Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/702f69c0-4ec8-311b-935d-382c2fabdcef.roa
File:                     702f69c0-4ec8-311b-935d-382c2fabdcef.roa (raw, json)
Hash identifier:          1IWNr1EcBlBd/In+mHTeBGRvvzmK2fd+nMHUy34vgUQ=
Subject key identifier:   54:BC:95:16:32:E7:88:F6:CB:12:2C:EF:2C:09:17:49:DB:CC:2C:CF
Certificate issuer:       /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial:       010D0C9F4328584DFBD626EEE1AAF28CC1AECC80
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/702f69c0-4ec8-311b-935d-382c2fabdcef.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     13335
IP address blocks:        216.224.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d6:26:ee:e1:aa:f2:8c:c1:ae:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=79ae8c99-be1d-4064-a17f-defa2b731acc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:39:63:2c:b3:16:3f:29:6c:c7:4c:09:3a:59:
                    9a:86:22:6a:f5:63:2f:83:cc:f5:c2:0b:1c:6b:24:
                    b5:13:b4:04:03:8a:de:f2:3b:60:1c:9f:53:29:d7:
                    ff:24:61:45:d9:e1:65:b9:d2:fa:5c:5c:13:d4:2e:
                    35:d5:c1:e4:ea:fd:de:8f:c3:b3:c1:58:f5:60:a7:
                    38:61:cc:b9:ff:ed:04:e5:70:4d:94:77:16:c3:73:
                    2b:ad:a1:ad:c0:5f:b5:35:ed:98:b7:54:42:ac:61:
                    03:5c:5f:3f:d5:13:55:51:4a:c6:b3:41:1d:c9:5f:
                    ef:97:c0:14:e6:c7:46:0b:d9:0a:ad:32:2e:a1:43:
                    3d:d7:b0:82:da:95:49:d5:10:d1:3b:8b:18:d1:ba:
                    df:bb:46:33:47:e5:dc:c6:52:ce:0b:16:65:42:a2:
                    b8:fe:78:a6:68:d5:aa:09:a2:16:fd:2a:80:19:68:
                    8c:1f:8a:f5:65:5e:9a:69:7d:34:4a:30:a3:d5:74:
                    ae:d2:d5:ed:bb:95:e4:be:df:97:28:ff:bb:91:e7:
                    dc:65:11:53:31:af:4e:69:86:de:40:7a:5b:2b:9f:
                    31:23:92:05:e5:76:ed:86:5b:06:1e:25:4a:52:68:
                    20:30:3a:00:3a:fe:3b:8e:46:d0:ad:bc:8e:1c:ef:
                    df:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:BC:95:16:32:E7:88:F6:CB:12:2C:EF:2C:09:17:49:DB:CC:2C:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/702f69c0-4ec8-311b-935d-382c2fabdcef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl

            X509v3 Authority Key Identifier:
                keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.224.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:d0:f6:8c:6f:cf:dd:d1:c6:af:49:5a:47:43:41:b6:f2:29:
         93:3a:42:fb:c4:57:ad:9f:83:ef:da:09:4a:22:bb:95:28:9b:
         7d:a9:96:76:70:6d:a1:62:b2:30:cf:11:e8:dc:ae:d8:be:be:
         24:2f:46:fb:34:d9:b1:f9:23:e0:f0:97:57:1a:6f:8b:32:6c:
         37:91:c9:eb:d2:7c:76:2e:ce:e4:71:90:17:bc:e5:3b:61:88:
         92:ab:1a:f1:46:8b:3a:a9:98:48:bf:89:c3:5c:f9:f8:a1:61:
         68:02:5b:ae:c6:47:cd:26:1c:52:bc:35:06:b8:3d:a4:36:86:
         0e:b8:70:48:6a:47:d6:7f:70:54:74:6f:ad:eb:45:d9:f4:5e:
         99:3a:f5:78:89:8d:84:04:5e:82:4e:bb:8c:86:5b:11:a6:ee:
         fa:d0:af:08:f0:c2:ea:8c:49:c8:1e:56:46:f0:a9:69:19:52:
         8a:0a:db:70:3f:9f:52:7d:03:06:5f:94:02:c3:a3:e8:df:91:
         d0:f4:e9:87:13:2a:d0:20:45:85:27:7f:98:4a:ba:f6:8f:c3:
         bc:23:33:ab:5a:9a:95:0e:a5:fd:c6:1a:74:3a:8f:80:2e:16:
         ee:c2:e1:6c:a5:a9:43:e9:0d:21:75:a7:7b:37:b8:f4:75:75:
         fd:96:1c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:37:05 2026 by rpki-client