Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/4f28f570-0ebb-3fd6-aa6f-3ea171924c68.roa
File:                     4f28f570-0ebb-3fd6-aa6f-3ea171924c68.roa (raw, json)
Hash identifier:          0WGCTpnsGfzU1vHLMTWyY0K6xpXnRNMBDFwgIrS73ak=
Subject key identifier:   FB:10:B7:06:BC:3D:98:D2:39:ED:E4:56:E1:9C:40:A3:5E:E3:01:F1
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584D8EF97DDBEB5F85B6F511D630
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/4f28f570-0ebb-3fd6-aa6f-3ea171924c68.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     32292
IP address blocks:        216.122.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Apr 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f9:7d:db:eb:5f:85:b6:f5:11:d6:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=e6cb5e58-7425-4b9a-913e-686dadb2cad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ef:f6:3f:5c:ac:87:6f:6f:e9:fa:45:21:9e:
                    00:36:9b:82:6d:b0:d8:f7:52:9d:10:02:c1:6a:3a:
                    ea:88:29:bd:13:a5:2f:ac:a9:b8:81:33:22:79:46:
                    c7:5e:e4:e4:36:f5:be:f6:4a:31:e3:03:c9:f9:fb:
                    c3:63:63:71:16:c7:27:80:50:94:73:49:b5:9a:64:
                    03:ca:7a:6f:3c:17:60:05:49:74:69:81:43:49:0c:
                    58:40:88:27:20:83:7f:14:86:eb:49:c2:03:5e:35:
                    1b:db:89:6d:ac:5b:32:a2:f6:88:bf:f2:71:97:b9:
                    55:40:da:ce:e8:4c:39:ff:b4:07:04:f0:4e:17:cb:
                    b5:98:0c:36:40:c1:53:df:0c:c5:0d:a0:c3:6b:48:
                    dc:e9:a1:f1:d1:e2:b5:f1:7e:7d:d1:c9:86:03:53:
                    97:40:28:13:75:3f:8a:26:b8:71:8e:65:a8:65:24:
                    de:9b:cc:64:b5:9c:00:5f:e9:07:76:7f:73:4a:68:
                    1a:1c:18:3a:80:4f:d4:2d:a7:28:24:2e:2a:eb:45:
                    98:c5:1a:00:27:ef:52:46:11:48:6e:56:70:17:e9:
                    6b:b6:b6:b0:fe:1c:fc:63:7b:dc:5e:3e:49:15:c0:
                    51:8a:49:4d:cd:96:d9:ee:94:e3:f4:d8:53:e4:01:
                    6e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:10:B7:06:BC:3D:98:D2:39:ED:E4:56:E1:9C:40:A3:5E:E3:01:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/4f28f570-0ebb-3fd6-aa6f-3ea171924c68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:61:13:f5:26:74:a3:83:22:98:c6:01:3f:bd:ae:cc:3b:3e:
         fa:de:14:30:91:68:80:9d:8e:8b:3a:19:eb:21:44:90:7f:4b:
         12:f4:5b:49:57:1c:f0:a6:5c:95:11:9b:f7:3e:46:e8:c0:17:
         2a:c5:4b:d1:87:70:15:1c:d8:c7:ba:fb:ef:70:58:0b:8a:0d:
         da:70:36:da:3a:0e:00:88:ae:65:1d:a4:cd:c3:53:1b:9a:14:
         99:99:75:69:85:e4:d7:e5:3c:25:72:30:8d:4a:27:60:e8:6f:
         bd:7a:ea:9b:c4:64:2f:b7:5b:e0:5a:c8:06:d6:51:9c:b2:0f:
         77:f8:f5:b3:fa:0e:2a:e5:79:b1:dd:02:5a:65:f0:c7:7f:bb:
         19:9d:f6:b8:a6:6c:6c:5e:bb:2b:d0:69:b7:10:45:78:ac:73:
         97:ce:67:db:4c:dd:27:0a:07:b1:2d:3e:f0:75:2b:96:c3:16:
         1a:ec:16:ab:1d:c3:b4:1e:31:73:88:be:67:d7:d0:9e:a5:5a:
         e2:62:83:3e:c0:ed:13:fc:1b:4c:3e:28:6f:c7:d3:ad:95:01:
         61:87:50:60:90:f0:fe:ed:3b:1e:70:c3:b2:78:13:6c:b7:06:
         22:46:9f:ef:0c:f2:26:39:eb:0a:6f:e8:d0:bc:c7:d8:66:70:
         b7:2d:7f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 20:50:55 2026 by rpki-client