Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/b898b21d-9c3f-3841-a02a-e48a7ba02c88.roa
File:                     b898b21d-9c3f-3841-a02a-e48a7ba02c88.roa (raw, json)
Hash identifier:          c7qPsqGI+0VgGT9vwKhJ235aHP5CTXzg9ojvih+oGE8=
Subject key identifier:   8F:B4:11:B2:53:61:AE:C8:6D:C3:9A:D6:52:AF:2F:20:1E:85:69:38
Certificate issuer:       /CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec
Certificate serial:       010D0C9F4328584D80FFF0DD079464A28F5BE870
Authority key identifier: E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/b898b21d-9c3f-3841-a02a-e48a7ba02c88.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     400238
IP address blocks:        216.87.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:80:ff:f0:dd:07:94:64:a2:8f:5b:e8:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=594bccd7-64d4-4284-8a5d-ca332c78b100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a1:75:4c:83:5b:1f:8d:ae:7b:84:d0:1b:af:
                    f8:a8:f6:e3:f2:01:6f:dd:ff:f8:31:8b:fb:8c:a5:
                    0e:82:a1:96:b3:6a:b6:eb:56:ee:4c:55:a2:f2:d2:
                    1e:42:84:ab:6e:2d:1c:35:0c:65:cf:90:31:42:e8:
                    b4:27:34:52:a2:33:6f:03:5f:27:8f:e4:a5:72:fe:
                    92:90:9d:62:91:ac:e6:4e:11:c8:70:19:8b:a1:91:
                    94:79:87:3b:5e:0d:6d:31:12:54:1e:00:1a:0e:cb:
                    03:05:86:9a:1a:e2:ca:45:63:55:ee:5c:09:86:d1:
                    df:4a:48:ac:a3:cd:c3:69:cf:50:20:49:93:92:8e:
                    d6:39:32:96:32:a7:91:57:a5:d0:bc:ae:53:60:01:
                    6b:07:7c:93:d7:df:01:89:b0:61:26:ce:35:89:ac:
                    07:0d:de:2d:30:5f:36:92:28:56:59:7c:2c:01:12:
                    93:40:41:7f:42:fc:a4:d0:41:02:6a:48:3c:e8:2b:
                    d9:b8:a6:1d:c5:e8:49:be:06:a1:6e:1f:3e:1a:a9:
                    2a:a9:c1:bb:3f:44:d1:ae:b5:79:72:44:fb:26:41:
                    20:d8:9e:d0:8d:74:50:82:91:3d:3d:fc:ff:58:83:
                    21:05:20:a5:a7:ea:bf:cc:b5:91:d3:a9:5a:c3:38:
                    0a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B4:11:B2:53:61:AE:C8:6D:C3:9A:D6:52:AF:2F:20:1E:85:69:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/b898b21d-9c3f-3841-a02a-e48a7ba02c88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl

            X509v3 Authority Key Identifier:
                keyid:E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:ac:67:1d:1e:40:a9:2b:3c:53:6d:b6:52:07:ea:68:e6:5b:
         87:c3:f6:1e:fc:4b:b7:53:b7:00:39:27:5e:bf:30:9d:8f:a1:
         b9:4e:45:39:b4:fb:5d:e9:3d:9f:7b:a0:47:58:be:43:91:92:
         2a:48:c5:50:09:26:ac:d2:18:06:4e:3d:b7:91:06:eb:e9:a6:
         a4:57:65:e3:d4:f4:cd:99:51:d8:d8:6e:3a:e5:91:d5:57:83:
         0b:d5:75:e5:eb:7e:8b:fa:c0:eb:10:72:7f:06:04:b6:b5:a0:
         e6:4f:8c:81:5a:e4:c6:10:94:dc:91:07:cc:2e:af:62:3c:f8:
         a1:9b:1b:a7:3e:5b:fa:67:5c:b2:09:b3:2e:14:12:6e:5a:e4:
         82:13:36:cf:84:0e:06:a2:c3:85:c9:7b:56:dc:3c:48:3f:7e:
         f7:5d:89:7d:ea:9c:fd:30:7e:c5:84:28:36:02:e1:cb:5d:b9:
         8e:51:3e:5d:a6:68:24:01:01:d6:62:d7:c1:11:14:81:19:fa:
         29:11:20:0f:42:15:ca:d6:cd:a0:8f:71:97:84:a8:12:3b:cc:
         02:05:0d:e5:f1:50:bb:68:d7:6b:ac:f5:6d:bc:35:92:3a:47:
         b6:0f:56:74:a2:2e:01:f7:d1:5a:a9:48:a2:81:52:9a:f7:91:
         30:ea:6d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:17:38 2026 by rpki-client