Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/ec53920a-a403-3eb2-9f0f-ae8b9f6aa61c.roa
File:                     ec53920a-a403-3eb2-9f0f-ae8b9f6aa61c.roa (raw, json)
Hash identifier:          TFbwVRa4SCnFXNeiCg9nTVSQ1PCjpi0XvakWh0g9szQ=
Subject key identifier:   B3:E4:1B:05:7E:4A:09:D9:F8:54:F6:1F:95:62:20:1E:31:1E:84:CF
Certificate issuer:       /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Certificate serial:       010D0C9F4328584DF4DB5B83BF5A084FCE2B6B40
Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/ec53920a-a403-3eb2-9f0f-ae8b9f6aa61c.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     4213
IP address blocks:        216.176.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:5b:83:bf:5a:08:4f:ce:2b:6b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=7b42f1d0-f4ee-4efc-9d1b-00b0059d260c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:dc:d1:93:9e:9e:6e:75:21:d3:29:48:8d:0e:
                    43:45:e5:40:f3:a2:8c:06:21:c9:67:cc:1b:9a:c2:
                    87:b4:3f:f8:c0:61:45:32:e5:d2:7d:b7:52:90:0a:
                    27:04:e6:0f:dd:49:e0:ff:ad:75:46:52:86:1c:6a:
                    03:59:00:84:88:35:43:5a:6d:2b:59:19:0c:67:8d:
                    7a:b4:95:cb:fa:69:de:ce:3a:21:d6:6f:7e:c3:84:
                    b9:4f:12:f4:46:1e:0e:12:e3:89:fa:93:c6:f0:94:
                    e5:90:df:18:a2:c2:a1:4a:da:0e:80:90:fc:91:fb:
                    a3:aa:f0:93:ee:0d:17:98:f5:33:1c:d9:42:1e:cb:
                    dc:69:cf:98:58:c0:ef:ff:a5:60:d0:63:04:e7:5d:
                    50:1c:24:fd:5f:b0:6d:46:9c:b9:44:4b:66:04:0a:
                    84:6a:33:07:80:6f:9e:31:03:16:06:ae:9b:ca:23:
                    bb:18:df:f7:d0:e0:c8:cb:a2:8e:44:e3:39:f7:f8:
                    eb:59:a1:1f:0f:a5:51:25:ad:ef:f9:b9:45:97:27:
                    02:ce:e9:35:2c:70:7b:8b:8d:99:bf:2b:26:56:ce:
                    da:40:a5:fd:af:bb:71:c4:23:8e:25:3e:6a:7e:9b:
                    ad:3e:46:c9:da:db:e5:fd:fb:55:7d:a0:b5:52:09:
                    be:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:E4:1B:05:7E:4A:09:D9:F8:54:F6:1F:95:62:20:1E:31:1E:84:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/ec53920a-a403-3eb2-9f0f-ae8b9f6aa61c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl

            X509v3 Authority Key Identifier:
                keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.176.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:2f:87:63:f6:0a:d9:02:4a:f5:4b:90:0f:18:40:86:20:2a:
         26:26:2d:33:0e:ac:86:cc:72:d4:a2:29:a1:e8:63:5a:d2:b5:
         87:d3:b5:0b:9d:15:9e:5b:77:be:a6:26:49:27:f8:ab:86:78:
         90:2d:18:38:46:ab:a5:d0:67:47:2f:5a:5f:1b:f1:53:0e:1a:
         95:9b:b1:68:89:bd:cd:b9:2d:50:99:ca:84:ce:85:d7:16:0d:
         06:c4:af:7c:60:a7:11:3d:80:df:c4:4b:02:82:ac:62:88:ed:
         49:b2:e3:2a:95:7b:9e:5e:c3:f0:c0:b5:f1:65:29:32:5f:79:
         c1:cb:61:eb:79:f4:06:02:0c:f6:11:5b:b2:c7:6e:d8:4a:08:
         50:4f:c8:72:b6:34:1d:45:f3:1f:2e:c9:9b:7e:b9:8d:bd:7d:
         e4:ae:79:0d:65:f7:cb:34:6c:6f:1d:6f:68:41:f9:50:7f:0f:
         6b:3d:76:6c:d4:ca:a1:b3:ac:2c:12:c4:d2:2a:e6:56:dc:69:
         ae:9a:b5:db:36:e1:a8:3f:f6:41:8e:57:8f:d1:18:14:0b:f7:
         42:e0:17:95:df:8e:13:e3:ab:0d:e6:e3:ae:32:a5:08:b7:5f:
         cc:84:8c:8e:d6:6f:6f:e0:ba:e8:66:10:cc:21:a3:cc:27:d8:
         15:68:6b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:17:49 2026 by rpki-client