Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3bb11065-f146-3d2a-b65b-98554847b33d.roa
File:                     3bb11065-f146-3d2a-b65b-98554847b33d.roa (raw, json)
Hash identifier:          ALMqzuBgyCV0ch18UPwTP6xXXE4Ay0BqKm5qQgdiaYA=
Subject key identifier:   70:80:77:9B:81:FE:18:BD:DE:03:4C:CE:94:B4:83:D2:5F:43:C1:65
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584D83CAA919C02419E9FDCC3800
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3bb11065-f146-3d2a-b65b-98554847b33d.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     3848
IP address blocks:        216.208.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:a9:19:c0:24:19:e9:fd:cc:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=9f6ae2c2-2728-4e97-9928-3be7f98e661b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f9:e8:aa:b3:72:6f:8c:ca:90:66:66:47:9f:
                    31:e8:c2:5f:39:80:15:19:19:2a:60:d8:4f:c3:74:
                    d8:ae:3b:7b:d2:88:e0:b0:5f:50:b5:09:25:09:e8:
                    65:d0:ca:ce:a3:3d:7d:fd:32:27:d2:f5:bf:5c:7d:
                    de:44:9f:64:44:0e:0c:a3:bb:e2:51:46:f0:04:b2:
                    33:00:38:4d:36:42:bb:81:18:2c:80:6d:2b:8e:6f:
                    9e:fe:fb:dd:30:d3:cc:3b:f6:83:8d:75:e6:5a:70:
                    ae:ac:7b:5a:c0:5a:ed:5d:83:df:34:4a:09:20:58:
                    ca:7f:60:ab:ca:1f:bb:ee:70:10:e0:0a:85:13:79:
                    52:b6:f6:f1:3f:af:8e:2d:8e:42:ee:6b:f9:d7:ea:
                    63:2f:32:99:75:22:8c:a8:a8:01:0a:20:16:01:54:
                    6b:8e:87:9e:09:36:29:9e:4f:20:0b:6e:9f:b0:22:
                    16:60:03:6a:64:01:8b:3e:9f:f7:9c:bb:c0:9f:93:
                    95:3b:52:b9:6d:9b:f4:f3:43:c4:f2:41:e7:41:bd:
                    ca:9f:cb:db:27:65:50:40:96:07:c6:79:be:5a:87:
                    33:35:ef:12:8f:c0:00:11:63:e9:c1:13:a1:09:77:
                    a9:77:07:13:d3:ac:6e:c9:94:02:72:23:4f:39:64:
                    c5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:80:77:9B:81:FE:18:BD:DE:03:4C:CE:94:B4:83:D2:5F:43:C1:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3bb11065-f146-3d2a-b65b-98554847b33d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.208.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:01:32:02:8d:e8:48:81:0f:3d:b6:b2:33:81:3f:a7:4b:fd:
         18:85:1b:ee:13:06:97:5c:f4:bf:62:de:f7:6f:f4:06:3e:a3:
         bb:5a:ea:cf:05:0f:22:b4:97:17:d3:8b:61:16:6a:c7:2c:00:
         fa:26:d8:d9:01:e3:bf:c8:19:96:77:32:71:bb:92:87:f2:c3:
         e4:f4:2e:a8:e3:6d:14:ff:41:c3:67:f0:d0:03:3c:1c:b8:68:
         e3:57:f4:d7:b2:dd:cb:a9:cc:92:e2:0f:77:ce:6c:5f:28:ed:
         16:49:2d:ec:8c:d3:32:5d:cf:97:07:6b:dc:a7:11:07:c4:f2:
         d4:a5:0a:f0:87:70:f6:cb:a6:95:36:eb:0d:17:d8:0f:08:99:
         a9:2f:a0:db:5b:25:7c:34:f9:11:9d:90:4d:eb:c9:16:4f:a8:
         04:3d:95:97:c4:78:ad:2d:4f:d8:30:53:79:4b:b2:0c:ed:52:
         d0:36:6a:10:f5:95:b0:3b:9a:ab:d6:6d:8f:91:5a:f9:30:da:
         e4:40:4b:37:2a:5e:00:c5:eb:76:24:94:f0:1e:9c:b5:66:0b:
         5e:1d:cb:9e:81:b7:ce:bd:a7:ec:e0:08:99:2c:1f:5d:d9:63:
         08:9a:af:c7:12:1b:28:cd:ce:a2:10:7a:e5:be:2e:eb:db:7b:
         c1:f7:4a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:32:52 2026 by rpki-client