Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/57de1a6f-2177-3036-8e1c-1f8d76c10484.roa
File:                     57de1a6f-2177-3036-8e1c-1f8d76c10484.roa (raw, json)
Hash identifier:          kIjJS7sN+2fPKLglRcVz/i+EeMRlMXsvZj3SuZx80GQ=
Subject key identifier:   AE:7E:29:6F:C2:74:E0:1E:7A:60:89:B1:19:91:3F:8A:B6:5A:4D:19
Certificate issuer:       /CN=efead3cb-1d38-407f-ba06-8e276b067238
Certificate serial:       010D0C9F4328584E253F0091FB9AB1CE8E754C80
Authority key identifier: 34:F9:DA:8D:CD:DF:5F:80:A2:55:F5:F6:68:8B:4F:47:20:C1:03:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/57de1a6f-2177-3036-8e1c-1f8d76c10484.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     16509
IP address blocks:        216.238.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/efead3cb-1d38-407f-ba06-8e276b067238.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/efead3cb-1d38-407f-ba06-8e276b067238.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3f:00:91:fb:9a:b1:ce:8e:75:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efead3cb-1d38-407f-ba06-8e276b067238
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=db56d7e9-bc29-4979-8889-c17c847ec208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ba:de:2f:99:a9:6d:29:0f:e2:39:99:20:b3:
                    a9:bb:23:52:1c:d3:ae:74:05:24:a7:bc:77:c7:f9:
                    f5:e3:ec:d7:1b:10:56:5e:ad:42:a6:4f:b4:c2:fd:
                    79:36:fd:5d:a4:18:ff:da:bc:ca:47:94:17:10:47:
                    e9:db:e7:b6:be:95:02:00:b7:dd:b0:cb:82:f1:15:
                    6d:63:65:d4:0e:66:c1:de:44:02:30:75:18:8a:a8:
                    34:3f:d6:a2:b1:8a:c1:83:70:4c:b3:ff:81:ce:5f:
                    21:9d:16:9d:49:e8:06:8f:cf:49:c5:cf:cf:1b:5d:
                    2b:31:d4:f1:f1:9a:29:70:6c:b0:70:10:26:b0:4b:
                    00:ed:c3:7d:9b:ee:b6:1b:f0:b7:4e:61:c2:58:23:
                    55:c3:33:58:c0:2b:26:3f:45:e1:32:8d:18:73:ea:
                    b4:d2:a5:8b:9b:50:50:d6:17:e8:d6:e0:79:04:ba:
                    22:06:5a:bb:82:71:0a:1d:6d:49:3c:24:15:54:fb:
                    fc:9b:11:34:30:40:58:03:20:87:4d:ad:f9:a1:9b:
                    a5:b3:fe:e3:23:cd:69:7c:3a:11:10:38:94:78:d9:
                    70:df:f8:79:9b:03:ef:f8:ef:97:97:06:91:de:c0:
                    71:82:25:11:f7:e3:58:61:43:84:61:9f:65:ca:13:
                    a6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:7E:29:6F:C2:74:E0:1E:7A:60:89:B1:19:91:3F:8A:B6:5A:4D:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/57de1a6f-2177-3036-8e1c-1f8d76c10484.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/efead3cb-1d38-407f-ba06-8e276b067238.crl

            X509v3 Authority Key Identifier:
                keyid:34:F9:DA:8D:CD:DF:5F:80:A2:55:F5:F6:68:8B:4F:47:20:C1:03:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.238.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:c1:0f:41:40:b9:0b:cb:7b:aa:22:2f:7f:5d:aa:16:5a:f6:
         2e:d6:ec:32:55:d3:c0:6c:9c:f6:9f:2e:b4:68:f5:52:a7:b6:
         af:c6:28:60:36:6c:c5:d5:f7:04:57:17:0e:3d:d5:02:52:3e:
         52:fe:69:41:de:0d:9f:b1:71:86:ed:fa:33:1c:e8:41:72:9c:
         87:05:ff:54:87:58:6b:b9:c1:3f:2c:d4:0e:01:9d:69:98:a5:
         8a:09:c8:6d:01:b1:db:3e:a2:62:58:ab:4e:51:9d:a6:d4:26:
         d3:0b:c3:c5:ff:31:be:77:cf:d8:0b:57:b7:7e:63:da:ce:5f:
         23:a9:92:d8:ab:01:ac:21:d8:65:4b:2e:0f:f6:a2:dd:5e:91:
         d3:a2:26:54:48:b6:95:ca:7b:f2:2d:a5:1f:36:a8:74:b7:d5:
         19:71:60:a8:32:25:84:75:f1:6e:53:d2:78:a9:d8:f1:dc:55:
         1b:cd:8f:4f:af:3f:b9:3a:4e:2d:a2:9b:a0:9d:c2:ee:c7:6a:
         1b:b9:77:3e:12:32:e3:51:61:25:f7:1a:8e:9f:bc:47:de:52:
         f0:1c:e4:37:60:9d:86:57:ea:16:58:12:af:c5:7a:02:36:b0:
         4e:0c:8c:bd:29:e3:f9:8f:19:77:47:84:c3:64:e1:db:54:85:
         be:91:f4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:48:35 2026 by rpki-client