Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/80755ad2-291d-3607-a051-91a54d179246.roa
File:                     80755ad2-291d-3607-a051-91a54d179246.roa (raw, json)
Hash identifier:          SWykwcpi5VGU+o36I7+JexWNrcTLON2RakrXBxZPvtI=
Subject key identifier:   A5:EB:96:E3:94:BC:AB:3F:6A:E9:AF:97:5A:8E:A9:27:89:14:5C:64
Certificate issuer:       /CN=5a060f48-6584-4864-ba80-2bac55c51550
Certificate serial:       010D0C9F4328584E3A2F2B1B8259EFD76AAE87C0
Authority key identifier: 3F:17:D2:5D:8E:77:76:32:3A:86:89:09:DD:A4:67:8D:E7:4C:EF:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/80755ad2-291d-3607-a051-91a54d179246.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     22363
IP address blocks:        216.168.4.0/24 maxlen: 24
                          216.168.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/5a060f48-6584-4864-ba80-2bac55c51550.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/5a060f48-6584-4864-ba80-2bac55c51550.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:2b:1b:82:59:ef:d7:6a:ae:87:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a060f48-6584-4864-ba80-2bac55c51550
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=77d9ec13-7cae-48af-ae63-e909bf16cbed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:60:4d:15:cf:e5:be:1b:97:7c:f1:a7:61:87:
                    85:c8:aa:77:73:c6:8c:00:d5:45:79:98:c1:49:05:
                    2d:ff:01:76:61:1a:6f:70:d9:65:30:aa:3e:aa:79:
                    fa:06:ad:c5:9f:f4:ac:bc:d2:ac:45:92:39:89:7c:
                    5f:3f:84:b4:7b:b4:1c:e2:2f:e6:26:27:60:bd:c5:
                    1a:06:d4:ae:12:99:79:bd:de:bf:59:24:d6:ee:3b:
                    ff:b4:8c:e4:bf:c8:ac:1d:75:9e:5b:a7:73:55:95:
                    f3:79:00:5b:97:7c:6c:26:1f:07:05:54:b1:70:01:
                    57:4f:93:a0:54:46:bb:d8:93:6b:af:01:56:6f:25:
                    b4:74:8c:42:aa:a5:4e:58:87:ff:32:7e:1f:34:1c:
                    4c:cf:17:06:0a:24:a7:c3:c8:47:ba:69:54:c6:1b:
                    bb:4d:af:57:7c:17:a0:d4:ae:b1:0b:27:a7:87:9f:
                    fb:95:6e:9a:38:29:c8:0f:3c:6a:9a:58:03:12:cd:
                    30:dd:72:16:65:c4:13:7b:11:b8:64:dc:b7:d9:b1:
                    41:f8:c6:01:21:35:c5:68:97:7d:0b:c8:f5:8b:8c:
                    61:57:1e:e5:e6:72:b9:b8:b6:19:c4:7f:6d:5e:18:
                    b7:1f:36:83:d8:a1:fa:2d:f0:7c:d1:a8:d5:6a:7b:
                    64:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:EB:96:E3:94:BC:AB:3F:6A:E9:AF:97:5A:8E:A9:27:89:14:5C:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/80755ad2-291d-3607-a051-91a54d179246.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/5a060f48-6584-4864-ba80-2bac55c51550.crl

            X509v3 Authority Key Identifier:
                keyid:3F:17:D2:5D:8E:77:76:32:3A:86:89:09:DD:A4:67:8D:E7:4C:EF:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.168.4.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:7b:48:f2:93:4e:19:3d:af:dd:53:1f:b5:30:66:3c:76:bd:
         17:93:3f:af:82:4a:3d:a9:b6:c6:41:69:73:41:5d:aa:35:a3:
         15:58:73:d4:f7:56:1c:3d:1e:3c:59:6d:48:3a:2f:23:10:3a:
         85:b4:f4:ba:e8:a3:ca:39:65:ce:98:dc:30:e0:2a:82:6e:76:
         e8:02:b5:da:06:6e:e3:88:4e:31:d6:d8:7b:98:c5:46:f2:19:
         72:83:d3:9b:36:5f:61:e8:77:81:e4:db:88:84:67:68:4e:d1:
         f8:1a:a2:86:72:10:18:2f:80:cb:37:f6:95:08:52:0d:7e:e9:
         43:f1:ea:e1:5b:73:2e:55:1c:05:11:b9:b4:17:1d:8f:c3:18:
         f9:e5:56:e2:60:6f:8c:fb:82:2c:74:73:f6:32:ef:a2:74:15:
         66:9c:c1:65:39:d8:93:d9:6c:7b:4b:c6:a7:f3:6d:2b:34:6a:
         6d:20:e1:99:65:4c:b8:d2:a5:dc:08:13:79:a8:90:09:9d:e6:
         aa:bd:09:82:28:4c:02:47:fc:0c:5c:81:d6:b0:ce:26:49:18:
         fd:19:e0:13:b6:ec:39:87:9a:66:3f:97:cb:7a:83:8b:dd:ea:
         3b:8f:9f:9b:2b:4d:d4:d0:26:d2:8f:a5:ae:2d:da:91:e2:a2:
         91:78:6c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:42:46 2026 by rpki-client