Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a79b85c1-9b95-4c95-b08d-220eb047aedf/a6c43437-46a5-3a45-99df-bc0a47a30454.roa
File:                     a6c43437-46a5-3a45-99df-bc0a47a30454.roa (raw, json)
Hash identifier:          7X7uyMJWPTQxEIZlbaAO15Pw8/3soo6GdePr4TwDICE=
Subject key identifier:   2C:79:10:50:35:29:49:05:12:D5:8B:88:FA:F9:F4:13:66:4F:E9:28
Certificate issuer:       /CN=a79b85c1-9b95-4c95-b08d-220eb047aedf
Certificate serial:       010D0C9F4328584DD8F067FC5D0CE5C91FB58B80
Authority key identifier: 94:D3:05:38:E6:C5:87:B6:04:6B:31:E1:85:08:90:7B:0E:07:4B:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a79b85c1-9b95-4c95-b08d-220eb047aedf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a79b85c1-9b95-4c95-b08d-220eb047aedf/a6c43437-46a5-3a45-99df-bc0a47a30454.roa
Signing time:             Sat 16 May 2026 01:00:26 +0000
ROA not before:           Sat 16 May 2026 01:00:26 +0000
ROA not after:            Fri 14 Aug 2026 01:00:26 +0000
asID:                     8075
IP address blocks:        216.220.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a79b85c1-9b95-4c95-b08d-220eb047aedf/a79b85c1-9b95-4c95-b08d-220eb047aedf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a79b85c1-9b95-4c95-b08d-220eb047aedf/a79b85c1-9b95-4c95-b08d-220eb047aedf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a79b85c1-9b95-4c95-b08d-220eb047aedf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d8:f0:67:fc:5d:0c:e5:c9:1f:b5:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a79b85c1-9b95-4c95-b08d-220eb047aedf
        Validity
            Not Before: May 16 01:00:26 2026 GMT
            Not After : Aug 14 01:00:26 2026 GMT
        Subject: CN=4f1e3857-272a-4009-9c47-44d83ccb6d00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:64:c0:5d:a3:ef:60:cb:ab:de:ec:db:b6:4b:
                    a4:a3:2a:95:b6:da:0a:d6:20:c5:6b:d0:32:b1:aa:
                    54:df:ac:f3:9b:65:bf:b0:51:a3:1f:07:c7:7f:85:
                    37:77:1e:a0:61:7a:fe:52:cc:bd:0d:12:e5:c7:c1:
                    25:77:72:9b:24:52:9d:41:94:9c:2e:7e:93:2d:a1:
                    d3:d5:0a:5d:29:91:db:5a:ec:7d:22:a5:04:8f:83:
                    38:c6:eb:3e:39:86:47:88:46:3b:36:f5:a6:22:3c:
                    cc:03:40:03:b7:59:35:1f:d0:31:92:2c:d9:9b:53:
                    fd:2f:e5:58:3d:2e:f7:55:11:64:ad:9a:5d:d3:76:
                    d9:49:23:7a:0c:62:e5:ac:40:0d:20:db:82:c9:7f:
                    35:37:ba:00:eb:d3:7a:2b:30:cb:21:fd:9b:b8:ce:
                    f6:61:6e:8a:98:3d:b6:ec:1d:51:09:66:b7:66:d8:
                    1a:62:f3:f2:7f:72:ed:fb:07:d4:63:f4:23:83:b6:
                    b6:e6:00:ab:e0:00:71:24:d2:6e:dd:a2:bf:99:a2:
                    63:b6:d8:03:7a:0c:78:b2:43:f1:bc:ae:82:58:29:
                    0c:bb:13:73:3a:fb:db:39:c0:72:03:7f:5b:fd:59:
                    a1:e7:cd:41:46:7a:92:57:90:65:10:a3:df:34:5c:
                    c4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:79:10:50:35:29:49:05:12:D5:8B:88:FA:F9:F4:13:66:4F:E9:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a79b85c1-9b95-4c95-b08d-220eb047aedf/a6c43437-46a5-3a45-99df-bc0a47a30454.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a79b85c1-9b95-4c95-b08d-220eb047aedf/a79b85c1-9b95-4c95-b08d-220eb047aedf.crl

            X509v3 Authority Key Identifier:
                keyid:94:D3:05:38:E6:C5:87:B6:04:6B:31:E1:85:08:90:7B:0E:07:4B:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a79b85c1-9b95-4c95-b08d-220eb047aedf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.220.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:33:f8:79:bb:8b:99:70:55:ae:fe:26:6b:4c:d9:a3:5c:70:
         23:3e:b6:39:9b:0b:1b:f4:17:f9:72:54:00:ca:cb:95:84:c4:
         7e:9c:26:5d:34:30:3b:65:d5:8a:b1:0b:62:9d:f2:50:d7:50:
         60:21:e8:52:31:7b:05:e8:62:a8:7d:cb:9b:a0:2a:00:97:0d:
         b4:6b:01:53:61:96:99:63:df:4c:cd:a7:21:be:c3:fb:93:4c:
         8e:36:0f:7c:2e:bc:8d:0d:1f:e9:6f:95:de:64:1d:98:1b:4c:
         46:37:43:c5:87:b5:bd:67:fb:1c:30:90:ea:2d:37:bc:5c:69:
         f3:56:fd:d8:1e:30:dd:da:4c:99:5e:6e:f2:a4:da:cc:cc:b6:
         24:f3:07:ee:3f:60:00:1c:50:fa:e8:19:42:c9:ff:fe:46:c7:
         a3:92:a1:13:12:1d:f1:be:1c:0f:87:59:1b:fe:c3:c9:65:84:
         1e:e1:af:70:73:35:8e:e3:18:a1:fb:d0:f7:20:a5:ad:59:75:
         0f:2e:03:c5:9b:06:0e:76:6f:8e:af:33:ff:d7:50:d7:f0:02:
         b1:42:fe:cc:3c:fe:91:e2:43:3a:d8:0d:6c:20:1b:db:79:85:
         a2:f6:cf:a4:54:9c:c7:5d:77:6e:70:dc:5a:4e:26:a0:08:72:
         86:1b:3a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 19:46:45 2026 by rpki-client