Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b55041e5-ce4b-3794-99a1-88054fc3c9ae.roa
File:                     b55041e5-ce4b-3794-99a1-88054fc3c9ae.roa (raw, json)
Hash identifier:          JQIpcgROZShfkM5c8M2OU35wrLPmOBbYQU5/zxmEhWE=
Subject key identifier:   91:07:10:7E:09:3A:95:1E:4E:17:FC:14:CC:AE:F5:B1:B1:AC:30:45
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584E1FA9B261BEC12BDED6246E00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b55041e5-ce4b-3794-99a1-88054fc3c9ae.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     396592
IP address blocks:        216.87.145.53/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:b2:61:be:c1:2b:de:d6:24:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=200541db-0d25-4a1d-8cf1-7431b01a6517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:23:e3:b0:f1:33:15:86:3e:13:29:31:c9:de:
                    37:77:41:04:6c:55:a6:a6:ab:94:eb:36:69:8f:79:
                    92:b6:99:2d:88:af:e7:5d:df:7c:68:7f:e9:f5:6c:
                    b7:51:08:23:b9:7c:d6:72:ae:bd:2e:cd:bc:8b:8f:
                    13:e5:de:f1:ed:73:21:b1:53:dc:09:e9:49:e9:fe:
                    61:e3:23:09:14:25:be:29:8d:dc:57:5b:c1:53:3c:
                    19:f1:bc:02:ee:94:ad:1e:a0:04:c9:b7:fc:e2:66:
                    fe:9b:2d:17:8f:4a:8d:62:8e:4c:ca:cf:47:67:5e:
                    33:37:e4:ee:64:da:aa:25:08:e8:e0:7c:c2:39:9d:
                    ec:4d:58:31:54:75:12:92:c9:81:4c:55:f6:64:ff:
                    34:78:b2:ff:68:88:87:f9:25:b1:a1:7c:eb:b1:0a:
                    29:9d:75:2b:e6:1f:4a:5b:f1:4b:fb:83:56:14:e0:
                    ab:75:db:01:48:27:f3:81:08:9e:8d:f2:2a:c8:91:
                    b9:01:61:d5:67:ac:58:7b:cc:94:ad:fd:53:64:79:
                    55:51:d2:0b:45:02:71:bb:f1:dd:2f:9e:0f:52:c2:
                    0d:30:8f:a4:60:a6:cf:46:98:7d:8f:39:d0:5a:06:
                    69:a1:13:e0:c4:80:af:f3:59:09:ed:db:8c:d8:e8:
                    43:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:07:10:7E:09:3A:95:1E:4E:17:FC:14:CC:AE:F5:B1:B1:AC:30:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b55041e5-ce4b-3794-99a1-88054fc3c9ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.145.53/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:0a:24:69:7d:63:b0:0a:9a:9f:b0:10:68:67:d0:ea:ec:a6:
         7b:81:d0:a2:78:2b:5c:5d:81:96:87:9a:e3:1c:ac:cb:9d:ab:
         6f:63:31:4b:b7:49:e4:4f:53:b9:70:82:fe:e5:87:9b:63:21:
         35:c6:c6:0b:4b:18:51:be:22:97:11:c0:75:05:07:99:22:a2:
         78:00:47:93:55:1e:b6:7e:00:d7:ea:c0:cc:bb:f0:26:91:15:
         5c:ce:66:e1:a6:b8:ef:f6:86:18:13:e9:b8:f0:f3:5b:e1:11:
         de:f2:49:36:85:e4:71:d7:24:2b:c4:d4:eb:e1:82:c5:5c:9c:
         e9:e1:4e:67:3b:53:e7:74:73:81:17:16:f7:ca:db:f5:36:d9:
         55:ff:06:0d:3e:77:f5:1f:f5:4b:68:bd:31:b6:96:90:b1:d5:
         c4:19:db:11:12:53:b5:6b:cd:03:a0:a4:a3:7e:4a:42:1e:9a:
         de:71:b9:d3:08:bd:b5:0d:ac:c1:32:50:55:01:f3:6d:06:e2:
         10:55:2b:0c:92:35:bb:80:22:81:a3:b7:ae:d3:e2:a2:8c:8d:
         8d:f6:44:7d:20:b1:5b:44:0e:e6:55:2a:00:1e:21:27:af:07:
         39:25:b0:88:6a:8e:51:c5:0a:f4:73:55:d0:7d:2a:6e:d6:71:
         a8:8d:24:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:14:46 2026 by rpki-client