Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/13ad9c53-2bea-3d0b-af1f-09c18fdfea58.roa
File:                     13ad9c53-2bea-3d0b-af1f-09c18fdfea58.roa (raw, json)
Hash identifier:          w8BxtIBXu7Cg/6xBc2KtsqV+wRiz0nrAGt8cyZqKqrc=
Subject key identifier:   E8:48:59:04:9E:B0:61:D0:D2:57:DB:EA:D5:BD:2F:7C:3A:3D:DA:13
Certificate issuer:       /CN=5a060f48-6584-4864-ba80-2bac55c51550
Certificate serial:       010D0C9F4328584E0005E5F858E0B3F6DD273B00
Authority key identifier: 3F:17:D2:5D:8E:77:76:32:3A:86:89:09:DD:A4:67:8D:E7:4C:EF:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/13ad9c53-2bea-3d0b-af1f-09c18fdfea58.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     22363
IP address blocks:        216.168.20.0/24 maxlen: 24
                          216.168.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/5a060f48-6584-4864-ba80-2bac55c51550.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/5a060f48-6584-4864-ba80-2bac55c51550.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:e5:f8:58:e0:b3:f6:dd:27:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a060f48-6584-4864-ba80-2bac55c51550
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=22a38e3a-3d6f-4b71-a7ec-ab9b8f4fc3cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:4e:bd:e5:ce:12:a9:1d:50:f1:8b:30:35:63:
                    87:75:38:f7:0d:c3:5b:33:95:b4:bf:1f:0d:ca:48:
                    77:11:d6:00:50:fe:b5:0a:89:2b:b4:08:3f:32:d1:
                    e5:cc:e0:86:6e:1d:68:d5:65:97:59:82:be:4d:fb:
                    ec:df:6e:ff:fd:a3:28:2c:17:26:b0:49:3a:bd:a7:
                    f7:f3:f9:8f:58:f3:bd:63:8b:20:19:aa:34:15:36:
                    e9:a1:d2:41:06:e1:27:94:96:a0:72:0b:f5:2a:a5:
                    f7:76:ed:a5:c7:74:c4:b5:26:c3:34:2f:f5:5d:81:
                    69:68:7b:ca:3d:18:cf:0d:b1:35:8c:64:b0:82:d6:
                    1d:13:a0:9b:4a:ef:cc:bd:52:87:a5:3b:21:35:21:
                    37:11:59:f1:62:f2:32:e0:34:73:91:3c:af:3e:f4:
                    a4:8c:5e:c7:13:cd:0d:26:e7:da:75:f8:9c:9f:27:
                    52:d4:d2:3f:79:eb:91:93:c4:60:a0:71:ec:65:1f:
                    ea:45:9f:4b:96:c9:5e:03:31:30:20:a6:87:5f:f5:
                    5e:eb:88:83:ac:c0:7f:24:3c:ab:26:5c:7f:44:7f:
                    bc:6c:b1:96:10:cf:05:14:8c:47:5a:b5:8e:d5:42:
                    66:25:b3:0e:12:92:26:2b:8a:e7:f2:e6:24:04:c8:
                    9f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:48:59:04:9E:B0:61:D0:D2:57:DB:EA:D5:BD:2F:7C:3A:3D:DA:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/13ad9c53-2bea-3d0b-af1f-09c18fdfea58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/5a060f48-6584-4864-ba80-2bac55c51550.crl

            X509v3 Authority Key Identifier:
                keyid:3F:17:D2:5D:8E:77:76:32:3A:86:89:09:DD:A4:67:8D:E7:4C:EF:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.168.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:bb:15:83:36:d1:8e:aa:ed:5c:78:63:37:54:77:5e:54:6a:
         75:e8:bb:8e:39:23:bc:25:a9:11:e6:8e:a5:b8:90:cb:58:db:
         94:00:85:c3:18:29:53:8f:01:a8:f5:8a:b8:ce:e5:f3:63:b0:
         f3:01:ef:1d:e4:f4:f5:00:f0:80:f2:ce:81:6c:81:dd:bc:70:
         a1:25:3f:00:8a:17:6f:e5:ff:28:2e:26:a2:4f:20:3d:ec:c4:
         46:7b:f4:e4:39:c6:2d:7e:1c:92:d8:99:b6:54:18:21:84:83:
         6b:d0:1f:77:53:39:6c:54:cb:45:0d:e2:d8:ae:3a:4b:a4:75:
         cc:82:cc:55:e4:cb:0c:ec:d6:51:48:62:a8:d8:1e:eb:02:7a:
         1a:19:52:6f:91:5d:1a:d6:a2:90:04:73:57:2b:12:05:50:10:
         c4:75:6d:44:5c:1b:78:25:a1:16:13:1a:3d:d4:bc:92:ca:af:
         ce:cd:06:87:6e:3e:cf:1b:d1:67:86:54:39:48:40:68:be:60:
         f7:38:b5:36:cb:b9:e3:c9:f4:93:50:ed:00:fb:f0:ed:ff:36:
         c3:c1:86:c6:25:a7:a8:75:4f:cc:f9:95:ee:90:0c:bf:0b:99:
         25:03:8d:f0:7d:a8:24:80:1a:0d:52:6d:94:4e:f9:6f:16:b8:
         cf:e0:a0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 07:12:31 2026 by rpki-client