Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1543a00-25db-43b0-8b17-26161baf1539/94ada8a2-d242-3e77-b6bf-30253dfb6125.roa
File:                     94ada8a2-d242-3e77-b6bf-30253dfb6125.roa (raw, json)
Hash identifier:          oSFJgeu73Gc5+mPfCJzFqPGmIK/s8b5ncGSZ4X8/NzI=
Subject key identifier:   C1:AE:3B:D3:72:86:F5:C5:21:05:08:C0:8F:1F:16:1E:13:E7:20:C8
Certificate issuer:       /CN=c1543a00-25db-43b0-8b17-26161baf1539
Certificate serial:       010D0C9F4328584E253F00AB707E2B31D7374840
Authority key identifier: 31:B9:83:72:F2:5B:11:99:03:9E:EA:08:BE:5F:DD:55:CD:9D:21:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1543a00-25db-43b0-8b17-26161baf1539.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1543a00-25db-43b0-8b17-26161baf1539/94ada8a2-d242-3e77-b6bf-30253dfb6125.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     54815
IP address blocks:        216.230.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1543a00-25db-43b0-8b17-26161baf1539/c1543a00-25db-43b0-8b17-26161baf1539.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1543a00-25db-43b0-8b17-26161baf1539/c1543a00-25db-43b0-8b17-26161baf1539.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1543a00-25db-43b0-8b17-26161baf1539.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3f:00:ab:70:7e:2b:31:d7:37:48:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1543a00-25db-43b0-8b17-26161baf1539
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=5aff845e-b0f0-4cd8-91c1-29179802b48a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:de:ac:0e:1c:dd:89:65:6e:cc:ac:de:8f:71:
                    de:6b:6c:e4:eb:3e:91:85:c3:2a:41:d2:e4:6b:34:
                    e0:8a:c8:66:43:66:5e:86:4a:f8:e4:2c:8d:94:fb:
                    f0:ac:52:c6:c9:b0:f9:43:61:0a:24:df:db:ad:d2:
                    c5:97:73:92:f8:87:81:78:6a:e7:e7:91:b6:4f:42:
                    02:b6:76:3d:46:db:44:95:66:a3:85:1e:eb:2a:41:
                    90:d8:c2:17:94:fa:7e:11:18:d2:95:43:9c:f2:53:
                    ae:f1:00:a5:3f:c0:75:4c:62:e4:a9:84:f9:4e:4b:
                    61:fe:01:52:a9:a3:3a:2e:f8:f3:e1:be:b7:5b:4c:
                    f2:6e:37:3b:87:bd:c0:27:03:e4:e1:de:89:71:29:
                    53:bc:3e:2a:58:bd:4a:81:96:21:1f:39:59:cc:6b:
                    5d:05:6c:37:05:b6:a0:f7:ea:8a:33:0b:58:57:0c:
                    2d:cd:6b:7d:cb:1d:0f:ae:e4:be:66:b2:3c:2e:6c:
                    68:58:e6:6f:39:ec:2e:fb:08:8f:18:aa:e4:8e:3c:
                    19:32:2a:67:b6:16:9f:34:3a:0b:3b:31:66:f1:b1:
                    79:1a:70:a3:a3:e9:0d:f8:ac:9c:dd:19:17:ce:c0:
                    25:fb:33:8e:62:d7:f2:b1:4a:56:d3:72:57:9b:22:
                    a4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:AE:3B:D3:72:86:F5:C5:21:05:08:C0:8F:1F:16:1E:13:E7:20:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1543a00-25db-43b0-8b17-26161baf1539/94ada8a2-d242-3e77-b6bf-30253dfb6125.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1543a00-25db-43b0-8b17-26161baf1539/c1543a00-25db-43b0-8b17-26161baf1539.crl

            X509v3 Authority Key Identifier:
                keyid:31:B9:83:72:F2:5B:11:99:03:9E:EA:08:BE:5F:DD:55:CD:9D:21:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1543a00-25db-43b0-8b17-26161baf1539.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.230.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:13:f9:31:2f:16:fe:70:ef:14:57:7a:68:b8:08:88:0f:e2:
         59:9b:89:70:f2:f9:6e:42:78:d6:f2:b3:13:62:91:20:c5:4d:
         56:89:ca:03:64:08:ed:f5:d1:d9:79:33:b0:fe:ea:70:06:45:
         bf:7c:25:c1:74:37:b2:f9:ae:cf:4c:12:33:8f:a1:d2:76:f9:
         2d:18:49:13:0b:e7:93:ec:2b:20:cb:01:2e:af:6f:08:1f:5b:
         51:81:5d:cd:bb:92:49:1b:c9:2e:b5:6b:75:69:e0:02:ec:e7:
         95:4f:69:59:e4:71:d0:eb:04:d0:60:c4:85:93:4f:47:48:cb:
         56:45:55:a2:c5:3b:f6:45:18:90:eb:bc:96:61:a1:8f:e2:05:
         b5:fb:60:c4:8d:18:ee:a6:c9:bf:be:28:68:86:29:60:10:67:
         3f:4a:fe:c5:86:d6:53:f7:3f:43:ba:39:23:df:88:58:65:1c:
         78:c9:aa:c7:b3:92:39:20:bf:40:d6:2a:4b:d6:5a:f3:f3:b1:
         52:d6:ca:ea:92:6d:00:56:13:20:93:0f:6e:56:89:7b:5d:08:
         db:09:ec:d1:67:b3:71:d8:78:3b:89:7f:ac:9c:81:af:15:c7:
         4a:a7:cf:55:cd:10:5f:7c:0b:ae:00:82:20:1f:44:c3:b8:09:
         da:4c:f1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:03:26 2026 by rpki-client