Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/aec8f494-b634-3c40-83c2-65596a4f4d78.roa
File:                     aec8f494-b634-3c40-83c2-65596a4f4d78.roa (raw, json)
Hash identifier:          MAcyAMVUeR0i6whwWYIGy39hUA85+4NChDOvpISQPxo=
Subject key identifier:   AC:AF:22:D0:D5:13:C2:E4:64:0D:1F:47:B6:D6:3E:05:75:0F:3F:18
Certificate issuer:       /CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c
Certificate serial:       010D0C9F4328584D582B657B3470793764360C6C
Authority key identifier: 1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/aec8f494-b634-3c40-83c2-65596a4f4d78.roa
Signing time:             Mon 30 Mar 2026 22:00:09 +0000
ROA not before:           Mon 30 Mar 2026 22:00:09 +0000
ROA not after:            Sun 28 Jun 2026 22:00:09 +0000
asID:                     202758
IP address blocks:        216.109.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:58:2b:65:7b:34:70:79:37:64:36:0c:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c
        Validity
            Not Before: Mar 30 22:00:09 2026 GMT
            Not After : Jun 28 22:00:09 2026 GMT
        Subject: CN=ba6c2f98-3b02-43d4-98a8-29608fa8daee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7b:b5:c9:93:d6:bc:18:4a:60:72:37:f2:2b:
                    bd:1a:8c:e7:26:80:4f:f5:b1:59:b0:60:01:da:76:
                    dc:b4:09:ed:73:1f:72:29:ea:98:21:54:01:04:a2:
                    2d:23:06:a6:23:6d:0f:31:65:f4:1b:b3:c0:62:d3:
                    1c:a0:0e:16:91:18:6a:7b:30:ed:4b:a8:6d:04:bb:
                    f4:1e:59:c7:8b:e0:66:1e:11:03:28:a6:49:98:a7:
                    43:ea:16:b6:3c:9b:7b:ae:8a:89:f7:aa:25:c4:e8:
                    fb:93:40:95:91:74:74:7b:55:ac:60:eb:88:36:b1:
                    cd:39:7d:47:16:98:b4:bb:ab:7b:e1:55:d3:ff:c7:
                    6a:28:15:d9:b0:22:52:c7:5e:86:9e:3b:a9:b3:a0:
                    9b:38:87:7f:c6:c9:53:d6:a7:96:82:cb:c6:5f:d9:
                    69:35:81:f0:47:57:cf:f8:cd:df:cd:0a:6c:43:24:
                    c2:79:d7:57:f3:ee:2b:c9:64:ba:a9:13:cf:bb:49:
                    6f:97:79:54:a5:c4:05:35:9e:c9:0a:91:7a:b8:29:
                    7f:c1:99:9c:41:f3:68:f0:f3:5f:8e:8f:a8:e2:12:
                    ce:fb:52:5e:40:a6:1f:27:2a:81:f0:f3:ef:50:4f:
                    e1:88:de:0f:dc:e3:dc:fb:be:56:0d:eb:13:5b:55:
                    b5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:AF:22:D0:D5:13:C2:E4:64:0D:1F:47:B6:D6:3E:05:75:0F:3F:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/aec8f494-b634-3c40-83c2-65596a4f4d78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl

            X509v3 Authority Key Identifier:
                keyid:1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.109.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e3:c9:65:a9:b5:c6:6f:4b:d7:45:f1:f9:3a:bb:60:92:44:82:
         bf:b6:14:9a:1f:7f:97:cb:80:b2:c7:7a:53:74:fd:f3:08:05:
         f2:db:b3:b7:62:0d:65:1e:aa:2a:bc:b4:65:e7:12:e4:b1:85:
         fc:2e:2d:de:31:08:42:ff:c6:b0:9e:0d:5b:fc:a7:7e:14:4b:
         88:8c:be:61:a8:1f:74:54:70:bb:8b:b7:90:53:1b:1e:a3:47:
         83:6b:8f:63:27:77:43:56:93:c5:ec:b6:47:9f:54:30:da:c7:
         9b:0b:7d:42:cb:1c:97:82:af:04:71:99:94:7f:a9:f2:3f:ba:
         c6:ec:1f:1a:74:36:1e:2f:58:df:17:9d:b2:84:0b:9f:13:43:
         57:0a:72:46:c5:15:a8:9b:30:c0:97:97:96:07:9b:93:9a:cb:
         21:df:7f:f5:69:1f:f6:9a:b4:b5:0f:2d:cd:3c:3f:9e:62:d0:
         4e:4f:5c:e7:ce:d3:ee:c3:be:92:c3:0f:b3:82:70:ab:7c:89:
         f1:a8:7a:0a:54:8d:ff:78:9d:d9:3b:9f:f8:73:55:77:a7:34:
         c3:0b:41:ab:3d:67:cb:e1:23:03:01:f7:f0:15:63:91:2e:41:
         b6:66:3d:1d:34:58:ea:f4:6e:bb:2d:c2:68:9c:5f:74:fe:52:
         62:e2:48:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:51:58 2026 by rpki-client