
         b0:5e:16:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 22:33:50 2026 by rpki-client