Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/71add0fa-6535-3f71-85fb-9831ea63c4a2.roa
File:                     71add0fa-6535-3f71-85fb-9831ea63c4a2.roa (raw, json)
Hash identifier:          VMMPS5hy7ZkgCvCkj5B5HP+Zv+NHSgOdkbfMFO9CphM=
Subject key identifier:   98:ED:11:DF:C7:C5:55:2A:6B:CE:3D:90:F3:5D:2A:EE:A1:6C:C2:F8
Certificate issuer:       /CN=c7910a08-9cef-446d-8b36-1ad473d3fb84
Certificate serial:       010D0C9F4328584D09124936CE35F006A8EE0800
Authority key identifier: EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/71add0fa-6535-3f71-85fb-9831ea63c4a2.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     23347
IP address blocks:        216.238.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:49:36:ce:35:f0:06:a8:ee:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7910a08-9cef-446d-8b36-1ad473d3fb84
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=936a11e4-c15f-405a-bc10-6c8de75f65ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3c:bd:c7:da:bf:11:b0:1a:54:2c:1a:17:ea:
                    98:b7:bf:83:e5:4c:03:0c:98:78:f5:01:bf:24:05:
                    35:c4:86:0c:dd:e5:df:32:54:ae:62:51:0c:4d:c5:
                    65:4c:27:87:48:58:fb:55:11:8f:87:4e:20:92:32:
                    c1:be:b6:83:e3:fe:46:4c:ae:82:9f:7f:20:2e:25:
                    d2:84:31:94:8c:bc:d5:81:61:f2:6c:3c:f2:73:f0:
                    df:f7:d4:3a:75:09:f1:86:41:df:2f:33:90:58:c4:
                    fc:1c:17:da:c3:05:e6:4d:44:68:ab:77:1b:59:56:
                    f8:79:df:10:69:4d:6b:c7:79:0f:f8:14:f9:ba:c9:
                    d6:57:4e:11:69:d1:ec:43:78:c1:dc:59:73:5f:26:
                    7c:bb:bf:be:ee:6e:91:33:5c:81:b7:61:1c:dd:29:
                    5c:e7:00:b0:2e:26:60:20:06:6f:3c:c1:fd:e0:06:
                    ba:01:6b:72:a0:9b:da:4f:71:24:8b:dc:7d:ed:f2:
                    5b:4f:ca:f6:e6:98:e2:d4:44:13:35:62:7f:05:5e:
                    97:8d:65:42:25:19:37:f2:78:a1:22:aa:b5:a9:ac:
                    a1:77:c7:21:78:cc:63:62:b9:94:d9:95:39:fb:9f:
                    48:49:2d:37:c7:06:03:df:a4:31:19:79:41:2c:2b:
                    a7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:ED:11:DF:C7:C5:55:2A:6B:CE:3D:90:F3:5D:2A:EE:A1:6C:C2:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/71add0fa-6535-3f71-85fb-9831ea63c4a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.crl

            X509v3 Authority Key Identifier:
                keyid:EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.238.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:b8:ed:77:e4:c1:c5:5c:0a:3f:09:b7:44:e5:60:d5:0c:e0:
         5e:dd:c1:a2:8e:c8:0c:c1:c3:cd:c2:69:87:97:c2:88:45:5a:
         d3:cd:64:f0:31:e8:2f:34:2c:97:b9:1e:f2:eb:d3:6c:11:54:
         53:d8:50:88:70:0d:ca:1f:11:03:73:a1:8e:22:77:16:08:c8:
         ad:82:e7:56:be:e5:b4:a4:fd:e1:f4:b6:1c:b5:d7:3b:4c:97:
         ed:2a:2f:f4:b8:df:87:41:f4:49:bb:5b:32:cb:13:b2:20:c9:
         f7:a6:fb:da:5b:48:f1:93:37:2a:c2:66:c8:b4:5a:4a:6e:64:
         43:18:bb:91:a7:34:ce:1c:fd:c6:d4:f5:43:c6:74:06:02:ee:
         23:d9:d5:ac:43:88:ca:7e:25:ab:cb:12:b2:ba:fb:e4:39:83:
         a1:0a:20:dd:91:18:f0:8e:51:62:f9:cd:8d:f7:8d:9b:62:b1:
         23:95:24:7a:f4:2d:39:17:8c:bd:b6:29:ce:14:d7:cb:25:81:
         86:d2:d4:19:75:7e:f2:b2:1c:57:1c:66:19:1d:ef:1a:38:e1:
         91:84:45:b6:1a:76:fa:06:c2:0c:98:0f:b9:56:f5:b4:c5:c8:
         94:87:d5:b3:53:dc:94:62:63:3d:a5:df:bd:87:0a:ff:aa:bc:
         6c:16:b2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 21:59:09 2026 by rpki-client