Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/38f33cf6-8a01-3173-bebd-9c47087bed96.roa
File:                     38f33cf6-8a01-3173-bebd-9c47087bed96.roa (raw, json)
Hash identifier:          avFesnrO64jgWh43K9DiCJbbln/Q1k24FM645gPuvG0=
Subject key identifier:   D9:4D:6D:09:3E:9A:1F:82:4F:18:3F:F0:62:D1:98:9C:7D:F1:9B:33
Certificate issuer:       /CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49
Certificate serial:       010D0C9F4328584CA061A6705C1B495D0E6CA200
Authority key identifier: 5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/38f33cf6-8a01-3173-bebd-9c47087bed96.roa
Signing time:             Sat 24 Jan 2026 02:00:31 +0000
ROA not before:           Sat 24 Jan 2026 02:00:31 +0000
ROA not after:            Fri 24 Apr 2026 01:00:31 +0000
asID:                     30698
IP address blocks:        216.213.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a0:61:a6:70:5c:1b:49:5d:0e:6c:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49
        Validity
            Not Before: Jan 24 02:00:31 2026 GMT
            Not After : Apr 24 01:00:31 2026 GMT
        Subject: CN=1a30effd-0d45-417b-8203-c6cbb8ba72d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ee:f1:92:8a:bb:cf:51:13:17:d7:1a:47:80:
                    78:ac:7e:41:1b:ef:3c:de:d1:21:0a:70:85:c7:92:
                    ac:d0:83:d9:8c:da:b8:92:6f:e1:4f:b1:c1:b8:ec:
                    5f:a4:09:45:cb:b5:6a:93:67:5e:05:27:12:7f:27:
                    23:1d:cb:c9:12:15:69:64:85:c7:d9:56:88:ab:50:
                    37:7c:29:95:2a:d2:f1:22:c7:f5:1c:6d:a0:3d:12:
                    13:13:45:8e:e2:99:15:2f:a0:e6:ce:86:d8:8f:02:
                    f8:89:1c:28:82:75:df:9d:86:96:d4:a1:30:16:b2:
                    00:ed:34:f6:1c:4f:33:4c:e1:a1:58:57:f2:bf:38:
                    c7:6a:79:3f:0c:f6:a0:74:95:a6:e8:e8:67:33:eb:
                    c9:70:23:f9:f9:ee:4b:3c:73:6d:81:a6:9d:fd:32:
                    9e:84:1b:e5:13:7b:14:b9:db:5a:b8:d3:e9:b2:69:
                    16:ca:bd:9a:d0:3e:ea:3a:8c:87:25:00:e2:32:d5:
                    ac:99:50:58:be:31:85:4a:a6:33:cb:b4:ee:14:1a:
                    92:ae:2e:c8:6c:82:04:71:52:64:b0:77:41:c3:9e:
                    e5:1e:50:98:9d:36:73:67:d8:d3:d5:3d:c9:19:10:
                    fd:09:07:1b:b4:f6:68:f8:51:93:43:5f:34:18:d6:
                    22:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:4D:6D:09:3E:9A:1F:82:4F:18:3F:F0:62:D1:98:9C:7D:F1:9B:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/38f33cf6-8a01-3173-bebd-9c47087bed96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl

            X509v3 Authority Key Identifier:
                keyid:5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.213.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:17:0a:f8:40:6e:74:3d:fd:07:ab:f2:d6:cf:18:0a:3e:5e:
         f0:f8:8e:d3:9d:74:0b:53:73:d8:00:bc:d1:56:8a:92:9f:f3:
         7d:24:c0:fa:e2:7f:61:51:3b:d5:11:41:df:6a:ac:e6:b4:c9:
         f1:b7:49:1a:61:11:b1:47:ca:b6:0f:47:33:4a:81:04:3b:84:
         aa:be:02:d3:88:6e:57:e6:83:0f:8c:04:39:d2:ec:1a:c0:1b:
         87:99:04:09:ee:71:93:59:5c:be:62:54:dd:75:13:25:40:0c:
         a3:75:3b:e7:c2:84:0f:16:1b:8a:a6:d6:73:ce:dd:c7:7d:ee:
         ab:fb:fc:ea:54:da:49:11:25:95:9c:49:69:d1:21:48:03:e4:
         9d:53:a0:cd:af:76:a1:65:85:2b:58:2e:8f:cc:04:4d:c4:b0:
         75:28:72:62:42:44:b3:bb:16:bf:21:01:15:40:cc:6a:68:b8:
         04:df:f7:3f:18:7e:f0:5f:f8:ba:d6:86:60:9e:46:2a:b4:fd:
         d4:02:f0:0d:f1:bc:2a:cc:76:72:b2:46:d6:69:e5:a9:fe:32:
         da:6f:8c:79:9f:73:f7:39:8f:bd:6a:f3:ba:e7:04:3a:f3:ea:
         28:4f:95:02:53:ce:25:14:2a:d0:7c:99:4a:bb:67:3b:6c:37:
         9d:e3:30:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:27:50 2026 by rpki-client