Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/6a526ebf-a4ef-3aee-a557-bb635097fd50.roa
File:                     6a526ebf-a4ef-3aee-a557-bb635097fd50.roa (raw, json)
Hash identifier:          C9rVViL2lhqRTHvh36yB+wJws5OWXsigdBr2Hca+d/k=
Subject key identifier:   1A:9D:A2:20:C5:25:1D:ED:F8:6C:09:FE:4E:B4:21:D4:90:C1:9B:5F
Certificate issuer:       /CN=1add3b23-5fb0-4412-be17-98450d352516
Certificate serial:       010D0C9F4328584D12D79C19FC951668921E35C0
Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/6a526ebf-a4ef-3aee-a557-bb635097fd50.roa
Signing time:             Fri 06 Mar 2026 02:00:31 +0000
ROA not before:           Fri 06 Mar 2026 02:00:31 +0000
ROA not after:            Thu 04 Jun 2026 01:00:31 +0000
asID:                     32618
IP address blocks:        216.37.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:12:d7:9c:19:fc:95:16:68:92:1e:35:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516
        Validity
            Not Before: Mar  6 02:00:31 2026 GMT
            Not After : Jun  4 01:00:31 2026 GMT
        Subject: CN=b0192df1-d02d-4bda-9456-53c33a5c52fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2e:5c:67:c1:ee:0f:30:0d:44:87:18:a6:37:
                    ab:b3:a3:3e:ca:c1:14:88:d5:21:89:81:8b:5a:63:
                    ff:23:32:18:06:ea:f5:39:b4:85:a0:ad:02:d7:72:
                    1a:9e:b8:22:44:13:13:0d:1c:26:a1:d4:4b:4b:30:
                    bd:93:42:85:d0:89:76:16:b9:8d:f7:f6:c4:18:d8:
                    08:71:6c:05:23:81:2e:41:10:4b:09:92:c0:77:80:
                    db:e0:e4:dd:94:03:2f:f2:67:15:17:08:55:f1:d8:
                    2f:ae:5a:06:c7:32:3a:82:d1:1b:12:d5:71:8d:86:
                    eb:59:80:2a:52:f3:5c:b0:ca:c5:1c:b0:c4:fa:35:
                    91:ec:fc:73:51:56:50:8a:22:bd:83:cb:58:16:fd:
                    c8:6c:4f:84:3b:2c:d3:8c:d2:4e:95:c9:f6:49:2f:
                    a6:f1:79:33:02:d8:51:c7:0a:4c:f2:cf:41:eb:a2:
                    e9:4e:26:f9:04:dd:fd:fa:56:ed:be:1a:50:29:8e:
                    0c:b3:69:7d:97:e0:3a:c4:77:0a:f2:c4:f4:11:70:
                    42:5f:d3:22:8b:11:44:7d:8e:6a:af:ef:a5:24:64:
                    bc:1a:8f:0f:92:df:33:52:f0:0c:36:81:ff:19:7c:
                    b3:fe:1d:2f:04:5f:f9:6b:ef:7c:d9:fc:b9:62:a8:
                    35:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:9D:A2:20:C5:25:1D:ED:F8:6C:09:FE:4E:B4:21:D4:90:C1:9B:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/6a526ebf-a4ef-3aee-a557-bb635097fd50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl

            X509v3 Authority Key Identifier:
                keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.37.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:c1:c9:43:6b:37:de:3d:b6:46:f1:00:d9:ab:9f:73:13:6c:
         95:9d:e2:01:4c:24:86:16:24:d2:98:df:f9:5a:0d:64:4c:93:
         8f:a5:3e:26:fc:e2:7e:ae:b0:f0:d0:6f:14:cc:25:34:3a:58:
         cd:8f:24:64:65:a6:1b:26:c6:08:1a:51:bd:5e:f1:b7:9f:e8:
         a3:fe:7a:57:2f:29:4f:7d:d3:80:ee:ae:17:84:ce:cf:42:78:
         6b:5f:b4:35:d7:5d:21:ad:d6:74:05:28:f5:3b:45:14:cc:d2:
         e7:3e:3a:88:28:a9:8e:fc:fc:5f:73:c0:ab:28:ea:55:ad:5c:
         1b:09:e2:07:d8:15:ab:3e:1b:32:85:47:bb:63:ae:14:2e:2d:
         3f:e7:48:05:c5:48:1f:fa:4c:ba:02:dd:21:3f:f0:d1:e6:9a:
         bf:4b:d7:d5:41:7f:2a:d2:09:fd:01:f8:e0:bf:94:43:f3:dd:
         0e:4c:3c:2a:08:98:e2:d2:1e:4b:16:8f:1d:2a:b5:e6:a2:0b:
         a1:ae:c1:60:76:6a:83:9d:5a:25:da:49:ec:d7:d5:78:f5:0a:
         c0:a3:3e:71:a0:85:f2:b3:b9:f2:20:8e:36:25:51:0e:69:3c:
         0e:f0:2a:0d:70:53:96:4e:29:30:26:b9:ec:0e:25:2f:e1:88:
         7b:ed:36:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:15:47 2026 by rpki-client