Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/6aca3f82-0d7b-34d2-b76d-a70916887f2f.roa
File:                     6aca3f82-0d7b-34d2-b76d-a70916887f2f.roa (raw, json)
Hash identifier:          UFPmBNCde9GvfkWiC9cwwYIfY+32DSE0bKQ7M4rkJus=
Subject key identifier:   6A:59:11:D3:8D:ED:D1:85:3C:F1:F8:13:00:12:D8:9D:52:D2:DA:63
Certificate issuer:       /CN=30ed4af0-ad84-44f1-84da-cd9b1c667340
Certificate serial:       010D0C9F4328584DD625C7CD639EDA137ED1AB40
Authority key identifier: 7C:37:81:36:D0:60:6A:2C:D8:E4:1D:C9:4F:E7:C0:DB:38:5D:76:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/6aca3f82-0d7b-34d2-b76d-a70916887f2f.roa
Signing time:             Fri 15 May 2026 01:00:24 +0000
ROA not before:           Fri 15 May 2026 01:00:24 +0000
ROA not after:            Thu 13 Aug 2026 01:00:24 +0000
asID:                     32707
IP address blocks:        216.8.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/30ed4af0-ad84-44f1-84da-cd9b1c667340.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/30ed4af0-ad84-44f1-84da-cd9b1c667340.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d6:25:c7:cd:63:9e:da:13:7e:d1:ab:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30ed4af0-ad84-44f1-84da-cd9b1c667340
        Validity
            Not Before: May 15 01:00:24 2026 GMT
            Not After : Aug 13 01:00:24 2026 GMT
        Subject: CN=8574eb9b-51ba-4af0-807d-8fd21336cab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8b:a0:56:25:3a:62:3e:9a:af:2c:c1:e7:7e:
                    2e:ce:7a:7b:b1:00:92:90:f1:82:aa:08:43:c6:08:
                    6f:a3:73:56:5d:4d:c8:9c:9a:c4:c0:8e:c4:b3:7a:
                    89:0b:f6:3b:14:72:71:a0:9e:43:80:44:65:fa:cb:
                    33:33:c5:87:e6:e4:9e:72:ac:9c:19:f1:bc:2b:ec:
                    16:02:fe:ba:8e:75:52:e9:b4:99:10:d4:35:52:06:
                    65:9c:6b:50:b8:73:e9:34:37:e9:43:66:77:0c:72:
                    2f:77:c3:10:9f:f8:69:74:77:e0:b0:b7:11:8d:9f:
                    ec:e0:0d:a8:a5:c2:1e:c3:b7:9c:47:b6:31:b7:58:
                    d6:06:66:dd:f4:84:23:51:41:3d:31:63:ae:87:47:
                    75:f7:b0:13:08:cf:1d:9f:92:3e:6f:90:ab:37:8d:
                    5c:df:99:c7:78:00:06:c7:a2:71:24:ad:24:62:13:
                    c7:52:4e:bb:88:9a:65:5e:33:19:8f:5a:72:32:94:
                    ee:8b:44:9c:7a:68:b0:d9:29:c7:cf:3a:62:20:d5:
                    55:98:64:d8:7e:3a:c9:a0:6d:66:ce:91:94:7c:db:
                    f2:ef:e0:38:5e:5d:c9:5c:07:38:36:8e:a0:cc:07:
                    3f:ae:57:2d:dd:33:c5:5d:da:c0:86:99:ce:68:83:
                    15:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:59:11:D3:8D:ED:D1:85:3C:F1:F8:13:00:12:D8:9D:52:D2:DA:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/6aca3f82-0d7b-34d2-b76d-a70916887f2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/30ed4af0-ad84-44f1-84da-cd9b1c667340.crl

            X509v3 Authority Key Identifier:
                keyid:7C:37:81:36:D0:60:6A:2C:D8:E4:1D:C9:4F:E7:C0:DB:38:5D:76:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.8.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:f3:fd:95:be:0f:3a:4c:43:69:0d:fc:7f:c1:ea:82:ea:ff:
         49:5c:f5:20:70:21:31:08:41:82:a9:26:04:15:9c:89:a2:ec:
         18:d8:ee:44:c9:e5:b7:fe:2c:b0:68:1e:27:82:82:1e:ac:84:
         cf:69:23:76:5e:5d:51:1f:a0:2c:31:68:36:33:11:80:a7:95:
         3d:16:19:41:c4:76:f0:e7:c9:99:a4:68:62:eb:92:75:43:5e:
         aa:26:31:6f:8f:a0:f9:a4:ca:20:2e:88:e1:ee:01:a5:4e:73:
         32:47:e7:8b:4e:6f:05:71:a2:73:1a:ca:62:45:3f:bf:87:75:
         df:2c:0d:ee:2e:30:e6:30:c6:80:00:87:c9:d2:02:f1:62:f8:
         1a:bd:ce:35:ae:c7:e3:9a:09:0f:30:20:3e:c0:db:c1:da:1f:
         e8:e3:3b:9a:0f:40:66:3e:91:3a:ea:08:32:52:6c:db:05:0f:
         1b:82:bf:28:05:39:c4:d7:1e:7a:55:78:7c:4a:57:fb:c8:bb:
         49:bc:4b:92:63:9c:b4:d1:60:50:10:b3:2d:53:d7:4a:8e:b3:
         8f:48:b2:9f:d0:c0:f7:c0:60:de:d4:60:00:a9:0f:62:19:97:
         fb:6d:cb:5d:17:0f:ee:07:cc:29:f1:95:2c:04:e9:48:b9:47:
         5c:20:b4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 13:41:15 2026 by rpki-client