Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/654420ad-2cd4-344f-8fc5-b9688fcc1160.roa
File:                     654420ad-2cd4-344f-8fc5-b9688fcc1160.roa (raw, json)
Hash identifier:          YM5MKvlv6F0Riu+Db2scJb1W6XuIJ5BsUllPxUZDKKo=
Subject key identifier:   22:D8:3C:A5:43:16:F1:D6:AD:84:67:04:3E:7C:BD:EA:B2:1D:45:F2
Certificate issuer:       /CN=c3fbdc8c-2f4c-4dea-b420-52e582992086
Certificate serial:       010D0C9F4328584D86954F2765E945A93DEFB680
Authority key identifier: 88:EC:1B:EE:A2:0C:53:B3:99:38:A4:26:8C:5E:B1:EE:56:2C:E4:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/654420ad-2cd4-344f-8fc5-b9688fcc1160.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     174
IP address blocks:        216.98.249.0/24 maxlen: 24
                          216.98.250.0/24 maxlen: 24
                          216.98.251.0/24 maxlen: 24
                          216.98.252.0/24 maxlen: 24
                          216.98.253.0/24 maxlen: 24
                          216.98.254.0/24 maxlen: 24
                          216.98.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/c3fbdc8c-2f4c-4dea-b420-52e582992086.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/c3fbdc8c-2f4c-4dea-b420-52e582992086.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:4f:27:65:e9:45:a9:3d:ef:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3fbdc8c-2f4c-4dea-b420-52e582992086
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=d469b5b9-a002-4da3-9d75-1436298f0371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:58:b7:0e:07:0f:c0:32:b8:73:73:7d:60:68:
                    ae:c9:63:94:1c:c7:82:62:fe:de:2e:5b:5e:e3:37:
                    0a:27:41:1e:27:dd:69:66:d8:eb:e9:f3:da:60:58:
                    02:76:7a:97:d1:e2:43:3a:01:79:49:42:60:63:d1:
                    5c:d4:5e:22:94:a4:af:bb:9e:d0:dd:3e:46:11:8f:
                    35:21:fa:af:92:86:ee:2c:de:5c:96:d5:c3:0e:7d:
                    85:e1:1b:c7:f4:64:d5:a7:61:0c:e6:9b:0a:c9:7a:
                    be:99:47:a2:c3:75:15:93:c2:92:c5:71:77:5b:65:
                    90:bb:5d:91:91:44:11:cf:d9:0e:69:10:43:da:8f:
                    a6:43:69:5c:dc:e1:16:1f:83:16:f3:27:8a:ff:00:
                    61:3f:9a:48:b5:d4:3d:6b:21:4f:c4:e9:b5:46:c1:
                    04:ae:e7:3c:b5:9c:96:bb:03:d7:be:30:09:d5:7a:
                    f2:65:10:3e:81:d6:80:9a:99:22:58:b3:fa:39:df:
                    84:59:30:7f:8f:4b:2f:15:f8:33:e8:b3:26:ce:c9:
                    54:0a:03:52:8b:4f:8b:f8:24:10:7c:91:39:83:55:
                    f9:a4:63:c3:95:2d:96:52:ea:9a:aa:ca:da:d1:a2:
                    45:54:09:27:fd:07:3d:62:4e:00:da:d7:f1:d5:a6:
                    50:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D8:3C:A5:43:16:F1:D6:AD:84:67:04:3E:7C:BD:EA:B2:1D:45:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/654420ad-2cd4-344f-8fc5-b9688fcc1160.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/c3fbdc8c-2f4c-4dea-b420-52e582992086.crl

            X509v3 Authority Key Identifier:
                keyid:88:EC:1B:EE:A2:0C:53:B3:99:38:A4:26:8C:5E:B1:EE:56:2C:E4:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.98.249.0-216.98.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:5a:20:6c:ea:09:1d:03:51:4e:7c:d5:e9:a4:a9:6a:da:a0:
         dd:90:b2:cf:69:dd:ff:12:1f:9e:e7:8e:64:b7:1a:ac:f2:29:
         b9:7b:1a:32:2e:51:6e:fe:ed:e6:3a:34:12:28:f7:73:c1:05:
         29:5e:ed:3f:ac:d5:97:50:28:46:4c:27:2d:d9:bd:ae:db:f1:
         a7:c8:72:70:46:89:05:8e:ac:00:89:5e:57:b6:45:4c:37:65:
         3e:e4:0c:ac:7c:32:47:f4:8c:53:01:6b:cd:d9:d5:be:49:54:
         f5:6d:23:56:64:33:3f:4c:04:45:99:66:b5:b1:68:2a:5f:87:
         de:2b:dd:e5:22:1a:4a:2e:b9:05:a3:a3:03:d3:10:7c:a2:8b:
         f6:74:42:0b:67:99:45:29:84:fa:a8:54:6c:56:58:f9:28:ea:
         5d:5e:56:a5:ea:8f:17:be:37:fb:18:6d:c3:fa:63:99:b1:bf:
         36:17:02:ca:e3:ef:da:e7:fb:c9:b3:82:7f:b2:f4:a2:b3:b5:
         fe:91:fe:14:f8:a1:e0:27:6e:a6:a0:a9:2c:d7:31:7b:64:4b:
         ef:b6:79:73:85:a9:ac:df:7e:9e:63:a3:11:de:08:e0:98:89:
         5b:d9:b6:8b:81:e3:e2:2c:fb:1b:12:47:85:6e:2d:71:37:79:
         d1:d7:43:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:00:42 2026 by rpki-client