Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e987d1e4-2fe8-3b59-a920-b90e13c0d6fa.roa
File:                     e987d1e4-2fe8-3b59-a920-b90e13c0d6fa.roa (raw, json)
Hash identifier:          U14Vt3OnK+IFlqQwzgZV+YHfgthnkalKjlG7+radU80=
Subject key identifier:   C3:CB:3E:FC:E4:F6:A1:BB:78:94:A5:9D:87:BE:50:0B:C1:85:3D:8A
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584E0D843385A7D9309AA5375420
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e987d1e4-2fe8-3b59-a920-b90e13c0d6fa.roa
Signing time:             Wed 03 Jun 2026 21:00:12 +0000
ROA not before:           Wed 03 Jun 2026 21:00:12 +0000
ROA not after:            Tue 01 Sep 2026 21:00:12 +0000
asID:                     396572
IP address blocks:        216.168.228.53/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0d:84:33:85:a7:d9:30:9a:a5:37:54:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jun  3 21:00:12 2026 GMT
            Not After : Sep  1 21:00:12 2026 GMT
        Subject: CN=6c7ee363-4ab7-4837-9f19-216ad218f26f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:bd:91:9d:cc:52:ae:37:5d:05:0b:b5:ed:2d:
                    29:63:44:1c:ad:4b:2c:ec:15:3e:c9:29:97:dc:7b:
                    94:df:dc:e6:31:5b:86:b6:67:85:db:f5:43:7c:8e:
                    1b:f1:f0:cf:a4:39:80:5e:5c:ce:c4:da:06:f1:fd:
                    b6:85:11:af:cb:e5:2f:9b:d2:51:90:f9:15:2c:d0:
                    3c:eb:11:20:2a:58:37:04:e4:36:5d:2b:77:67:82:
                    f6:47:03:ef:d2:19:4b:62:ee:49:a6:4a:66:90:c3:
                    ec:74:ae:48:35:59:a5:89:7c:73:bf:27:f6:8d:f0:
                    8e:ca:cc:08:63:bc:56:86:74:57:60:53:75:91:9c:
                    50:fa:1a:82:5d:20:6f:0c:d2:95:00:3b:ae:e4:3e:
                    3e:9f:a7:31:6b:7b:b6:d3:1c:e4:28:cf:7e:5f:ba:
                    c7:77:8d:bf:5b:49:d8:4e:ab:dd:e0:dd:17:46:17:
                    54:1f:69:6e:8b:2b:f9:f9:8f:22:68:cb:e0:d4:05:
                    79:c7:2e:c6:b8:86:8d:9d:da:62:33:08:9f:bc:1b:
                    48:46:b3:6d:be:97:48:4d:12:61:ca:c1:9b:d2:17:
                    94:69:8c:aa:a0:6d:b7:ba:0d:d6:28:29:8d:eb:1c:
                    32:7c:7b:2f:ec:87:ed:03:65:fa:fa:43:ae:6a:9c:
                    70:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:CB:3E:FC:E4:F6:A1:BB:78:94:A5:9D:87:BE:50:0B:C1:85:3D:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e987d1e4-2fe8-3b59-a920-b90e13c0d6fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.168.228.53/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:9c:37:b9:9d:e1:5f:42:c7:99:13:70:08:3f:f3:5f:4e:16:
         3c:73:9e:cf:c0:78:81:0c:3d:68:c9:04:49:40:a9:6e:fd:ac:
         d0:70:5d:06:8d:48:c3:52:2a:46:db:94:1f:ca:20:24:ca:c1:
         cd:ee:99:69:bd:dc:db:27:10:cd:c8:2e:66:89:4e:67:c5:05:
         8d:d0:d3:39:5b:61:11:90:51:dc:33:4e:05:01:a5:b7:7d:ce:
         0e:fd:47:94:69:16:9f:48:8b:9d:07:1e:6c:d4:bf:1e:e2:40:
         c3:7a:f0:53:0a:fc:e9:a6:03:ba:73:db:c5:fd:6a:1e:bb:60:
         26:99:14:e9:5f:bd:90:0e:ca:20:16:ee:70:28:4a:46:95:dc:
         58:78:25:63:3c:fc:64:3b:61:1c:91:28:09:84:39:f7:11:28:
         77:a2:ef:97:36:e1:7f:7f:c6:6b:7d:b7:e4:5e:02:9b:7f:80:
         f1:9b:aa:ba:56:43:7c:e2:34:ae:63:3b:49:c5:52:f8:69:92:
         e2:08:79:f9:09:ff:f3:72:70:37:17:53:21:ba:cd:87:76:a7:
         16:e8:78:a5:fd:23:19:21:fa:9b:01:dc:ea:d0:e1:35:35:17:
         aa:f6:1e:27:15:f2:12:23:e1:aa:1b:2e:0d:fa:33:ee:0e:a9:
         dd:14:90:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:27:16 2026 by rpki-client