Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/d026ed25-3a17-34fc-a052-b622eaef64cf.roa
File:                     d026ed25-3a17-34fc-a052-b622eaef64cf.roa (raw, json)
Hash identifier:          21bCPIKV4/mJ3qCBhuN/ATx9/JIjVnptCDj3NUOIeGs=
Subject key identifier:   FD:59:7B:28:09:65:49:DE:E3:CC:17:8A:EB:0E:46:2A:73:51:27:21
Certificate issuer:       /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial:       010D0C9F4328584D86953C49CA0F139B960AC9E0
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/d026ed25-3a17-34fc-a052-b622eaef64cf.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     215607
IP address blocks:        216.83.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:3c:49:ca:0f:13:9b:96:0a:c9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=6904bc37-90b9-4e55-bb79-cd0cf7da2e1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a2:7b:f5:c1:b9:76:10:52:e2:6d:61:b3:6f:
                    63:f1:11:3b:48:a7:15:4f:d0:df:6d:a8:a0:db:c6:
                    9c:d9:5b:27:a3:07:ab:49:4f:67:16:c1:34:de:77:
                    52:a8:de:27:54:45:03:79:3d:c0:f7:da:04:6a:f6:
                    53:77:33:91:87:bf:c4:6d:fe:0e:48:be:43:35:51:
                    c8:f0:da:ea:5e:96:a8:78:fa:0e:48:2d:a5:7a:b8:
                    fb:1a:7e:2e:38:1f:e1:2c:df:df:11:53:e1:13:75:
                    64:74:3b:75:b3:b2:b1:a9:0f:b7:ef:fa:93:36:ff:
                    1f:35:f0:f4:8e:28:e5:17:50:1c:04:62:f8:75:0e:
                    3e:2f:8e:d7:7d:b5:a7:6b:80:b8:c5:39:0e:b3:fc:
                    5c:0c:a1:20:5b:f8:30:10:a8:be:32:09:85:01:4c:
                    57:9e:0e:c8:c3:45:66:83:06:3f:6d:c7:51:d7:d9:
                    d1:f8:01:48:1e:66:85:52:23:91:72:1c:09:f6:c0:
                    c6:c5:ad:70:ae:a4:69:c0:11:06:ee:3a:fb:de:ea:
                    e6:7b:fa:80:5f:63:e6:01:39:88:80:57:3b:d7:85:
                    b0:86:6b:50:5a:a2:42:8b:b4:f6:c7:03:59:00:66:
                    72:61:a4:bc:3d:d0:db:66:e0:28:39:b0:62:b2:d8:
                    5b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:59:7B:28:09:65:49:DE:E3:CC:17:8A:EB:0E:46:2A:73:51:27:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/d026ed25-3a17-34fc-a052-b622eaef64cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl

            X509v3 Authority Key Identifier:
                keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.83.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:2c:21:30:7e:1b:af:89:37:1b:58:d9:1d:21:67:59:c0:7a:
         45:29:0b:92:c8:9e:03:f7:cf:58:2c:93:fe:be:3d:62:a6:90:
         76:a0:6f:bd:5d:8b:41:ec:39:82:b5:1d:74:ac:00:54:bb:50:
         0c:4f:90:55:ed:df:89:45:cb:22:ce:7f:08:91:a4:b7:9c:f9:
         d3:46:97:eb:8e:8e:90:f1:c0:87:35:07:8c:79:b6:5a:7f:c7:
         7a:04:17:f7:69:a4:f7:72:72:bf:a0:3f:ff:93:22:c9:8e:86:
         f0:4a:96:da:34:0d:27:8b:21:fa:e1:5e:98:aa:ba:87:2c:6a:
         6a:36:a5:83:5f:5b:c1:d5:62:35:11:eb:05:87:b9:aa:2f:a8:
         48:c5:e0:94:42:3d:2b:4f:6e:b6:63:fc:f5:0e:db:3f:61:27:
         a3:4a:7b:ea:b2:fb:01:84:98:13:37:f4:fe:67:d0:23:37:d6:
         e1:0b:7c:40:68:64:39:71:2f:6f:00:69:ae:d7:63:95:47:26:
         ca:f8:9b:77:f7:7c:e4:94:b5:22:85:89:78:be:fd:20:a7:d6:
         0f:d1:9c:9b:f1:dd:05:a8:c8:1b:c8:ee:c1:22:ff:be:d5:89:
         7c:de:55:f0:97:81:b5:10:21:64:4a:4f:d3:fa:5f:f6:62:28:
         70:9d:9c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:25:14 2026 by rpki-client