Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/165b190a-bc48-3899-87f2-27377652e3af.roa
File:                     165b190a-bc48-3899-87f2-27377652e3af.roa (raw, json)
Hash identifier:          krI0FZ/X/qR+u16wP2iw2EqEqGCcAw4K8U6h582JzaM=
Subject key identifier:   27:C8:50:C0:CC:DB:72:50:F1:17:9F:46:F5:CD:7F:96:D1:EC:4C:CA
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584E1FA9B23BCF9D23B815ABA940
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/165b190a-bc48-3899-87f2-27377652e3af.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     396580
IP address blocks:        216.87.145.53/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:b2:3b:cf:9d:23:b8:15:ab:a9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=2d1cf279-4f0a-4c23-84c6-6832f230222d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:46:a2:a5:0c:6f:da:c4:b4:d3:5a:73:41:74:
                    a2:64:94:b5:73:17:c3:da:9c:13:81:a4:7e:b5:f3:
                    e5:ce:c3:67:ae:98:29:78:52:b5:bf:f7:19:4c:9f:
                    b1:3a:f1:22:e0:04:f8:1c:d9:31:00:c6:41:e7:fd:
                    cc:09:5b:cc:6c:95:ad:9d:5f:f0:52:91:5e:c7:c2:
                    84:73:60:35:33:66:07:61:65:e7:de:ab:21:cc:47:
                    46:1a:f3:23:45:7a:c1:55:7b:a6:6b:5b:10:8c:d0:
                    81:31:cd:f0:b3:3d:e4:1f:22:ba:73:2c:fc:fc:3f:
                    7a:54:a5:33:5c:f5:83:66:90:fd:7b:d5:52:8b:75:
                    bf:5a:8f:aa:cf:a3:3d:ec:43:c8:d9:1f:58:a2:b6:
                    79:99:5a:e5:76:08:b1:65:8d:8c:96:0e:61:ea:72:
                    d6:95:be:30:22:30:ce:1f:8b:3b:67:f7:5e:0e:b7:
                    0f:a9:11:83:cb:d6:df:e8:00:d9:79:3d:ea:56:32:
                    81:d9:01:07:b0:dc:49:1f:82:de:3e:74:23:7e:cb:
                    dd:d9:1b:2f:ab:3f:76:c6:1d:90:21:a6:36:19:15:
                    25:a1:80:57:87:03:c6:02:28:58:8e:d0:2a:70:8c:
                    3a:a6:3b:9a:19:b6:4e:8b:90:d9:ed:bb:6e:8d:48:
                    c4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C8:50:C0:CC:DB:72:50:F1:17:9F:46:F5:CD:7F:96:D1:EC:4C:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/165b190a-bc48-3899-87f2-27377652e3af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.145.53/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:4a:0e:67:13:dc:8b:fc:ca:26:c2:d1:f3:d3:92:49:78:ef:
         31:65:34:35:6c:fe:1f:49:a6:36:c1:06:19:39:ea:7a:c5:84:
         70:f2:cb:96:d0:e6:32:54:a5:d6:20:a8:fe:c7:8b:0c:01:29:
         50:c6:82:f2:6c:1a:92:e8:f2:b7:f3:ce:8e:88:34:51:b0:a1:
         b9:d4:df:47:43:26:92:8f:80:e6:55:58:f4:d5:87:fa:ad:53:
         b3:be:1a:ce:b2:70:dc:8f:35:0c:f4:20:14:61:86:64:2a:2e:
         88:00:9c:d1:e8:3b:76:7e:13:3d:54:a4:46:59:77:b0:24:2b:
         9c:53:f0:77:40:d1:ae:d0:36:b9:d2:8f:f5:30:46:6c:4f:54:
         64:7e:9b:23:36:ed:3d:a8:34:da:ed:2c:17:d5:84:c9:90:b0:
         9e:30:31:a4:78:f1:35:b7:49:dd:f3:ac:26:1d:6e:47:f8:e6:
         b3:c3:e5:f0:12:eb:15:d6:ff:4e:99:d5:c6:df:e4:19:22:b7:
         02:6d:ca:8b:c3:0e:ba:6d:e3:01:45:91:cf:db:b8:20:87:30:
         4f:fc:14:20:99:41:76:f5:87:87:53:93:a4:0c:21:0e:cd:63:
         3b:d3:8e:7a:11:97:41:13:0b:d1:49:4c:c2:bc:fb:e6:01:ce:
         71:fa:31:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:01:33 2026 by rpki-client