Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/4afd975e-55c0-37f7-8f2f-1f435a010e83.roa
File:                     4afd975e-55c0-37f7-8f2f-1f435a010e83.roa (raw, json)
Hash identifier:          cZMPWPgFuDwCgg5PmEejfP1MVqewLokh92QIQP7Ouf4=
Subject key identifier:   18:FA:A2:68:EB:85:75:19:31:0D:3A:B7:31:21:47:A5:85:9F:8A:A4
Certificate issuer:       /CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287
Certificate serial:       010D0C9F4328584DFA70A26A09FF712E7127E7C0
Authority key identifier: 11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/4afd975e-55c0-37f7-8f2f-1f435a010e83.roa
Signing time:             Thu 28 May 2026 01:00:10 +0000
ROA not before:           Thu 28 May 2026 01:00:10 +0000
ROA not after:            Wed 26 Aug 2026 01:00:10 +0000
asID:                     46261
IP address blocks:        107.155.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fa:70:a2:6a:09:ff:71:2e:71:27:e7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287
        Validity
            Not Before: May 28 01:00:10 2026 GMT
            Not After : Aug 26 01:00:10 2026 GMT
        Subject: CN=173b18b8-644a-4255-baee-84b1b65f5d56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4b:a3:d6:b8:3f:aa:28:46:0c:cd:5f:8f:f6:
                    e7:4f:ce:f4:3b:b6:f1:c1:83:7b:ac:54:60:e4:26:
                    98:db:0c:d6:a6:fc:e9:1b:1b:07:02:ff:ac:f1:26:
                    51:23:36:63:a9:95:89:74:aa:ec:eb:0c:d9:1a:54:
                    6f:2c:25:1e:e7:69:1c:ff:53:a8:71:6a:86:38:2b:
                    06:ab:b3:c2:a0:12:52:13:83:a3:ac:f6:6d:37:5f:
                    d9:ac:12:66:5e:e9:00:85:48:32:e2:d9:67:70:36:
                    01:bc:ae:ba:de:4e:e1:08:bb:d7:c8:16:a8:86:01:
                    63:80:e1:6b:12:bf:25:41:44:3c:84:9b:ad:0b:4e:
                    26:24:a1:f1:68:fe:ca:0c:56:9c:81:13:d8:55:17:
                    f8:93:68:0d:94:ee:6f:4b:b9:39:cd:85:09:c0:f6:
                    cf:c0:be:66:35:d0:b6:21:66:7e:cf:7e:a5:0b:c5:
                    c7:d0:cc:ed:7f:bf:85:c2:59:b4:f0:b5:6c:94:1a:
                    1c:c0:73:92:ce:9c:42:84:69:36:a2:9d:6c:a6:4c:
                    e3:03:0d:aa:7b:06:d0:e8:9a:70:5d:c2:98:9b:93:
                    af:cf:84:35:11:15:b8:65:ee:93:07:12:49:f9:d5:
                    c9:f9:c1:1a:ce:f8:35:ab:8a:43:ce:87:56:65:16:
                    0b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:FA:A2:68:EB:85:75:19:31:0D:3A:B7:31:21:47:A5:85:9F:8A:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/4afd975e-55c0-37f7-8f2f-1f435a010e83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl

            X509v3 Authority Key Identifier:
                keyid:11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.155.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:97:59:2e:1f:a8:9a:53:fa:82:2f:b2:5d:d8:25:3c:2b:e7:
         f7:0e:c9:39:23:f6:b3:e3:96:aa:a5:26:f8:1c:cb:e8:d5:9f:
         5f:2f:dd:31:82:b1:20:ed:d8:dd:42:59:0b:98:0c:d7:d7:8d:
         02:a6:e9:45:69:d7:97:76:51:0c:b8:e0:6b:21:99:ac:07:40:
         ce:07:3b:6d:8f:97:6e:23:85:0e:29:df:f3:38:f0:70:2c:72:
         80:3b:99:52:9b:f3:3d:cf:f4:f2:6a:c4:8f:f0:56:e5:68:57:
         24:20:6d:b6:69:2e:6e:4d:d1:a7:7a:e9:28:28:ba:cd:84:fc:
         6f:88:68:4d:05:e1:60:74:3c:a3:37:04:48:56:de:a8:64:9c:
         33:f6:d6:82:f6:8a:79:3a:50:93:50:3f:e8:03:4e:e7:24:a7:
         9f:74:0e:41:c7:f8:ff:9d:3d:b9:e7:1e:35:f0:8d:2b:3b:c1:
         8a:41:c2:b5:d9:13:6b:9c:b4:fd:74:10:42:cd:fc:92:c7:ec:
         cb:df:5d:81:ec:82:1a:75:41:13:2e:dc:66:9a:4e:ab:26:68:
         d2:68:83:6a:5f:ba:41:b3:93:4d:10:9c:0c:15:86:dc:e5:05:
         0c:92:5b:31:c3:52:af:5c:14:c0:d5:a4:a3:35:e5:8b:80:a4:
         c8:48:05:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 23:36:48 2026 by rpki-client