Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/8a12c2ec-5034-30ed-af88-561effa164b7.roa
File:                     8a12c2ec-5034-30ed-af88-561effa164b7.roa (raw, json)
Hash identifier:          yzNk7YP6hjyoDmLBLYNcM0s1kxxip3Qfuu4t0oYTqTw=
Subject key identifier:   35:C7:CD:C4:C9:C6:CC:54:96:F6:4E:40:21:B4:1C:63:9C:7E:28:E2
Certificate issuer:       /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial:       010D0C9F4328584D5E1A769A1A6B17DBE0BBA9C0
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/8a12c2ec-5034-30ed-af88-561effa164b7.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     22504
IP address blocks:        216.228.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:76:9a:1a:6b:17:db:e0:bb:a9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=bcdfe63d-6f45-40d7-98ad-68379def62bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:94:fc:c3:ab:13:22:45:e7:76:91:17:9e:aa:
                    2b:21:04:3f:b3:88:f5:94:27:19:cf:b1:25:c4:15:
                    39:d4:c1:8e:9c:de:5f:c5:70:99:1a:6d:e0:cf:1f:
                    e5:92:19:a2:6f:ee:cf:da:f8:9a:50:59:43:00:40:
                    96:88:c0:e4:52:0e:dd:59:30:a2:71:ed:1e:90:a0:
                    51:bd:9a:58:9e:42:39:c5:96:95:98:bd:19:11:27:
                    ab:97:e2:07:f2:ee:f5:87:a8:bd:65:10:44:d9:66:
                    b1:7a:60:00:7f:d1:60:71:05:be:5a:d5:11:a7:69:
                    ad:ff:d4:c5:c6:65:6b:3e:35:d7:e2:2c:1b:db:b7:
                    9c:60:ee:4b:5e:35:4f:d4:57:79:78:bb:13:d3:07:
                    0e:26:98:cd:20:07:f9:23:8d:ef:fd:a1:54:1c:2f:
                    7e:fb:bc:7c:ad:ad:86:7d:74:3e:9a:43:55:3b:10:
                    ee:77:bb:7a:04:1b:36:ab:7a:f9:ac:be:64:c9:97:
                    6e:b8:4a:f4:cb:6b:60:f4:13:01:46:8f:54:ed:ca:
                    73:64:39:04:0f:1a:ba:aa:19:96:64:17:37:93:6c:
                    5d:48:cd:13:80:78:01:5e:4d:0f:a3:64:7c:c7:dd:
                    86:1a:81:8f:da:ca:a5:7a:10:33:f6:0e:01:ca:6a:
                    11:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C7:CD:C4:C9:C6:CC:54:96:F6:4E:40:21:B4:1C:63:9C:7E:28:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/8a12c2ec-5034-30ed-af88-561effa164b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.228.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:2c:06:c2:9d:e7:96:dc:19:81:c8:c3:56:2d:66:72:69:42:
         4a:27:d4:bd:da:9b:52:9b:ae:28:23:bb:e4:a4:80:03:d1:3a:
         78:f1:b5:88:d4:37:b6:d9:30:9f:39:ca:e9:a9:d8:c3:b3:99:
         d0:52:94:9b:f0:92:5b:bf:ee:9d:e3:58:70:15:20:df:87:9b:
         48:9b:d6:ff:a6:8f:77:54:f3:94:b4:2b:b4:81:87:92:a5:e1:
         a6:35:ed:5a:fe:fe:c4:c6:f8:69:e2:20:85:da:65:6a:30:41:
         d4:57:59:c8:e4:6b:57:c8:60:6b:2b:4d:7b:d1:e0:bb:cd:1d:
         9d:d5:3e:7d:f1:13:ef:86:6b:39:dd:fc:b6:c2:43:e1:bc:66:
         f4:6d:2e:71:09:28:a0:34:1d:21:4e:82:6d:6c:c3:07:d1:ae:
         3f:1d:12:18:1b:8d:0b:1d:bf:ea:d1:c2:cb:23:53:d8:0a:13:
         49:da:6c:a9:b7:78:85:e5:f5:8f:e2:ac:b3:91:32:bb:38:1e:
         2e:bf:da:b4:c9:dd:90:81:16:23:db:43:5e:b5:f7:3b:4d:2f:
         1f:05:c9:7d:15:d5:30:32:e7:45:e3:68:3e:92:cf:47:2a:84:
         85:12:b2:40:dd:5f:bd:5a:51:a3:2b:16:de:55:1b:6d:20:9c:
         ba:c9:b9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:51:13 2026 by rpki-client