Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/898d41dd-94de-31be-b7c0-cd0da078ef25.roa
File:                     898d41dd-94de-31be-b7c0-cd0da078ef25.roa (raw, json)
Hash identifier:          WAf65BK7emffXAHrX7Q6g2cDfM1vMfI0U6UQ/98EhK4=
Subject key identifier:   0F:70:E2:39:95:8F:40:3A:26:86:AB:E6:75:09:CF:3C:8B:A8:B7:78
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584E0700A3960F7A1BEA33834C00
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/898d41dd-94de-31be-b7c0-cd0da078ef25.roa
Signing time:             Mon 01 Jun 2026 13:00:10 +0000
ROA not before:           Mon 01 Jun 2026 13:00:10 +0000
ROA not after:            Sun 30 Aug 2026 13:00:10 +0000
asID:                     53356
IP address blocks:        216.24.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:00:a3:96:0f:7a:1b:ea:33:83:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Jun  1 13:00:10 2026 GMT
            Not After : Aug 30 13:00:10 2026 GMT
        Subject: CN=960acc43-a929-43c3-9d0f-292676a6d080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:84:97:c5:6f:4c:14:07:fa:00:05:99:07:9d:
                    b2:c8:73:44:5a:79:81:08:69:28:6d:33:0d:19:85:
                    94:c4:c5:f5:75:47:8a:27:d6:f1:1e:da:7f:5b:3b:
                    09:cb:af:49:ca:fd:ec:16:34:8d:8a:dc:df:6a:cc:
                    3a:f6:bb:eb:dd:3e:ee:5d:8b:f6:b7:b8:b1:2b:1e:
                    e5:21:1f:bf:c1:33:18:b3:e3:0a:54:c6:8f:a6:01:
                    95:8c:b8:7d:94:bc:76:45:37:74:b9:62:ae:b9:c0:
                    f8:31:a0:86:ee:eb:99:ed:fb:8f:6e:36:52:14:17:
                    a4:13:6b:c0:a9:4e:e5:53:79:6d:42:59:8f:fb:c9:
                    70:e5:fa:ae:59:e3:36:ab:7d:15:6a:da:b3:28:7a:
                    77:fe:fb:72:ed:ba:b4:63:fe:3c:cc:f3:2f:f2:2b:
                    e7:38:02:fc:ca:d0:d3:b3:53:01:e2:e9:18:73:85:
                    ae:32:11:d7:a3:dc:d8:2f:48:49:51:c5:f7:db:09:
                    8e:1a:9c:d3:ef:ca:90:c7:aa:69:71:f1:d5:d1:c1:
                    d1:26:1d:33:43:e7:15:d4:fd:fb:06:61:98:2a:35:
                    79:2c:83:1f:1f:94:cb:cd:64:c0:c5:a7:c6:17:b4:
                    30:92:20:74:39:18:11:39:98:cc:ef:61:aa:9e:f9:
                    ad:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:70:E2:39:95:8F:40:3A:26:86:AB:E6:75:09:CF:3C:8B:A8:B7:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/898d41dd-94de-31be-b7c0-cd0da078ef25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.24.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:36:d4:c5:0a:17:83:84:a8:5c:16:ab:38:54:08:90:6f:0c:
         f9:b0:b9:c8:9d:d1:e2:3d:f3:17:1c:18:e8:88:4c:6d:49:48:
         20:e2:46:a0:47:a4:85:6c:92:9c:10:af:82:9b:56:a5:56:17:
         55:f7:19:50:90:a8:06:3f:fd:ed:20:9a:ab:76:92:49:8d:ef:
         16:f3:54:9b:f4:39:b2:4c:41:e5:d2:fa:76:6a:cb:6d:e1:a8:
         1e:14:f7:af:af:5c:b9:27:04:ea:50:52:c9:c0:b8:c6:5f:44:
         83:dc:46:8d:4e:c9:93:18:17:2c:79:20:6b:f7:8e:10:ef:87:
         2f:45:65:08:22:33:9f:5b:48:8e:2b:98:1c:08:f9:0e:c1:b9:
         93:2c:05:e3:13:0b:c1:21:c9:33:00:16:75:21:4f:08:02:5e:
         1d:a3:ad:4a:cd:ab:1f:b9:d2:8a:3a:e9:f2:5f:a6:bf:1a:1d:
         8d:71:1e:d2:cf:c8:a3:8c:79:aa:1a:e7:fb:d3:a5:31:a6:9e:
         49:1e:0f:9a:fa:95:fe:ee:f6:b3:90:6b:b8:2b:2c:9a:92:71:
         42:66:c6:6f:43:01:67:3e:27:57:e9:39:49:8f:64:10:f4:64:
         d1:46:e7:37:7e:67:ae:84:54:10:a8:35:46:79:af:92:78:82:
         58:43:0e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:09:08 2026 by rpki-client