Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/3d483c02-fe01-36d1-8712-d417a887f72f.roa
File:                     3d483c02-fe01-36d1-8712-d417a887f72f.roa (raw, json)
Hash identifier:          6TfsdblzEwZ5mQ/8UPIsVLn9EdHDNgy5IAuMKTljxOo=
Subject key identifier:   19:FC:A0:11:06:73:5C:5B:B1:19:E8:FD:04:3B:E9:12:79:32:5E:82
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F4328584DFBD5DD77C39F1E65CE3EB980
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/3d483c02-fe01-36d1-8712-d417a887f72f.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     12129
IP address blocks:        216.234.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d5:dd:77:c3:9f:1e:65:ce:3e:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=91370dda-4242-484d-bb3e-646610811f56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7e:17:04:57:73:1c:6d:41:47:02:75:8f:09:
                    fe:9d:52:ce:79:0b:7f:49:09:30:46:73:48:2c:f1:
                    e1:aa:eb:c4:b5:42:f8:9e:1e:fa:e5:50:b8:2e:5c:
                    a1:4e:44:e5:56:37:b3:73:24:5e:69:24:8f:7e:a9:
                    7e:2f:c9:e2:1b:c0:d0:15:ee:1d:c4:72:86:ec:f3:
                    7b:d4:27:6d:af:9c:27:c2:e2:b7:a6:c3:b7:de:ad:
                    48:de:18:1c:8c:dd:3f:e5:7d:ac:ce:18:ab:3b:06:
                    5e:f6:4f:a1:0b:0e:32:a5:c9:0f:c0:f3:71:7f:3b:
                    d8:19:10:c2:4c:d6:6d:83:f9:cb:f6:cf:b2:89:09:
                    11:16:b4:52:58:46:f7:e9:23:25:7e:c8:3f:ae:5b:
                    f0:89:21:81:24:73:d7:cd:cc:eb:57:d3:90:50:19:
                    40:40:0f:a8:c2:ce:ac:76:b8:ab:3a:b7:50:8b:b8:
                    40:3f:a9:19:29:40:f4:b9:bc:76:9c:b1:7c:71:fa:
                    13:a3:ed:0e:35:89:2c:75:dc:27:89:bd:97:f6:4b:
                    ab:c3:ef:0f:55:63:c2:f7:10:54:58:0d:e1:6e:0a:
                    d1:31:5a:97:ed:09:7a:48:a7:32:c0:38:db:de:61:
                    b8:47:1c:a2:7a:1f:9e:f5:0a:32:7a:1a:e1:69:c3:
                    45:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:FC:A0:11:06:73:5C:5B:B1:19:E8:FD:04:3B:E9:12:79:32:5E:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/3d483c02-fe01-36d1-8712-d417a887f72f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.234.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:9a:8a:24:7a:35:ac:6f:f4:ea:59:7f:bb:dd:a5:43:6c:73:
         07:1e:2a:a7:66:96:af:4e:6e:66:d4:42:f2:ad:87:4c:eb:2d:
         ce:b3:65:48:05:b5:47:7c:8b:34:25:fd:1f:7b:50:ab:5f:a2:
         45:93:26:e8:a9:16:73:79:69:82:96:4e:f1:08:0b:8b:bc:d4:
         ee:96:6b:fd:cb:e0:d0:5d:20:da:4b:41:17:00:a7:86:09:a9:
         59:9e:6f:ab:7c:56:70:b0:19:49:9d:17:b0:24:c7:74:6e:b9:
         98:49:71:a3:d4:ce:75:2e:d0:c4:6d:b6:d7:bf:e3:0c:cc:aa:
         78:2c:25:36:42:f4:c7:28:5e:69:19:56:4b:21:f1:c5:57:f9:
         35:28:84:79:36:1c:d5:1a:da:c9:0e:c9:a6:4b:01:29:04:4d:
         bf:b6:01:15:cf:42:23:0c:48:65:0e:6e:21:d0:1d:2a:59:0e:
         a8:7a:b8:10:fe:9d:57:62:14:e5:5f:0d:ac:10:69:68:27:f5:
         c5:0e:06:1b:0c:4d:1d:9f:e0:da:29:9c:14:e3:18:2f:49:08:
         df:e3:16:9b:9e:13:02:c0:86:e2:0a:17:bc:13:24:64:f6:2c:
         f2:e1:00:bb:5d:58:89:29:c7:d7:4c:ea:f8:bf:01:27:b1:ab:
         eb:2e:7a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 20:45:01 2026 by rpki-client