Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/94f0eda7-0771-41a2-8806-38174b050cc8/9866eb47-8ef3-3d63-8638-76ae76aa2833.roa
File:                     9866eb47-8ef3-3d63-8638-76ae76aa2833.roa (raw, json)
Hash identifier:          GsJCFobwKErvZFVE78+VOtWY+z1DuousrCTwXnXNLgY=
Subject key identifier:   15:AF:6F:33:28:29:5E:47:AA:6B:81:90:38:FD:57:DB:FD:30:5E:1A
Certificate issuer:       /CN=94f0eda7-0771-41a2-8806-38174b050cc8
Certificate serial:       010D0C9F4328584D0D4259F65A12AA7648DD17C0
Authority key identifier: 74:29:8D:DB:C5:4F:6B:90:5F:21:18:0B:85:FC:DA:36:27:B1:E1:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/94f0eda7-0771-41a2-8806-38174b050cc8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/94f0eda7-0771-41a2-8806-38174b050cc8/9866eb47-8ef3-3d63-8638-76ae76aa2833.roa
Signing time:             Wed 04 Mar 2026 02:00:32 +0000
ROA not before:           Wed 04 Mar 2026 02:00:32 +0000
ROA not after:            Tue 02 Jun 2026 01:00:32 +0000
asID:                     32549
IP address blocks:        216.168.132.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/94f0eda7-0771-41a2-8806-38174b050cc8/94f0eda7-0771-41a2-8806-38174b050cc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/94f0eda7-0771-41a2-8806-38174b050cc8/94f0eda7-0771-41a2-8806-38174b050cc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/94f0eda7-0771-41a2-8806-38174b050cc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0d:42:59:f6:5a:12:aa:76:48:dd:17:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94f0eda7-0771-41a2-8806-38174b050cc8
        Validity
            Not Before: Mar  4 02:00:32 2026 GMT
            Not After : Jun  2 01:00:32 2026 GMT
        Subject: CN=7666b1da-defb-4d37-89ef-bab0d6bdf4ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b0:33:6f:8c:f7:72:0f:a5:7a:c8:d0:a7:31:
                    43:7b:a6:e2:dd:49:fc:94:31:4c:10:f3:95:30:c2:
                    0e:a1:d3:aa:3a:3f:43:a4:65:35:fe:78:93:93:64:
                    18:97:d8:d4:85:fa:44:f8:23:dc:4a:eb:99:28:2f:
                    99:18:14:6e:49:e1:a7:24:a6:15:c5:03:29:04:53:
                    2c:0e:8c:b5:34:4d:89:03:84:79:73:a4:5a:42:0d:
                    20:bc:ff:c3:a8:72:5c:55:5d:6b:aa:e3:a3:de:30:
                    d3:81:e6:77:0d:47:fd:7f:68:df:6c:6c:1b:23:4c:
                    fd:b7:e9:4f:13:54:69:df:79:7a:c0:e9:d9:b3:49:
                    23:a2:e3:5a:8d:d0:1b:b4:6c:fb:80:27:fd:f7:3d:
                    74:0d:cb:74:ad:be:21:3a:9d:52:fb:d6:aa:37:de:
                    ef:92:7d:1d:0b:58:e1:5c:12:7b:93:0c:53:fd:1c:
                    d3:02:d9:9e:a4:5e:19:8b:4a:32:5b:00:59:e1:87:
                    28:4a:9d:7b:45:e6:4b:71:bf:d0:d5:7e:75:59:29:
                    74:9c:d7:35:63:fd:20:14:05:98:63:ad:2f:b7:44:
                    5e:25:14:07:84:a9:fa:08:a1:77:71:be:2d:23:70:
                    5a:bc:87:a2:f4:0b:ce:82:c0:56:96:67:27:12:45:
                    a7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:AF:6F:33:28:29:5E:47:AA:6B:81:90:38:FD:57:DB:FD:30:5E:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/94f0eda7-0771-41a2-8806-38174b050cc8/9866eb47-8ef3-3d63-8638-76ae76aa2833.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/94f0eda7-0771-41a2-8806-38174b050cc8/94f0eda7-0771-41a2-8806-38174b050cc8.crl

            X509v3 Authority Key Identifier:
                keyid:74:29:8D:DB:C5:4F:6B:90:5F:21:18:0B:85:FC:DA:36:27:B1:E1:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/94f0eda7-0771-41a2-8806-38174b050cc8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.168.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:d2:4e:0f:16:b9:db:e3:6e:b6:d9:9b:38:be:fc:85:ab:9f:
         a0:12:da:16:02:51:0a:42:c7:27:58:1b:7b:9b:4d:42:48:e0:
         8f:df:59:3f:69:56:12:7d:bf:26:bf:da:c8:11:9b:34:39:ba:
         41:75:5e:bb:36:34:ca:69:63:9a:24:4a:55:9d:4f:6d:9d:08:
         b7:c7:4f:d6:d0:54:d4:ee:7e:7d:ef:93:1d:51:fe:d6:d2:06:
         c8:b0:68:12:a0:dc:be:2b:eb:ef:6c:44:88:7b:6a:e6:ff:95:
         5b:26:7f:36:18:59:35:49:a6:e2:4a:ae:f4:e5:00:fe:24:f3:
         71:98:bb:d0:60:9a:f6:e1:2d:40:d3:0e:13:3f:2e:5f:d2:6c:
         c3:d3:f7:0c:e0:c0:9d:5e:78:1e:3d:45:bb:01:da:dc:87:3f:
         1c:83:c2:93:2b:2e:40:c8:99:9d:b5:81:bb:56:98:17:0b:c8:
         09:7d:d0:23:ea:25:2b:97:9f:a6:2d:60:ee:9d:1a:dc:ba:73:
         d5:3f:62:c1:7c:14:58:f8:f1:c7:c4:71:4f:f8:cd:8e:d9:d2:
         95:0a:90:38:11:e1:a6:d1:16:96:0b:80:4d:1a:ac:18:b5:29:
         46:c1:70:de:e5:05:2a:e9:3c:96:8a:74:56:cd:6f:ad:13:68:
         08:42:5d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 16:47:30 2026 by rpki-client