Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/ebeb0c2f-d4e2-36a0-b923-1666ab33c49c.roa
File:                     ebeb0c2f-d4e2-36a0-b923-1666ab33c49c.roa (raw, json)
Hash identifier:          2XnorK7VuOUtEDSISleNhvfHpVmDdOo9Bh1t2cDaDvc=
Subject key identifier:   D9:4B:C6:22:0D:A4:2A:14:D2:09:73:71:5A:A1:0D:74:5F:0F:9D:AB
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F4328584D60E50C87AEE017C00B916200
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/ebeb0c2f-d4e2-36a0-b923-1666ab33c49c.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     209854
IP address blocks:        216.158.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e5:0c:87:ae:e0:17:c0:0b:91:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=d29e7a07-82c6-4471-80c9-c9a9be4d450d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e1:53:61:5c:01:a8:4a:8b:eb:0b:6b:c6:35:
                    6f:a0:28:00:07:0a:f8:28:8f:c9:4a:b2:08:c8:ee:
                    c9:a6:6f:db:42:ac:c1:dc:bf:59:db:2c:e4:e7:fb:
                    41:c2:f1:58:b5:b9:80:4f:e6:53:94:73:ef:af:da:
                    a4:c7:76:35:3e:eb:37:c8:97:a9:d0:48:be:d0:bf:
                    30:88:0d:60:d2:d7:4e:d6:5f:ba:9a:98:55:b6:f1:
                    4b:30:4a:52:d5:ec:bb:bc:a4:50:04:54:7a:85:bc:
                    67:60:a9:3b:eb:af:a1:49:0c:bb:4f:c8:23:db:a1:
                    cb:69:1c:60:ca:b3:25:02:c2:a6:a4:08:c0:0c:0e:
                    ad:f3:56:e7:75:7f:26:5c:4b:1d:bc:5e:bc:5d:b6:
                    14:78:da:7e:56:19:35:3a:e0:20:3d:0b:b6:cc:8b:
                    da:42:8c:9d:96:14:53:e4:be:09:ea:b6:f2:cb:cb:
                    39:c1:09:53:0f:61:0f:8f:a7:2d:4e:67:8f:17:6f:
                    d5:4b:70:6e:97:a7:bb:b2:00:93:d7:fd:97:98:61:
                    c5:fb:2f:4b:61:2f:22:3e:c5:c4:e6:ae:8c:1f:de:
                    5a:0e:69:35:19:e3:b5:e7:74:cf:bb:bf:64:91:80:
                    2c:e4:4d:76:e5:f9:c6:73:34:3b:8f:a2:dd:d2:4b:
                    07:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:4B:C6:22:0D:A4:2A:14:D2:09:73:71:5A:A1:0D:74:5F:0F:9D:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/ebeb0c2f-d4e2-36a0-b923-1666ab33c49c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.158.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:a3:e0:26:c9:f9:f3:4a:98:7f:0b:2c:4e:16:c1:82:ed:42:
         e2:8b:b4:5c:e6:c0:b7:94:43:67:27:3c:76:cb:1f:86:bd:af:
         d3:e6:35:37:a6:4a:c1:39:1c:f2:59:e8:ae:6c:5d:3d:fa:16:
         f6:1a:6c:f2:ff:2a:08:4a:b8:0c:69:69:b1:b4:aa:3a:cc:c9:
         ce:95:dd:da:50:02:9e:6e:cd:ef:a7:ca:78:ac:f8:85:bb:0e:
         77:0b:40:38:32:26:91:19:9c:a6:df:69:9f:dc:18:94:71:c0:
         f7:72:73:27:d3:d2:93:7d:9f:33:99:fe:b8:88:5b:7d:1e:70:
         a9:bb:f6:24:d8:4a:2f:87:fa:0a:70:6c:cd:89:64:33:62:c8:
         62:b2:b0:74:91:ad:48:ec:b5:c3:1b:83:e9:57:49:5f:e5:b3:
         b5:3a:9f:fe:bf:50:2f:78:62:15:ed:ac:bb:e4:b5:0e:83:5b:
         8b:ae:f2:50:4f:d3:31:35:37:62:bd:db:ce:ed:b0:cc:94:23:
         cb:ba:68:ef:cd:29:b3:d2:14:7d:d0:e3:78:a0:ad:96:63:8c:
         a5:65:f1:bd:a1:02:ec:98:8d:88:7e:f0:c0:b1:67:34:9e:ee:
         d8:dd:91:f0:cc:14:9e:95:c5:7c:43:9b:ad:1a:62:bf:c0:3c:
         08:16:5a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:06:21 2026 by rpki-client