Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/ff017ed3-abf3-3b71-bf8c-ee501d481dbd.roa
File:                     ff017ed3-abf3-3b71-bf8c-ee501d481dbd.roa (raw, json)
Hash identifier:          GfZvb8P+Ktv0iv3ukBXSe39jSYZpqSs5YRFcG0TIyF4=
Subject key identifier:   88:AA:94:9F:4D:BB:36:61:26:CB:26:56:79:D1:F1:63:77:8A:EF:F7
Certificate issuer:       /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
Certificate serial:       010D0C9F4328584DDD2084BA5D3A13E664A17000
Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/ff017ed3-abf3-3b71-bf8c-ee501d481dbd.roa
Signing time:             Sun 17 May 2026 13:00:32 +0000
ROA not before:           Sun 17 May 2026 13:00:32 +0000
ROA not after:            Sat 15 Aug 2026 13:00:32 +0000
asID:                     11377
IP address blocks:        216.20.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:dd:20:84:ba:5d:3a:13:e6:64:a1:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
        Validity
            Not Before: May 17 13:00:32 2026 GMT
            Not After : Aug 15 13:00:32 2026 GMT
        Subject: CN=48538604-95cf-464b-96d5-a0fca4669f93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cb:69:d5:03:e7:31:97:db:b6:f3:7a:00:20:
                    d7:c4:96:a7:08:d3:c4:44:d5:c2:5e:9d:2a:a9:4c:
                    80:b2:0e:2d:0b:ea:cc:dd:f1:d6:51:a9:61:bc:3c:
                    db:92:81:6a:d7:d1:f7:e0:da:b8:59:3c:bb:d6:db:
                    e8:1a:db:d5:07:42:bb:35:bb:71:26:02:9f:aa:7b:
                    12:c6:44:77:f7:d9:3c:8f:ed:6a:1c:67:61:f5:5e:
                    b0:b0:75:d7:5e:f2:5f:2c:97:88:38:46:50:14:e7:
                    69:87:ad:b1:77:8a:d2:d7:23:19:34:f9:56:a2:0b:
                    de:06:b0:23:0a:8d:12:9d:29:d2:1a:76:6b:5d:f6:
                    d2:24:50:94:cb:ac:83:8a:90:39:2e:b2:21:e5:49:
                    42:ae:ce:59:66:ad:0b:bf:2e:21:d0:03:44:5d:92:
                    a6:a3:47:7e:30:1d:06:63:86:31:e6:da:f6:43:5e:
                    c8:3c:47:70:89:2a:ce:4d:4e:ac:ec:b3:2a:36:ae:
                    40:f2:da:82:1b:76:7f:12:8f:38:79:07:c5:20:cb:
                    d2:86:87:c1:67:59:dd:f5:b3:92:5e:fb:87:e3:a0:
                    ce:82:f9:5d:37:c5:ff:b6:01:c5:e5:e8:b2:53:ed:
                    ab:04:3f:8e:35:73:67:d9:ec:0b:70:0a:a6:cd:21:
                    32:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:AA:94:9F:4D:BB:36:61:26:CB:26:56:79:D1:F1:63:77:8A:EF:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/ff017ed3-abf3-3b71-bf8c-ee501d481dbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl

            X509v3 Authority Key Identifier:
                keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.20.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:e6:d8:9e:1d:23:76:0d:27:6f:cb:df:db:ce:45:71:df:10:
         4a:73:f8:fd:d1:5b:36:53:e8:fe:ed:90:ea:35:28:e0:b1:b5:
         11:36:d0:d2:c2:81:3f:f2:12:bb:59:2b:44:9e:2e:34:86:20:
         db:fe:e4:e1:a5:e1:eb:f5:21:76:db:0a:bd:3f:08:9f:ef:80:
         61:4c:3d:87:f7:61:28:69:be:5e:b1:21:96:6c:28:96:8a:20:
         32:45:61:a6:17:51:cd:41:12:89:66:22:ec:af:10:6d:70:d4:
         ae:e4:dd:06:94:06:e0:a3:53:d9:5c:bb:59:66:04:ae:ed:a3:
         57:f8:e0:99:4b:41:62:46:a7:58:e3:76:4f:07:e8:34:f0:d8:
         3a:d5:10:9d:93:8a:96:a4:2f:85:59:65:6e:81:ec:6d:75:0d:
         89:66:5f:19:b9:00:39:6f:ec:16:e9:67:6f:a4:a5:f2:e7:60:
         e7:49:9b:ff:8d:b9:04:35:b9:4d:58:fa:b3:12:47:dc:99:18:
         5c:dd:74:3d:1d:fe:73:e3:fc:67:1d:a2:a0:f8:0f:29:ad:d9:
         55:fa:06:e7:9f:99:a3:46:46:da:66:e1:7e:60:68:cb:a7:87:
         3a:6c:ff:8a:13:8e:47:61:2c:fc:b7:c0:99:6b:18:a2:3b:8c:
         cb:14:c6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:22:12 2026 by rpki-client