Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a47e2843-16e1-4ed0-acc2-7a942bfc46ce/1ae4996e-0a4b-3bfd-9fb1-20f2aa7f8ba7.roa
File:                     1ae4996e-0a4b-3bfd-9fb1-20f2aa7f8ba7.roa (raw, json)
Hash identifier:          inl8yVeRsZvPYTErK6bMtyjx0+E8SPAO8NQUEXz4sd0=
Subject key identifier:   09:FE:47:2B:8F:78:FC:4B:6F:35:4E:9D:39:1B:59:E1:19:0A:BE:5B
Certificate issuer:       /CN=a47e2843-16e1-4ed0-acc2-7a942bfc46ce
Certificate serial:       010D0C9F4328584D6AAA82C3109840B78AD62DA0
Authority key identifier: EF:9F:F6:47:56:F0:E2:3D:69:AA:68:94:D7:E1:F8:8E:B7:CE:01:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a47e2843-16e1-4ed0-acc2-7a942bfc46ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a47e2843-16e1-4ed0-acc2-7a942bfc46ce/1ae4996e-0a4b-3bfd-9fb1-20f2aa7f8ba7.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     397373
IP address blocks:        216.87.48.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a47e2843-16e1-4ed0-acc2-7a942bfc46ce/a47e2843-16e1-4ed0-acc2-7a942bfc46ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a47e2843-16e1-4ed0-acc2-7a942bfc46ce/a47e2843-16e1-4ed0-acc2-7a942bfc46ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a47e2843-16e1-4ed0-acc2-7a942bfc46ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:82:c3:10:98:40:b7:8a:d6:2d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a47e2843-16e1-4ed0-acc2-7a942bfc46ce
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=204c5448-5327-4333-9412-ca0069790cb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:05:d5:47:dd:d3:e4:3b:80:af:61:28:c4:80:
                    54:30:3b:23:84:62:e8:d2:08:4d:29:44:61:9d:c3:
                    89:2e:b8:f8:74:dd:5b:a3:c7:45:6f:aa:67:ba:16:
                    00:9c:f6:6b:e0:ff:72:bd:cf:40:3e:b4:9c:20:a7:
                    02:1d:64:39:5e:a0:a9:83:8d:9e:4e:39:b8:d1:38:
                    e3:69:c8:79:81:c3:21:51:f5:24:dd:4b:a7:8e:a7:
                    f9:42:e2:10:3b:db:9b:ac:03:b3:38:21:48:1a:6c:
                    83:21:ea:88:2f:22:82:76:6d:0c:bb:b8:a8:f0:28:
                    2b:4e:d4:71:32:1d:bb:c4:9c:8b:a2:5d:67:6f:c8:
                    3f:a3:dc:e8:17:53:8f:14:0d:54:e1:27:f3:96:ad:
                    52:65:9a:e0:b8:2c:d9:ff:73:41:9a:94:c0:64:11:
                    51:a0:1b:8d:d1:b6:b2:c7:ee:f2:47:33:18:3e:86:
                    a0:f0:88:5c:62:9c:86:b3:e5:8c:29:44:89:59:5e:
                    da:31:48:42:dd:b8:1f:ec:f2:2f:7d:99:c3:70:f5:
                    78:df:fa:89:8d:97:19:c6:df:db:42:e0:92:0c:6e:
                    0a:c8:2d:4d:a8:1c:21:8d:fb:cd:70:2c:09:1e:7a:
                    93:bf:80:0d:17:c7:38:7d:e7:2b:9a:5f:a2:7b:d0:
                    39:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:FE:47:2B:8F:78:FC:4B:6F:35:4E:9D:39:1B:59:E1:19:0A:BE:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a47e2843-16e1-4ed0-acc2-7a942bfc46ce/1ae4996e-0a4b-3bfd-9fb1-20f2aa7f8ba7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a47e2843-16e1-4ed0-acc2-7a942bfc46ce/a47e2843-16e1-4ed0-acc2-7a942bfc46ce.crl

            X509v3 Authority Key Identifier:
                keyid:EF:9F:F6:47:56:F0:E2:3D:69:AA:68:94:D7:E1:F8:8E:B7:CE:01:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a47e2843-16e1-4ed0-acc2-7a942bfc46ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.48.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:e2:5b:d8:bf:9c:cf:7f:13:e4:e2:03:01:6c:9c:7b:26:64:
         38:6a:c8:d5:b8:b4:2f:00:77:ab:d2:87:dd:2c:fe:3f:63:90:
         9c:8a:b4:94:a7:a7:bc:ab:6e:e8:0b:98:5a:1f:5a:38:b4:33:
         7b:ed:be:fd:d8:7e:da:30:41:49:3d:b0:3c:a0:6f:bc:fa:74:
         00:9c:a9:6f:e6:db:53:a8:c2:03:a1:ec:96:21:68:b5:a8:86:
         68:e3:f6:36:28:ab:d7:82:c6:37:be:4e:ae:a0:00:7e:e9:f7:
         0c:44:7d:cb:ea:9e:76:38:31:71:31:f0:7f:87:b2:b7:a9:ca:
         e7:1a:23:85:24:dc:21:d2:5b:08:65:9d:f9:18:28:c9:b8:0a:
         a6:b9:3c:e9:5e:7a:ed:37:05:b2:bf:e9:cd:f4:b1:ad:04:95:
         0e:2a:f2:a5:39:4d:01:9b:79:5c:a7:e4:b4:38:6a:05:7c:0d:
         b1:96:ba:46:93:b4:ca:00:5e:04:35:4c:ea:a7:8e:50:15:37:
         a1:cc:34:e2:59:c8:52:81:fb:5b:f3:e9:4d:97:4d:3a:e2:b9:
         83:57:d7:b2:a4:6b:9c:ca:9b:fc:f9:9c:51:f0:ce:6e:11:a8:
         51:d6:2e:5c:94:64:d1:e9:89:a3:56:2f:8b:81:ee:aa:be:7e:
         6e:8e:af:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:15:36 2026 by rpki-client