Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a604b849-d354-3512-a814-e9b2ed363ed3.roa
File:                     a604b849-d354-3512-a814-e9b2ed363ed3.roa (raw, json)
Hash identifier:          Y5q6sC8YsZvrjM4rXX4Do55OpLzSGJ6ZCOiitmeM2rI=
Subject key identifier:   F7:B3:D8:66:B8:D2:8A:15:45:4A:0A:8C:B3:3D:54:2A:35:D4:04:80
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584E1FA9AECEAD7AE5BE255C0640
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a604b849-d354-3512-a814-e9b2ed363ed3.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     36624
IP address blocks:        216.87.145.53/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:ae:ce:ad:7a:e5:be:25:5c:06:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=a63f7bd5-9e90-45f4-84e7-1d224e32a125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:77:34:31:65:26:77:39:1d:3a:cb:6b:e2:8f:
                    49:9e:ab:c7:25:6d:b7:1f:40:d0:94:58:81:c4:34:
                    d6:1b:47:10:72:a2:58:86:cb:2f:eb:44:61:1f:ae:
                    d8:cf:07:0d:68:a7:51:35:5d:83:b4:a6:42:76:51:
                    49:45:c2:ad:84:01:4b:dd:c2:04:93:33:db:1d:02:
                    7d:65:5c:89:6e:f5:d0:10:89:be:e9:27:00:2b:20:
                    01:3a:a2:6d:01:b1:0c:99:f9:c8:45:d6:b0:4a:1e:
                    f3:d4:90:63:df:b2:58:a1:da:16:ed:5d:66:5f:a1:
                    a8:c5:80:a2:69:ee:63:a7:32:fd:b5:f3:6f:85:d8:
                    bc:66:d5:e9:1d:b1:b8:79:aa:f0:b6:5e:18:95:7a:
                    a4:0f:95:b1:fa:f7:4b:01:be:b4:bf:85:fa:07:37:
                    41:cb:4e:c4:9d:7b:d9:1d:3d:f4:c4:c2:84:b8:03:
                    4a:76:04:23:d4:7f:7a:d2:c9:e8:61:71:18:d0:1d:
                    22:b2:11:04:0e:01:ca:55:2d:42:dd:7c:23:8e:fa:
                    62:41:81:52:3d:8c:36:26:e4:d5:12:b3:d6:47:0c:
                    ee:34:9d:e0:a6:b6:e7:46:36:40:4e:eb:4c:a5:cf:
                    b8:17:6c:07:b8:a6:92:90:dd:ee:a1:3a:82:b3:65:
                    ba:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B3:D8:66:B8:D2:8A:15:45:4A:0A:8C:B3:3D:54:2A:35:D4:04:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a604b849-d354-3512-a814-e9b2ed363ed3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.145.53/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:80:18:0a:b6:18:57:18:b8:48:64:d3:c2:d7:9b:e1:0b:00:
         e6:4c:bb:04:e4:71:20:a4:fb:d8:1c:ae:82:d7:dc:a6:69:75:
         e2:74:31:f1:08:12:12:bd:01:a9:58:9e:e6:38:e9:6e:52:e1:
         9a:d7:93:b8:67:b7:27:87:e7:79:21:14:c3:dc:fc:9d:a7:25:
         88:ca:c6:7e:98:5a:56:f8:ac:6b:f5:2b:ce:79:e1:6d:6e:d5:
         96:57:de:f4:4a:35:ff:0f:90:fa:72:bf:2f:6e:ad:21:39:95:
         63:41:ec:7c:a1:98:d9:e3:56:3f:e5:03:ed:d0:f0:53:df:1b:
         3f:15:49:bb:d9:63:ff:b9:97:52:de:6f:17:9c:51:06:91:60:
         29:8a:a8:b2:83:04:c4:eb:69:05:73:7f:8a:14:e5:c2:02:b0:
         03:35:7f:a6:36:0f:5a:da:4f:9a:f9:98:e8:70:b3:d2:c9:64:
         d0:bf:f0:b2:7e:76:f4:09:f7:c8:2b:32:ec:fd:8e:5e:6e:7c:
         6b:26:d1:b5:5c:c1:d0:d1:04:ac:8c:b4:9c:44:e9:cc:a6:80:
         72:9c:31:cd:82:31:2c:49:e9:a2:ac:65:06:2f:5a:d9:42:b4:
         b8:f6:3e:10:18:e2:ab:8a:32:61:e0:97:2f:93:a0:97:bf:23:
         a5:96:74:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:25:23 2026 by rpki-client