Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/466d8aec-1e4f-30f8-865b-e46396c0bd20.roa
File:                     466d8aec-1e4f-30f8-865b-e46396c0bd20.roa (raw, json)
Hash identifier:          IV+qqstFxN7NXYFvF6xd/JH6nlihszdPV2zY7PkmPco=
Subject key identifier:   55:F7:74:E5:B3:15:57:2A:0A:BB:A1:05:6E:90:07:BE:D5:3A:0B:29
Certificate issuer:       /CN=367e4bfe-b165-41fa-ab22-3f78555490cf
Certificate serial:       010D0C9F4328584E9EAFE8FBB7C760EB214DA200
Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/466d8aec-1e4f-30f8-865b-e46396c0bd20.roa
Signing time:             Sat 25 Jul 2026 21:00:12 +0000
ROA not before:           Sat 25 Jul 2026 21:00:12 +0000
ROA not after:            Fri 23 Oct 2026 21:00:12 +0000
asID:                     209242
IP address blocks:        216.198.53.0/24 maxlen: 24
                          216.198.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9e:af:e8:fb:b7:c7:60:eb:21:4d:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf
        Validity
            Not Before: Jul 25 21:00:12 2026 GMT
            Not After : Oct 23 21:00:12 2026 GMT
        Subject: CN=f4676856-a19d-4e7c-b7b6-b6896d24ed9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:45:0f:55:35:76:fa:84:79:0a:5d:d5:dc:1a:
                    3e:f2:cc:70:67:73:d1:5e:0e:bc:82:63:4d:7c:bb:
                    94:2f:bc:52:5c:e4:9b:60:de:14:28:3a:eb:fd:87:
                    e5:eb:73:b1:26:ce:35:23:08:d1:5f:67:ab:e2:a7:
                    c6:13:72:20:be:52:85:af:1f:f0:ce:2b:31:7d:4a:
                    69:e7:ef:6d:67:ba:e8:77:35:84:7d:b6:8e:92:2b:
                    62:61:90:38:4e:59:61:0d:6b:88:f6:86:e0:91:c8:
                    67:5b:91:3e:3d:21:45:10:ee:fc:53:75:50:33:b1:
                    2f:cc:f5:5c:9d:6f:be:2f:53:b6:53:2c:2f:15:68:
                    b0:43:3c:06:ce:e2:f7:52:da:62:24:22:18:29:a5:
                    43:37:4b:d3:bd:cf:f0:c2:b3:c0:0f:7a:79:d9:c2:
                    40:e7:dc:b2:b5:87:6b:59:31:1d:01:99:38:c4:ac:
                    d7:fe:79:fb:ce:e0:27:fe:ab:f9:64:30:65:89:c0:
                    96:db:9f:f8:f1:68:f9:6f:6d:d8:83:6f:19:c0:7e:
                    db:0f:35:5b:93:7d:e9:0d:c6:89:ba:01:c1:3b:02:
                    9d:b0:92:cd:57:61:f4:fa:57:77:72:ce:08:94:10:
                    31:2b:e1:a7:1a:fb:ed:cb:b9:9f:34:d6:e4:72:b3:
                    d9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F7:74:E5:B3:15:57:2A:0A:BB:A1:05:6E:90:07:BE:D5:3A:0B:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/466d8aec-1e4f-30f8-865b-e46396c0bd20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl

            X509v3 Authority Key Identifier:
                keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.198.53.0-216.198.54.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:4f:5a:9a:20:8d:1d:61:44:f6:05:d7:3c:56:db:51:2b:3b:
         7f:ea:bf:8f:ec:e9:bf:03:5a:27:e1:41:4a:09:e6:8c:01:5c:
         5a:5f:47:51:6a:55:67:2b:72:07:85:9b:7d:e3:44:aa:7e:5a:
         9c:73:18:46:02:1a:05:b8:3c:0a:99:b1:00:fe:b4:2a:78:e3:
         4e:de:60:84:e4:98:b1:e4:1b:20:db:01:3b:f7:7b:c2:65:b4:
         03:68:47:ca:a5:4d:eb:8a:8c:a4:9b:78:85:59:3f:39:e2:54:
         6c:6c:3d:b8:ca:58:31:db:38:9a:1f:96:e3:a2:9c:54:99:6c:
         fb:bb:e6:a5:a2:3a:69:63:48:49:51:4b:5e:25:9a:ed:71:42:
         54:f6:50:2c:ba:8d:1f:ce:bd:c6:f5:88:a6:06:de:f0:c7:2e:
         9e:67:a3:5e:17:c2:5f:30:9a:85:21:5b:e7:41:97:d1:4b:66:
         87:a0:a3:33:9d:0c:46:ce:cb:f2:5e:c2:8f:d5:ea:58:a1:39:
         68:0c:fe:d9:e4:d4:f5:08:a4:43:ed:b5:64:93:84:d6:ab:6a:
         4e:aa:01:e1:81:55:6e:f3:49:5a:4f:e7:2b:f2:5f:2e:ec:ad:
         a8:7e:bb:28:fc:e1:13:29:48:ac:4e:5d:16:be:fb:af:d4:ea:
         9b:56:39:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:26:44 2026 by rpki-client