Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/4e40ea39-4ef2-3aa2-8cda-c467bfe7938d.roa
File:                     4e40ea39-4ef2-3aa2-8cda-c467bfe7938d.roa (raw, json)
Hash identifier:          bPJtFvm2emasv6elqSHfxVVPD3WAluyIxUnf/f4g9lY=
Subject key identifier:   8C:4A:6C:59:D5:27:76:12:0B:EB:FD:C1:C7:0F:FC:02:FA:7B:DC:3E
Certificate issuer:       /CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751
Certificate serial:       010D0C9F4328584D730A691385C239509ECBF038
Authority key identifier: B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/4e40ea39-4ef2-3aa2-8cda-c467bfe7938d.roa
Signing time:             Thu 09 Apr 2026 13:00:30 +0000
ROA not before:           Thu 09 Apr 2026 13:00:30 +0000
ROA not after:            Wed 08 Jul 2026 13:00:30 +0000
asID:                     812
IP address blocks:        216.185.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:73:0a:69:13:85:c2:39:50:9e:cb:f0:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751
        Validity
            Not Before: Apr  9 13:00:30 2026 GMT
            Not After : Jul  8 13:00:30 2026 GMT
        Subject: CN=53850f20-dcbf-42c9-936f-f7bb2a916374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:58:da:5f:42:8a:42:1d:52:e3:ab:67:2a:cd:
                    f7:14:cc:6f:b7:eb:32:da:54:b6:c5:cb:e1:7c:a4:
                    d8:e2:2d:aa:da:ce:20:28:68:4d:c8:cf:91:88:44:
                    13:d5:a7:6e:be:00:0d:4a:1b:1d:be:46:eb:db:c3:
                    b6:e8:b4:39:81:71:61:c0:7c:d7:6e:24:9e:ad:0e:
                    30:f9:cb:47:21:fd:84:b2:bf:a0:db:cd:5e:58:6d:
                    80:ff:dc:31:27:29:81:f5:75:e4:f2:91:dc:f0:24:
                    31:88:95:d5:b6:3b:25:d5:b1:0c:94:0c:ed:a0:6c:
                    e5:0f:95:de:d2:7d:c1:5b:d9:17:53:4d:76:29:86:
                    98:cc:96:c9:51:5e:61:95:3a:07:99:92:58:52:0b:
                    2f:6c:6c:75:12:29:5e:1c:50:84:94:c0:28:fa:3b:
                    c2:7a:d4:0e:98:f9:72:3b:60:40:6a:f7:e4:d9:d5:
                    61:96:12:8e:30:1a:7e:0a:01:6e:51:25:9d:f9:a1:
                    c8:a7:d6:1b:ec:ef:56:16:e8:75:8b:d1:77:de:b3:
                    57:41:a6:72:33:79:05:3b:00:6c:c0:0d:87:72:cd:
                    58:81:fc:a4:d4:92:80:a4:c5:82:33:f6:9d:b8:9e:
                    ea:2e:5d:8f:6c:c4:79:90:5d:62:06:46:db:25:14:
                    b6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:4A:6C:59:D5:27:76:12:0B:EB:FD:C1:C7:0F:FC:02:FA:7B:DC:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/4e40ea39-4ef2-3aa2-8cda-c467bfe7938d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.crl

            X509v3 Authority Key Identifier:
                keyid:B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:12:62:60:66:6a:fd:a5:14:d6:4d:bb:75:49:e8:7a:ac:a1:
         2d:99:12:8e:a2:2f:b2:b4:6c:71:0e:46:84:ac:be:e7:4d:20:
         02:66:10:06:4d:30:d2:b1:bf:d6:28:c2:11:67:d7:a9:cc:ce:
         60:f4:90:37:41:80:73:49:9a:29:b3:1a:43:58:4e:69:a3:28:
         6e:b7:52:0e:fc:32:88:77:1e:ff:5c:eb:bc:28:42:12:c3:99:
         f8:7a:6c:f9:4e:8a:8a:d0:7a:a1:2f:b8:26:2f:2a:fb:5d:2b:
         1d:7b:fc:66:a2:a7:60:a1:00:00:ff:b2:ba:43:e5:d0:10:47:
         96:9b:4d:18:bd:70:5a:71:2a:db:62:05:cc:d7:9c:2d:34:00:
         fc:90:1d:fd:c7:30:80:fd:d8:9f:65:3d:af:13:87:c2:c5:f5:
         d8:96:fb:96:f9:f3:30:9a:d7:cd:36:af:8c:62:e0:5e:3b:d9:
         31:46:94:fc:de:e1:8e:d8:cd:27:ff:ba:00:40:a8:b3:28:e1:
         09:d5:df:4f:b6:61:97:93:5a:75:fc:d9:17:90:5f:5a:cd:87:
         67:ca:f7:42:61:7a:e9:ce:6c:d2:f8:11:8a:58:1e:cd:ab:f7:
         72:6d:1d:04:c6:a0:9c:66:d9:10:5f:6f:87:f7:90:2c:a7:05:
         84:e5:11:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:23:00 2026 by rpki-client