Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c4c9fbf0-7553-3dd5-9d9c-ff2f7609625a.roa
File:                     c4c9fbf0-7553-3dd5-9d9c-ff2f7609625a.roa (raw, json)
Hash identifier:          vJqTMeceotxz7EohsnstiOjKG4YoSNSdI2+XscroFls=
Subject key identifier:   94:1C:55:CD:0B:CD:4F:B9:71:E8:FA:10:D6:31:2E:0F:48:6E:E1:15
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D5CB4F6CDA6F001B27363FD80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c4c9fbf0-7553-3dd5-9d9c-ff2f7609625a.roa
Signing time:             Wed 01 Apr 2026 13:00:30 +0000
ROA not before:           Wed 01 Apr 2026 13:00:30 +0000
ROA not after:            Tue 30 Jun 2026 13:00:30 +0000
asID:                     271023
IP address blocks:        216.28.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5c:b4:f6:cd:a6:f0:01:b2:73:63:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Apr  1 13:00:30 2026 GMT
            Not After : Jun 30 13:00:30 2026 GMT
        Subject: CN=b1f14792-5153-4c65-b690-631bd33fbdab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:95:6f:c0:3c:cc:38:bb:d9:b1:8d:94:ff:11:
                    9a:5e:8d:55:03:48:db:73:ab:ee:6e:5d:2d:64:a3:
                    e7:98:20:ec:ae:4c:f7:e5:ff:cf:c1:00:04:a1:db:
                    54:24:bc:67:75:85:be:c5:b6:b3:eb:c6:a0:e0:76:
                    4a:86:aa:7e:1e:c5:ba:de:10:93:5f:ee:59:bc:2e:
                    20:67:bb:5c:df:8e:1f:6f:1c:39:d2:a3:5d:f0:46:
                    65:a4:7e:c0:a4:70:12:41:23:c1:c5:c6:ba:4f:50:
                    16:c8:2c:b5:72:66:a2:34:96:7f:13:f5:fd:f4:34:
                    1c:b4:68:81:8a:a2:8e:6e:a7:14:be:3f:32:a8:ac:
                    b3:c4:e4:2a:77:8e:71:27:2c:9e:a6:4f:2f:2e:22:
                    7b:21:8d:ee:36:5a:b7:30:8d:87:77:4d:69:f4:93:
                    b8:eb:b3:ff:00:c7:b2:7b:aa:48:0c:5b:a0:6b:e2:
                    b9:00:b6:ae:f2:1f:1a:bc:60:24:6d:a4:03:77:e1:
                    a8:2c:8c:be:34:d5:05:8f:aa:0e:ff:69:2e:8e:55:
                    74:d7:07:17:cf:a6:1e:b7:bc:65:c9:a9:9d:0f:52:
                    ff:ee:5c:1c:e3:8b:86:d1:93:63:4f:82:8e:94:80:
                    5f:ee:f1:08:2b:01:32:c3:a1:68:a8:bb:a8:42:3a:
                    3c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:1C:55:CD:0B:CD:4F:B9:71:E8:FA:10:D6:31:2E:0F:48:6E:E1:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c4c9fbf0-7553-3dd5-9d9c-ff2f7609625a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.28.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:98:94:73:2a:76:3f:bb:ef:fd:b3:53:10:65:90:da:89:c7:
         3d:17:06:da:65:20:c7:91:a4:7a:7c:70:fa:67:19:8e:46:1c:
         1c:e4:37:a9:3e:00:bc:45:d9:99:42:e8:f6:b0:c1:a7:9b:c5:
         8e:b1:e8:7d:7f:8f:2b:19:f0:54:cc:3d:4d:c8:43:e4:40:9e:
         0e:7b:52:8f:c3:06:54:2d:34:78:43:07:08:a4:b4:03:bb:2d:
         0e:f8:36:46:6f:9b:a6:35:9b:5e:dc:e7:53:ea:4c:83:4a:04:
         18:06:71:02:a2:24:49:57:0e:5f:3d:c0:f5:54:df:6a:9a:39:
         f1:04:bd:33:15:6a:be:c5:53:8f:f0:3c:37:ec:a4:68:dc:fb:
         74:c1:eb:a7:8a:61:b2:4e:da:31:94:31:1f:73:2d:55:f0:fa:
         4c:cd:70:50:5a:4b:8e:c3:16:df:ac:67:bb:b6:a9:b6:45:48:
         94:4f:e6:6f:be:ad:c4:f4:c0:31:75:e9:58:16:b6:e0:87:4b:
         32:89:25:43:c6:08:d8:d9:f7:19:f8:aa:3d:3b:cc:b6:71:4e:
         35:42:53:18:fc:1b:a6:c3:14:c2:da:5b:4e:e6:24:a7:72:6d:
         18:6b:f9:6a:76:e3:ac:9d:11:d2:eb:6c:f1:e6:e2:c1:b9:8d:
         72:78:f8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:25:51 2026 by rpki-client