Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/509049fe-e6ce-45c8-b45a-8efc9d25e864/31cc376f-38ff-37b2-b003-0a207fc8bf11.roa
File:                     31cc376f-38ff-37b2-b003-0a207fc8bf11.roa (raw, json)
Hash identifier:          O6tYvakvZa2hYKNyhp3JHwOews1LOKoyx+U9UMacdLA=
Subject key identifier:   52:94:EE:DA:06:F7:69:D9:70:6D:66:7B:88:0F:0A:8B:82:BF:28:51
Certificate issuer:       /CN=509049fe-e6ce-45c8-b45a-8efc9d25e864
Certificate serial:       010D0C9F4328584D35A016DE6BCC74DFE03B00C0
Authority key identifier: A3:06:43:C3:45:D0:FC:38:27:1D:0E:D7:CB:A5:B6:FB:93:7D:43:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/509049fe-e6ce-45c8-b45a-8efc9d25e864.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/509049fe-e6ce-45c8-b45a-8efc9d25e864/31cc376f-38ff-37b2-b003-0a207fc8bf11.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     14618
IP address blocks:        216.235.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/509049fe-e6ce-45c8-b45a-8efc9d25e864/509049fe-e6ce-45c8-b45a-8efc9d25e864.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/509049fe-e6ce-45c8-b45a-8efc9d25e864/509049fe-e6ce-45c8-b45a-8efc9d25e864.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/509049fe-e6ce-45c8-b45a-8efc9d25e864.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:a0:16:de:6b:cc:74:df:e0:3b:00:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509049fe-e6ce-45c8-b45a-8efc9d25e864
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=5e0b7195-09d4-45e0-b12e-2a31aa8917d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cb:70:82:56:2d:64:3a:bf:7d:7d:98:ee:fe:
                    a0:98:be:85:3b:76:09:c1:d4:d0:8c:33:54:9d:b5:
                    8f:7f:f7:98:79:68:dc:c7:8d:ab:c1:a0:97:78:2b:
                    85:00:d7:18:45:7a:54:4d:92:08:69:c8:c9:53:ed:
                    be:de:e2:eb:2b:d0:e6:ab:85:4e:64:2f:eb:8d:12:
                    3d:69:b2:5b:34:80:c5:a4:5d:6b:22:c2:48:6b:5c:
                    b0:41:24:cc:41:e1:10:ad:0e:8a:b8:2a:b1:45:a9:
                    f0:20:91:46:5e:d2:d2:af:b0:ff:80:1b:d7:39:25:
                    61:aa:6f:0f:13:d4:ac:5d:28:ac:a4:35:90:cc:51:
                    78:6a:6c:66:0c:38:cc:a5:07:d8:d3:31:44:9e:d5:
                    92:98:88:48:a8:82:21:a6:d6:10:7d:7d:cb:de:b2:
                    e5:42:40:a0:87:d0:da:85:4f:85:80:33:ec:bc:30:
                    0a:12:21:bf:d7:bb:70:5e:b9:a6:ba:25:e9:fb:81:
                    c1:ca:ec:de:4f:69:ce:64:bc:58:bc:e1:9e:01:ad:
                    fd:c5:51:ad:ac:0e:97:03:d9:2c:fb:df:96:5a:84:
                    d7:81:c4:15:84:51:36:4c:76:79:ed:85:0b:40:d3:
                    7e:1e:b4:e5:c9:35:26:8b:b8:93:de:a6:5b:37:d8:
                    0e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:94:EE:DA:06:F7:69:D9:70:6D:66:7B:88:0F:0A:8B:82:BF:28:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/509049fe-e6ce-45c8-b45a-8efc9d25e864/31cc376f-38ff-37b2-b003-0a207fc8bf11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/509049fe-e6ce-45c8-b45a-8efc9d25e864/509049fe-e6ce-45c8-b45a-8efc9d25e864.crl

            X509v3 Authority Key Identifier:
                keyid:A3:06:43:C3:45:D0:FC:38:27:1D:0E:D7:CB:A5:B6:FB:93:7D:43:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/509049fe-e6ce-45c8-b45a-8efc9d25e864.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.235.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:59:98:36:0e:5c:be:ba:70:39:92:a5:07:5a:22:4c:ef:bd:
         db:67:4d:45:77:21:6e:44:92:02:03:a4:c5:b8:69:e5:42:16:
         fb:8a:0c:e5:63:10:83:d8:2e:b4:aa:60:ad:0d:08:1c:b2:30:
         a8:6c:ab:cc:a0:06:5b:2e:8e:8f:38:0f:1b:d8:0a:03:04:29:
         a0:f4:5b:7c:a0:50:40:01:82:4d:00:73:a4:9a:be:32:f5:5e:
         29:dc:92:88:23:e4:a2:91:44:13:74:a8:8b:57:4a:04:3d:a8:
         63:40:46:37:1a:f9:c9:ad:2b:9d:bd:b5:c0:1b:16:bc:3e:ca:
         0d:b0:58:1e:d2:41:69:b9:6c:ae:0e:ae:69:3b:8b:51:63:cc:
         27:e0:2e:d1:3c:f1:b4:24:41:5a:f0:b9:8c:60:1c:6a:95:c8:
         f1:5d:21:4d:46:66:a0:4d:e3:0c:e7:c9:4f:ba:9b:87:87:f6:
         fb:eb:0a:2e:fc:1a:f6:89:69:90:2f:ea:67:c3:ae:1a:49:54:
         8e:1e:20:c8:61:fa:2c:46:4b:3b:5a:0e:bc:a1:4e:53:63:91:
         23:48:b7:9d:e2:20:6d:30:a0:f1:ff:94:6f:84:fc:ee:5e:a3:
         95:77:4a:83:a1:17:0a:a1:21:22:85:71:76:57:86:02:f6:0f:
         4b:86:c7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 15:49:44 2026 by rpki-client