Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d38fbc1c-f507-303b-b2a2-33a124b143ca.roa
File:                     d38fbc1c-f507-303b-b2a2-33a124b143ca.roa (raw, json)
Hash identifier:          cN9r7LdJzt10JuiUQhYK24swGyxMWAGTmwAUQ07hfLo=
Subject key identifier:   FB:3C:1F:A6:E7:B6:11:1B:BC:C3:F5:F2:56:71:B8:A4:CF:DF:5C:B8
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584E0005D0CAD018A121C096F100
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d38fbc1c-f507-303b-b2a2-33a124b143ca.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     852
IP address blocks:        216.232.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:d0:ca:d0:18:a1:21:c0:96:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=f7f3b3c2-4549-422c-82b8-9253ca46cf7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0c:86:2f:08:2b:6d:05:10:ae:a0:f4:68:99:
                    18:af:43:03:10:55:6d:7e:1e:64:ba:ab:cb:c2:8c:
                    a8:b5:b1:19:d8:06:8d:77:c0:56:46:38:93:88:26:
                    0a:cd:b6:e1:76:f6:69:19:58:d9:d4:12:57:52:22:
                    eb:de:35:2d:93:a9:83:09:6e:04:c5:2b:07:af:37:
                    a3:3c:6d:15:db:06:0e:1a:4f:de:04:18:37:ff:54:
                    15:45:0a:c2:44:88:29:74:ae:ae:bc:10:62:96:e6:
                    86:9f:0e:8e:7c:66:93:2c:08:09:84:e4:c2:88:2e:
                    1e:c1:da:a9:05:4a:7f:30:fc:b5:51:86:54:e0:fe:
                    4c:db:53:e3:9c:5e:a9:f1:08:7a:be:bf:53:bc:eb:
                    0f:24:bb:7f:50:0f:fe:f9:b1:42:8c:ba:87:18:91:
                    a7:34:0a:26:a8:ae:88:9e:d7:7d:a0:f5:8d:a3:36:
                    bb:69:d3:cf:82:2d:bf:eb:7f:cd:43:2b:c4:cf:de:
                    da:86:ae:c5:91:ee:ed:b7:1c:5f:af:f3:1b:58:f6:
                    db:db:32:42:ca:06:34:a6:ef:1b:78:3b:7b:29:81:
                    c2:f0:dd:1c:63:cd:56:74:b9:cd:ac:64:5c:6b:c9:
                    fd:c9:4f:da:f1:31:3a:6b:db:d6:68:71:5e:e8:9f:
                    0c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:3C:1F:A6:E7:B6:11:1B:BC:C3:F5:F2:56:71:B8:A4:CF:DF:5C:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d38fbc1c-f507-303b-b2a2-33a124b143ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.232.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:a6:2c:d9:e2:ca:f8:f5:df:29:8f:e1:8f:3d:9a:4c:0f:59:
         c7:5c:e1:9e:6d:65:05:a3:81:16:c7:09:84:63:c3:d8:2a:63:
         16:1d:1e:0c:35:a2:2e:aa:95:dd:a2:a3:e2:47:e8:bc:5b:06:
         09:cf:72:23:f5:ae:a6:e7:43:0d:0b:4c:55:cd:fe:44:4a:38:
         ba:f5:06:93:e7:da:93:0c:48:2e:a9:47:08:19:1f:3f:71:d9:
         aa:55:f5:09:6c:56:ea:d2:66:3b:6a:13:b1:1f:32:6a:74:07:
         fd:d9:20:7f:68:fb:09:3b:44:25:17:20:38:48:d8:bd:2e:9b:
         6c:6e:c4:54:67:3a:99:50:a1:d8:4d:d3:cd:13:8d:f9:3f:a7:
         ae:5d:9c:4d:70:d2:d2:d1:7e:8e:42:2f:00:8d:83:cb:4d:3f:
         e4:91:91:61:b2:f8:67:d6:d0:b3:92:a8:81:82:de:30:4a:88:
         e1:38:e6:ef:22:01:fa:62:31:60:82:de:4a:b9:74:1c:47:75:
         02:a6:cc:7d:2a:ce:19:63:60:cf:f7:01:a3:df:6f:b0:1e:18:
         73:3a:dc:8f:63:44:4c:26:26:83:14:de:33:36:41:31:be:96:
         a7:19:af:7a:81:39:96:b0:cc:3f:42:18:1c:21:f2:79:ac:68:
         28:7c:4d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:56:12 2026 by rpki-client