Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/2be77735-09fd-3a49-9a9f-3b91769f66c5.roa
File:                     2be77735-09fd-3a49-9a9f-3b91769f66c5.roa (raw, json)
Hash identifier:          wKzqF8+HE1w7s1JkLroIoAetuSFa5iBGEywAV6csX2o=
Subject key identifier:   A7:4F:ED:BB:AB:5A:4D:08:28:30:8B:8D:18:40:1A:2A:45:F9:83:0B
Certificate issuer:       /CN=efead3cb-1d38-407f-ba06-8e276b067238
Certificate serial:       010D0C9F4328584D571FAED5945AFF6717C37E80
Authority key identifier: 34:F9:DA:8D:CD:DF:5F:80:A2:55:F5:F6:68:8B:4F:47:20:C1:03:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/2be77735-09fd-3a49-9a9f-3b91769f66c5.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     14618
IP address blocks:        216.238.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/efead3cb-1d38-407f-ba06-8e276b067238.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/efead3cb-1d38-407f-ba06-8e276b067238.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:ae:d5:94:5a:ff:67:17:c3:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efead3cb-1d38-407f-ba06-8e276b067238
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=40d2b770-1e77-4b39-97d6-90b48b561105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b0:73:37:48:62:cb:0e:a6:a8:96:72:00:9f:
                    19:23:ec:c9:8f:60:da:41:73:a8:f6:fd:b7:b9:b7:
                    29:51:9c:89:38:25:81:fa:83:a5:3d:39:6f:08:b5:
                    6e:9e:da:86:0d:00:7c:8e:f3:3e:b3:3e:3c:c0:3f:
                    03:4b:6f:83:82:19:87:6f:57:01:ae:42:61:ca:f2:
                    d7:d4:b4:0c:51:09:b2:fd:92:47:9a:4a:a1:1a:0f:
                    78:30:e5:c1:6a:95:62:85:81:cd:3e:69:1e:f1:24:
                    39:52:f7:6a:b1:dc:ca:14:43:a9:f4:c4:f6:ae:4e:
                    66:ba:77:35:81:e8:dc:9b:23:b7:2d:43:6b:5e:3d:
                    86:d1:44:4e:90:c1:c4:f5:29:78:1e:bb:91:ba:b6:
                    62:9a:4d:b4:1d:d4:fb:e8:42:12:09:02:88:58:21:
                    07:bf:f1:18:0d:5f:95:f0:8c:37:d5:b0:61:7c:f1:
                    f5:b1:92:c9:65:25:ac:72:25:e1:b8:84:f7:a7:89:
                    06:f0:74:50:13:15:b6:90:f5:90:cd:e2:61:6f:77:
                    e9:06:cd:9f:27:fd:68:2b:07:a7:5f:27:32:22:05:
                    d0:69:94:b5:6d:10:bc:41:3c:69:55:c7:c4:57:45:
                    e2:ea:17:d3:73:02:95:5f:3f:c3:12:91:ee:45:17:
                    f5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:4F:ED:BB:AB:5A:4D:08:28:30:8B:8D:18:40:1A:2A:45:F9:83:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/2be77735-09fd-3a49-9a9f-3b91769f66c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/efead3cb-1d38-407f-ba06-8e276b067238.crl

            X509v3 Authority Key Identifier:
                keyid:34:F9:DA:8D:CD:DF:5F:80:A2:55:F5:F6:68:8B:4F:47:20:C1:03:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.238.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:76:21:04:a1:72:3f:5b:38:26:59:2d:58:86:a5:08:d0:44:
         61:d1:6a:e3:c0:87:92:b8:fe:c8:0f:c8:50:20:c7:ac:6c:1b:
         fa:cb:68:6d:46:42:49:16:b2:ec:61:be:d1:b5:47:db:2e:2c:
         66:22:0e:50:60:f8:5e:62:4a:ca:eb:40:04:e7:81:7f:c8:aa:
         52:a4:9a:d5:85:01:64:ea:ea:45:4c:99:14:29:a8:b3:88:3f:
         7d:f5:3d:12:50:74:d0:a1:c5:b0:49:d7:0f:0f:d0:16:18:c5:
         8b:ea:2d:9e:a0:bf:bf:a9:91:a0:79:aa:36:8c:79:ec:82:a1:
         be:f8:8d:ab:5a:14:50:d8:a0:f2:98:a6:57:aa:6e:88:6b:f2:
         bf:dc:03:12:3d:69:f8:90:f9:a6:35:6c:00:ab:99:16:33:e6:
         04:14:6a:1d:db:00:fc:b0:31:05:e2:85:0b:90:cf:a4:4a:d1:
         69:38:11:ec:27:22:d0:3f:1b:86:1c:e4:07:59:ba:a3:77:ab:
         a5:72:a3:0d:3e:b4:fd:56:4f:1b:d0:c7:8b:08:80:63:89:9e:
         34:44:47:f9:50:0b:12:90:d6:3b:9b:4f:a3:56:01:d5:e1:b4:
         66:71:ff:47:59:c1:f4:5c:16:6f:0d:96:7d:fa:b4:a2:55:a9:
         1b:90:fe:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:22:46 2026 by rpki-client