Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/d1c2a17b-4c25-39cf-bedd-b7a56d735294.roa
File:                     d1c2a17b-4c25-39cf-bedd-b7a56d735294.roa (raw, json)
Hash identifier:          l2bb5uJNkqHPJy/sJRJELPw3Ao5F6yDh9u3YwwxmzQo=
Subject key identifier:   72:9E:3B:26:8B:73:AE:67:27:36:7E:BD:9B:57:0E:D9:31:68:84:4B
Certificate issuer:       /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
Certificate serial:       010D0C9F4328584D0EA7B3884A58B6876F1FED80
Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/d1c2a17b-4c25-39cf-bedd-b7a56d735294.roa
Signing time:             Wed 04 Mar 2026 14:00:41 +0000
ROA not before:           Wed 04 Mar 2026 14:00:41 +0000
ROA not after:            Tue 02 Jun 2026 13:00:41 +0000
asID:                     16509
IP address blocks:        216.185.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0e:a7:b3:88:4a:58:b6:87:6f:1f:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
        Validity
            Not Before: Mar  4 14:00:41 2026 GMT
            Not After : Jun  2 13:00:41 2026 GMT
        Subject: CN=4260c046-e883-453e-be5d-38f8b73f3d76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b1:94:8c:96:88:70:cc:c0:cb:fd:95:26:3c:
                    6e:85:9d:10:99:2b:ca:f6:bc:fa:53:ae:b3:38:4b:
                    72:ee:c7:bf:44:87:02:40:ad:06:5d:77:37:88:60:
                    af:52:96:0b:d9:0c:cf:20:8e:3b:73:f9:4a:31:27:
                    bd:af:6e:dd:3e:b3:90:ab:78:f5:ea:96:85:bb:7b:
                    74:3a:87:d0:06:4d:16:8b:7d:53:eb:dc:07:60:e6:
                    a5:25:38:6b:c1:73:b7:92:f7:2f:94:a8:5b:c8:d9:
                    e7:b5:bf:9d:65:23:99:27:f5:ed:6c:13:e4:a3:f3:
                    2a:56:2a:33:d3:96:28:83:66:cd:5c:0f:d7:85:0e:
                    d7:54:59:af:bb:5a:8f:43:91:b0:c2:8f:40:cd:26:
                    2d:77:3a:49:10:37:91:7d:0c:38:5f:9c:54:bd:bc:
                    5f:74:ff:c3:25:7c:ff:19:8c:fa:87:c4:21:20:66:
                    59:0a:2d:e2:e5:fe:29:97:f0:1f:63:a9:b6:5e:49:
                    8e:50:8e:ff:2b:cb:23:4d:eb:b6:57:ce:b5:ce:c8:
                    68:97:75:db:32:00:6a:f2:d5:ac:d0:14:c4:53:49:
                    e5:77:1e:f2:e1:6f:7b:0d:ee:29:ad:2a:f6:53:19:
                    2d:5d:98:34:53:4b:3f:79:42:48:b1:a2:d2:5d:30:
                    6a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:9E:3B:26:8B:73:AE:67:27:36:7E:BD:9B:57:0E:D9:31:68:84:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/d1c2a17b-4c25-39cf-bedd-b7a56d735294.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl

            X509v3 Authority Key Identifier:
                keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:f3:22:b7:f4:c0:19:77:ec:ad:8d:ed:ee:ed:34:9c:d4:32:
         02:cb:74:49:2e:a3:92:0b:9f:7c:ae:0d:9b:e3:4a:43:b5:f6:
         cc:57:f0:eb:22:07:d2:c8:20:4f:01:c6:88:b2:00:33:aa:61:
         e9:a5:7a:1d:6c:25:8b:86:5c:c8:f8:55:2a:16:c8:05:4d:26:
         4d:de:dd:3c:c5:e8:1f:03:3f:4a:dc:12:65:24:ae:45:be:44:
         a6:26:bf:36:0c:ea:bd:a4:7b:a1:32:2a:58:c9:5f:0a:1f:7f:
         9a:b7:fa:c2:07:a0:29:5f:2c:3b:07:c6:53:fb:b3:8d:a6:6c:
         9f:d4:b3:11:d6:f3:2e:2f:0b:95:7d:b0:4e:3a:d3:8d:6f:c4:
         ab:e8:8e:be:85:16:52:fc:f7:2b:e0:f6:e6:70:ed:d3:56:4a:
         ae:ec:3a:a4:98:f2:3b:8c:d4:2e:f4:6c:8f:44:e0:10:28:8e:
         f9:fb:7f:60:d1:0e:3d:71:14:a6:35:08:33:85:de:c8:9d:1b:
         9c:cf:2e:78:15:f3:c9:ee:b3:09:91:e4:14:90:91:3c:f8:f1:
         d3:05:23:5f:4c:bc:3e:a9:fe:f7:d3:e1:09:26:d1:1a:84:b3:
         1b:aa:f2:7f:ce:fe:70:9d:47:4c:b0:87:52:13:f6:c7:90:85:
         d8:b0:0f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 12:32:48 2026 by rpki-client