Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/8c694499-7fd8-3dc9-b7d7-b3f456ef198e.roa
File:                     8c694499-7fd8-3dc9-b7d7-b3f456ef198e.roa (raw, json)
Hash identifier:          IR6qKoOH34z2R5aPCPG2rHHndY1aUddI/MoRp0wxFfU=
Subject key identifier:   CD:8C:B1:E4:BC:ED:10:79:FA:7A:F5:D0:51:BF:04:1D:96:3A:70:82
Certificate issuer:       /CN=a062a219-9ee8-48a3-897a-8410b6da94a1
Certificate serial:       010D0C9F4328584D5E1A608D3D3143565AB6A380
Authority key identifier: 14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/8c694499-7fd8-3dc9-b7d7-b3f456ef198e.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     398008
IP address blocks:        216.174.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:60:8d:3d:31:43:56:5a:b6:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a062a219-9ee8-48a3-897a-8410b6da94a1
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=e03bf9a3-0f37-4080-8325-291f94149a5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c3:6f:1b:35:26:81:d9:22:ff:2d:63:c9:88:
                    7d:fd:28:d7:fa:19:f9:69:30:d1:b8:c9:65:1c:9f:
                    71:c8:e0:2e:be:3c:d0:31:98:f5:3e:45:14:6d:43:
                    c2:14:bf:38:c0:a1:4e:bb:14:2b:02:dc:19:48:73:
                    24:ab:d5:15:be:6e:87:de:b6:58:ec:d1:88:21:7a:
                    5a:77:0a:44:eb:6b:9d:3f:f3:10:68:6a:4d:4d:6b:
                    1b:64:61:dd:a9:dc:df:2f:aa:03:bb:62:1a:78:aa:
                    5c:1b:4f:61:9a:da:80:05:51:29:34:14:48:ef:20:
                    a1:cb:d2:bd:90:c0:b1:53:da:f0:be:0d:0a:26:e6:
                    2c:06:92:11:d9:0f:87:9f:f4:a3:a4:1d:4d:f1:59:
                    97:4e:dd:25:b5:10:83:72:52:59:5d:c5:84:6e:64:
                    82:ce:76:c7:20:15:87:fc:0c:68:4a:3b:bb:cd:12:
                    7b:11:fe:cd:a4:f2:5f:c8:35:81:25:9c:32:60:4a:
                    d6:1c:0a:d1:f9:44:f4:1f:47:1a:33:8b:19:dc:31:
                    58:a8:b0:5d:13:26:e6:2e:bb:25:f2:b0:75:59:c7:
                    72:c9:30:e8:b4:f4:26:63:85:11:58:5a:32:03:37:
                    77:34:f4:d7:76:bb:4f:4d:3f:77:65:fb:94:01:3d:
                    53:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:8C:B1:E4:BC:ED:10:79:FA:7A:F5:D0:51:BF:04:1D:96:3A:70:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/8c694499-7fd8-3dc9-b7d7-b3f456ef198e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl

            X509v3 Authority Key Identifier:
                keyid:14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.174.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:28:3a:ac:5d:cf:3f:5c:bc:5d:ad:6a:d6:f0:d4:20:2f:3c:
         78:a1:46:f5:dc:86:b3:38:72:45:c4:25:ea:7d:b8:b6:f7:96:
         e0:d2:48:86:9a:97:0a:4c:ea:3c:11:d1:11:3b:30:7c:0f:23:
         d0:21:17:52:00:ca:2f:9f:ec:84:b6:f0:0f:43:bc:9e:63:b8:
         8d:ef:bd:ef:e3:33:48:dd:f8:95:bf:07:39:ea:40:fa:67:e9:
         b7:ee:03:fc:64:43:e4:1e:28:12:00:5c:15:da:ed:97:c8:d4:
         97:fc:98:52:37:b1:70:90:c2:d7:6d:0c:b2:38:bd:df:b1:31:
         6b:53:e7:64:d5:44:61:a0:a3:11:f9:c9:3c:4b:f2:73:eb:b7:
         fa:4c:be:48:88:4a:38:45:7a:55:a2:e8:18:2e:c4:26:a4:e9:
         a8:d2:31:77:7c:86:80:c1:c5:28:27:67:1f:24:ee:e2:4e:82:
         66:0d:6d:61:a2:fd:57:67:c6:7e:38:fd:8d:b7:7a:2f:b8:be:
         1b:e3:74:b7:76:da:3d:0e:63:81:c1:40:0b:4d:3b:1f:0e:fe:
         ce:7e:9b:a7:08:db:16:6e:aa:3b:17:04:0e:b7:d0:ce:76:bc:
         64:9b:6f:72:95:7d:fc:bc:50:72:c6:6a:7e:e9:96:c4:fd:47:
         ed:4d:34:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 12:59:28 2026 by rpki-client