Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/7f659af6-1d84-34e3-9205-6190389bd336.roa
File:                     7f659af6-1d84-34e3-9205-6190389bd336.roa (raw, json)
Hash identifier:          pEFJvwmduc5dmAq+OHdJwb15qKeMDWF0RPt6IG4Gvdo=
Subject key identifier:   CA:B6:30:88:29:8E:24:F4:22:D1:C8:18:01:E7:DF:ED:18:24:D0:59
Certificate issuer:       /CN=a3b6948d-3ee1-4153-9c40-1cd7465bea2b
Certificate serial:       010D0C9F4328584DE84B407CACECAB8A3655BAF0
Authority key identifier: 90:8D:6E:3D:A8:3C:E5:E7:6B:D5:3D:68:92:0F:67:5B:A6:D6:3E:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/7f659af6-1d84-34e3-9205-6190389bd336.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     16509
IP address blocks:        216.205.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:40:7c:ac:ec:ab:8a:36:55:ba:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3b6948d-3ee1-4153-9c40-1cd7465bea2b
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=e004c1e4-85c1-4165-a4f1-938c6764cf1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:86:0b:8f:9c:63:9a:3e:ad:00:cc:5a:92:24:
                    66:a3:a4:83:23:c3:1d:12:be:6a:82:fb:83:48:de:
                    df:1f:cc:be:e0:db:06:c4:48:ba:e9:02:e1:cf:4c:
                    df:33:25:a4:c0:6f:ab:a6:9d:38:55:b5:01:00:3d:
                    75:d4:9b:b0:b6:0d:cd:02:7b:60:58:7b:04:5e:00:
                    51:d8:07:a5:a3:2b:07:3e:fe:1e:76:5c:00:26:48:
                    a3:cb:c2:0f:6b:5d:f6:69:c3:46:85:7d:de:b6:ee:
                    65:eb:0b:73:c1:cf:da:42:e8:54:c6:23:e6:a9:bf:
                    ff:6c:44:1c:1f:db:6b:ab:0f:83:63:b4:c6:b4:b5:
                    d8:66:4f:9e:f1:3c:26:6c:b5:ee:40:e3:66:37:57:
                    93:30:55:34:f9:8b:36:53:a8:42:f1:26:da:eb:e0:
                    38:a3:fa:83:21:7b:ac:48:9b:6d:34:7e:21:ec:8a:
                    d0:ff:d5:a7:a3:a0:d1:49:03:88:ac:29:58:4e:7c:
                    a6:9d:c0:3c:2b:e0:56:e4:0d:29:e5:61:c7:33:d1:
                    15:4b:17:06:dc:24:7c:6a:29:a9:95:dd:33:c1:41:
                    87:98:4d:12:3f:41:70:6b:ed:38:c3:63:08:8f:f4:
                    70:ef:7c:d8:59:62:ef:39:59:6c:9b:20:66:44:5f:
                    a3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:B6:30:88:29:8E:24:F4:22:D1:C8:18:01:E7:DF:ED:18:24:D0:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/7f659af6-1d84-34e3-9205-6190389bd336.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.crl

            X509v3 Authority Key Identifier:
                keyid:90:8D:6E:3D:A8:3C:E5:E7:6B:D5:3D:68:92:0F:67:5B:A6:D6:3E:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.205.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:11:b2:4a:49:f5:34:32:9c:72:7f:03:41:b5:ba:4c:c9:5f:
         fc:f4:51:a5:d5:95:21:53:9f:4b:b1:e2:67:57:33:fd:d7:c5:
         f7:5c:b5:c5:bb:d1:23:06:16:97:36:9a:3b:3a:a4:e9:a9:a8:
         f5:d9:fd:2c:fe:d9:63:c3:f6:61:02:99:b0:ad:0e:d6:f9:d5:
         08:44:dc:12:d6:b7:20:44:02:f8:93:3d:e0:9c:79:ef:bb:9a:
         bf:c6:a4:87:8c:d9:12:69:a3:e7:fa:e1:13:a4:55:e8:a0:f5:
         f1:bf:24:b2:28:9d:8b:7a:54:6c:b6:d5:49:be:4c:a0:d0:7c:
         15:8d:35:53:17:42:af:63:d9:b3:9e:5d:2f:a1:24:7c:55:e2:
         46:0d:aa:d5:4f:d9:b2:1e:a6:9c:95:34:63:5f:c0:1c:a1:04:
         73:b7:3a:74:95:b3:84:2a:18:51:4f:66:7e:66:b1:fe:08:92:
         24:05:fb:70:63:4c:b4:17:07:84:88:2c:00:a0:36:7a:24:8d:
         06:fd:a5:11:99:b7:e6:cb:04:02:06:8c:8f:12:3c:39:62:cc:
         5b:ae:de:95:b0:af:04:4f:1f:ab:d2:b5:3c:8e:2d:25:d9:49:
         e0:0b:d3:e0:4d:f4:f3:f4:d5:3a:07:c0:42:cf:c7:2a:a8:f0:
         4b:5e:c8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 16:07:12 2026 by rpki-client