Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/ee02f89e-d151-39e0-a655-f74770f9addd.roa
File:                     ee02f89e-d151-39e0-a655-f74770f9addd.roa (raw, json)
Hash identifier:          cl2UsCozZGOYOFFGEHoNxJHubTzZYzJtz40+z/GueS8=
Subject key identifier:   E4:9B:D8:EE:AB:4A:C2:62:49:46:DF:70:2F:94:72:DE:D8:8B:D2:84
Certificate issuer:       /CN=311f19cc-344e-48c5-a1f1-47593aa56b0d
Certificate serial:       010D0C9F4328584D7F9A7C17DD923AE5B8574C00
Authority key identifier: 4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/ee02f89e-d151-39e0-a655-f74770f9addd.roa
Signing time:             Tue 14 Apr 2026 01:00:24 +0000
ROA not before:           Tue 14 Apr 2026 01:00:24 +0000
ROA not after:            Mon 13 Jul 2026 01:00:24 +0000
asID:                     31875
IP address blocks:        216.21.216.0/21 maxlen: 24
                          2604:ebc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7f:9a:7c:17:dd:92:3a:e5:b8:57:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=311f19cc-344e-48c5-a1f1-47593aa56b0d
        Validity
            Not Before: Apr 14 01:00:24 2026 GMT
            Not After : Jul 13 01:00:24 2026 GMT
        Subject: CN=917b11d9-3e2f-4087-ab8f-4e515e292ae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ec:ae:01:fc:64:30:58:7a:82:bc:a2:ff:09:
                    6b:50:1a:b4:03:d5:68:56:5d:48:dd:13:c7:41:03:
                    53:b1:15:93:82:f6:38:b3:fc:eb:d1:fa:8f:5a:67:
                    be:63:03:b8:f0:eb:6f:2e:cf:7d:e0:05:9e:7d:35:
                    49:b0:b4:ec:d3:3c:dc:d2:80:6c:f9:c8:3e:0a:e2:
                    5a:4b:88:c9:43:f4:7c:43:27:93:e7:d6:da:ba:b5:
                    bb:d9:80:6b:b8:b4:55:1b:10:5f:9b:a7:81:69:52:
                    05:4e:eb:cb:90:4c:31:13:0a:ef:58:36:4c:02:50:
                    30:04:da:7e:5c:e8:20:65:b9:15:da:2f:3f:0c:ae:
                    25:1f:70:2b:f2:b5:d2:54:2b:b5:ce:57:fa:5f:ef:
                    ac:bf:f1:01:32:23:13:84:de:f2:ff:fd:1b:51:ea:
                    bc:9c:3a:45:7b:14:a7:e2:09:4f:74:6f:48:52:32:
                    41:6f:e8:8f:07:58:88:15:9f:aa:4e:b6:47:63:5e:
                    9f:c7:02:0d:31:1b:ab:9d:c6:a6:67:fe:85:2f:d8:
                    b7:ad:50:c7:65:85:64:3f:67:0d:24:3d:bc:ff:d1:
                    13:2e:09:74:ec:60:59:2a:07:0e:ac:d3:17:e7:fd:
                    ea:29:20:eb:47:39:38:f3:ea:15:9f:ea:8c:df:09:
                    c9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:9B:D8:EE:AB:4A:C2:62:49:46:DF:70:2F:94:72:DE:D8:8B:D2:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/ee02f89e-d151-39e0-a655-f74770f9addd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl

            X509v3 Authority Key Identifier:
                keyid:4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.21.216.0/21
                IPv6:
                  2604:ebc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:aa:ff:20:2b:af:03:7d:c2:46:f6:f8:d0:44:7d:57:22:13:
         98:f1:f9:d6:27:ee:be:65:10:07:ad:74:06:42:bd:15:0f:47:
         e9:41:a2:38:4e:60:be:33:4e:8b:f4:87:7a:01:67:d7:66:a9:
         ae:f9:bf:97:0c:4d:eb:36:3e:92:6b:7d:aa:a3:2d:a2:4a:49:
         7e:b2:15:43:2c:0c:3b:a3:51:39:69:d1:03:06:48:5c:d8:7c:
         80:4f:b0:08:b6:61:78:15:2e:c8:a0:4d:6b:f7:84:a3:fa:35:
         16:96:da:e5:9d:e3:1e:03:c6:f5:bd:f8:99:e8:38:b8:de:06:
         7c:e7:7f:05:bb:8d:12:26:75:4b:91:8b:6e:ed:b4:ba:54:8d:
         c9:ae:8f:ae:15:0a:56:90:91:f0:eb:e8:fd:b9:33:61:df:d9:
         35:0c:59:8c:02:86:bf:b3:67:2d:6c:de:41:e1:24:bf:0d:d5:
         e5:c0:ff:91:a4:22:eb:ad:64:98:d6:a9:10:71:8a:38:65:53:
         c6:1e:c7:7c:8d:3c:19:5f:68:62:1d:2e:83:7d:14:ca:b4:20:
         9b:1f:d7:80:17:28:96:08:79:bd:49:84:ce:0a:b9:38:8e:85:
         51:42:8a:b0:37:87:27:4a:b7:50:4d:69:50:31:b2:96:eb:cb:
         ef:65:7c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:40:00 2026 by rpki-client