Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/1b665078-97d3-3b44-911e-af654cfb98a0.roa
File:                     1b665078-97d3-3b44-911e-af654cfb98a0.roa (raw, json)
Hash identifier:          0mNlEjLaDo8XN3/x6B/OHOsz9vrKNlTIxAcHDxbBK8s=
Subject key identifier:   0A:4B:7F:B8:BC:42:21:FF:9D:A1:8C:38:44:28:91:5A:C2:FA:12:4D
Certificate issuer:       /CN=400c5da8-08ab-40ed-9e23-dff413fb2d52
Certificate serial:       010D0C9F4328584D7CCFD3A1CD8860AA5C24E440
Authority key identifier: C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/1b665078-97d3-3b44-911e-af654cfb98a0.roa
Signing time:             Mon 13 Apr 2026 01:00:24 +0000
ROA not before:           Mon 13 Apr 2026 01:00:24 +0000
ROA not after:            Sun 12 Jul 2026 01:00:24 +0000
asID:                     23158
IP address blocks:        67.216.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7c:cf:d3:a1:cd:88:60:aa:5c:24:e4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=400c5da8-08ab-40ed-9e23-dff413fb2d52
        Validity
            Not Before: Apr 13 01:00:24 2026 GMT
            Not After : Jul 12 01:00:24 2026 GMT
        Subject: CN=04e6f842-fdc7-4d9a-a037-c8babb381088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:95:f8:0c:2d:f0:a1:2b:fd:02:e2:86:fa:5b:
                    f5:5b:dd:dc:68:15:09:90:c7:dc:d6:b3:f0:85:34:
                    a2:e0:b3:9c:96:26:9c:b4:43:e0:00:9e:1e:bc:d6:
                    8d:06:a2:89:ae:3a:8f:39:aa:08:11:0d:f2:80:87:
                    65:2e:bd:75:10:c9:7e:f0:a9:a9:79:1a:3a:5d:88:
                    fe:5c:bf:95:93:b3:e4:de:75:12:28:c5:bd:5a:49:
                    32:6a:aa:7b:84:85:92:66:80:9c:de:7c:a8:7d:87:
                    8a:92:2c:57:8e:f0:0b:17:4a:cb:1e:31:1a:45:2e:
                    48:e5:16:f6:7e:ce:23:00:80:fe:a6:04:f6:84:e7:
                    11:d2:49:98:ee:3c:88:9b:75:a7:49:cd:94:1f:b0:
                    c6:63:4a:3f:ca:89:69:66:e9:cf:ec:d0:74:e4:70:
                    cb:cc:79:cd:72:98:87:af:30:6c:21:65:2a:9e:9e:
                    04:bc:6a:05:ad:52:ca:99:83:b8:ad:c8:65:e7:06:
                    63:eb:e9:01:1e:af:68:b7:72:c1:bc:2f:e5:ae:64:
                    99:df:bb:15:49:26:32:c9:e6:32:94:fa:48:01:92:
                    fd:45:72:a1:94:3b:86:bf:97:50:e1:00:f8:a5:cb:
                    7c:78:6a:56:3b:84:ab:bc:88:9e:e1:a5:df:be:49:
                    d9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:4B:7F:B8:BC:42:21:FF:9D:A1:8C:38:44:28:91:5A:C2:FA:12:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/1b665078-97d3-3b44-911e-af654cfb98a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl

            X509v3 Authority Key Identifier:
                keyid:C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.216.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:20:26:9e:68:48:6a:de:ef:90:8a:8d:0f:fd:43:8a:60:7d:
         0e:e6:2e:53:7e:a3:84:e6:1c:55:c4:76:19:c5:15:73:4c:06:
         85:28:e5:f9:35:88:21:48:72:e8:3b:cd:14:55:88:9a:dc:e8:
         63:0a:d1:57:85:0f:28:9a:ce:58:1f:9e:ef:d1:cb:e6:a6:03:
         56:04:eb:b3:20:7a:30:8a:bf:ac:b3:5d:c6:7e:7e:ba:b8:de:
         22:9b:5b:76:1c:0d:d8:90:f2:68:9a:e1:0b:0f:96:0b:b7:cb:
         bd:bf:32:dc:cf:4b:72:de:f8:19:ca:43:73:ec:cf:58:2b:8e:
         79:c7:50:01:99:e9:9a:70:fc:aa:9b:5b:65:6b:8c:3c:84:fa:
         f5:18:2f:b9:6a:d1:96:b7:e5:2f:d9:1c:3a:a3:0b:5d:f2:37:
         bb:04:9c:93:89:11:52:6a:14:5c:9c:0e:ca:e4:52:ed:45:fc:
         6e:a5:66:c4:92:d5:a0:63:20:bc:62:97:7a:b1:50:f9:e4:2e:
         74:da:40:ed:72:3c:df:46:d5:f6:a8:bd:d9:0b:6c:a6:b2:94:
         91:53:5c:64:e9:fc:34:0d:fc:b7:74:08:6d:49:2e:32:dd:1b:
         72:f8:eb:0d:51:26:96:35:56:7c:2b:aa:53:9f:b0:95:9e:94:
         87:96:43:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:33:34 2026 by rpki-client