Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8/a559552c-2373-383e-9f4d-c6e59db5d6ad.roa
File:                     a559552c-2373-383e-9f4d-c6e59db5d6ad.roa (raw, json)
Hash identifier:          TXeBGxmHEFmAa/YuRIF6sG++siFVjaJsWOXe+n1EVOs=
Subject key identifier:   9C:5C:40:7C:49:E6:20:3B:7A:05:43:7A:DA:A8:E6:82:54:54:49:C3
Certificate issuer:       /CN=250ff67c-5904-4655-8b50-832a485ad1b8
Certificate serial:       010D0C9F4328584DD625A889D154D9A18A81C300
Authority key identifier: D9:6C:55:DE:64:B8:CC:BB:AA:F1:2C:69:37:97:52:99:75:55:6B:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8/a559552c-2373-383e-9f4d-c6e59db5d6ad.roa
Signing time:             Fri 15 May 2026 01:00:24 +0000
ROA not before:           Fri 15 May 2026 01:00:24 +0000
ROA not after:            Thu 13 Aug 2026 01:00:24 +0000
asID:                     174
IP address blocks:        216.163.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8/250ff67c-5904-4655-8b50-832a485ad1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8/250ff67c-5904-4655-8b50-832a485ad1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d6:25:a8:89:d1:54:d9:a1:8a:81:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=250ff67c-5904-4655-8b50-832a485ad1b8
        Validity
            Not Before: May 15 01:00:24 2026 GMT
            Not After : Aug 13 01:00:24 2026 GMT
        Subject: CN=84a8916d-5f34-4ad0-8b76-c539b98c9258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2f:8c:6b:aa:ab:a5:7f:be:40:c1:ec:c8:98:
                    56:a1:08:c8:c2:5a:84:37:1f:41:01:5c:0f:d4:8b:
                    c9:47:90:ec:8d:ee:09:e4:2f:d2:48:7e:eb:01:bc:
                    c0:30:57:fe:70:3b:c8:7f:d3:74:c0:59:16:5f:fb:
                    19:b0:9b:19:67:3b:46:5f:b0:d1:c2:58:3f:a0:6c:
                    01:ec:58:83:45:a8:e9:8a:54:31:0a:16:4b:2e:fc:
                    50:dd:d9:0a:ad:00:26:46:2d:cd:73:9f:f0:57:0e:
                    ec:11:d9:f1:5a:59:1b:0f:eb:6f:be:f2:40:ea:dc:
                    10:c6:30:fc:2d:dd:ca:a8:9a:67:85:01:7f:cc:51:
                    51:2e:25:b2:3e:67:42:75:2e:e5:4a:dc:d7:1c:5d:
                    d9:72:32:1c:64:3a:f7:56:03:e4:16:e2:7b:c9:76:
                    36:d1:b8:3f:38:e9:52:1c:92:d8:fe:04:3a:f5:62:
                    f7:19:7e:91:bf:fc:8d:ce:72:de:0d:08:37:97:a0:
                    79:f2:c6:7e:66:1d:4b:8a:ce:59:62:96:51:3c:c5:
                    a2:0b:9b:60:3b:5b:ac:64:ec:e9:73:95:36:25:13:
                    ec:f7:68:33:dc:19:29:c9:8b:f3:e3:f4:10:f7:d2:
                    45:a0:37:8f:a7:80:ae:4a:9a:2f:88:92:73:91:6f:
                    aa:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:5C:40:7C:49:E6:20:3B:7A:05:43:7A:DA:A8:E6:82:54:54:49:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8/a559552c-2373-383e-9f4d-c6e59db5d6ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8/250ff67c-5904-4655-8b50-832a485ad1b8.crl

            X509v3 Authority Key Identifier:
                keyid:D9:6C:55:DE:64:B8:CC:BB:AA:F1:2C:69:37:97:52:99:75:55:6B:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.163.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:34:cc:c9:aa:6c:89:f3:25:7a:88:69:54:99:41:f7:0f:c4:
         3e:e5:ae:d7:17:2f:d0:5e:64:b2:f4:7a:5c:98:07:d1:29:8f:
         cb:b0:ad:7b:8e:53:19:2c:e6:3f:c2:c7:a4:b0:0a:79:4f:5c:
         d9:23:22:51:9a:1f:59:24:ff:38:3f:96:cb:37:6e:05:d7:5d:
         d2:c1:e1:e6:8b:a5:ea:7d:c3:ce:95:fc:de:d7:cc:34:04:c3:
         ce:7e:50:f0:28:a6:35:03:a0:20:a2:85:a6:2e:d9:2d:f9:17:
         f4:8d:db:cd:5e:ff:17:a8:55:34:ad:80:48:69:4f:8b:eb:eb:
         f0:f6:5f:4e:68:75:e4:6e:43:fe:4f:c4:81:d8:9e:95:f6:35:
         d6:eb:f5:64:98:bd:4b:a2:5a:64:cd:30:ed:95:e0:69:22:82:
         a5:bf:c9:7f:b3:95:9c:cf:0c:69:21:a6:ba:35:0d:44:b3:cf:
         28:25:84:b2:e2:eb:7e:76:03:4e:39:30:14:50:6f:ac:4f:df:
         b5:d7:be:9e:10:0b:6a:f2:97:f6:dd:cd:e7:d2:0f:79:85:08:
         b4:c1:7b:55:21:b6:75:ed:00:7a:a1:65:6a:31:51:c2:86:0b:
         64:82:58:c0:c6:b2:a6:ba:85:da:b9:7f:35:9c:b2:f1:83:5f:
         23:85:da:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:34:52 2026 by rpki-client