Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/ad65a7e7-f321-3c97-be83-13340c14ee3a.roa
File:                     ad65a7e7-f321-3c97-be83-13340c14ee3a.roa (raw, json)
Hash identifier:          YLmUaY6foPsLn+IPxXAhh+I71qzhlo4JbYJwI3KfOnw=
Subject key identifier:   E2:7C:9C:78:90:25:92:10:B8:89:A6:95:F1:BA:CA:58:C7:B1:A4:4A
Certificate issuer:       /CN=a3b6948d-3ee1-4153-9c40-1cd7465bea2b
Certificate serial:       010D0C9F4328584DF2108821DCFAAF042D324600
Authority key identifier: 90:8D:6E:3D:A8:3C:E5:E7:6B:D5:3D:68:92:0F:67:5B:A6:D6:3E:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/ad65a7e7-f321-3c97-be83-13340c14ee3a.roa
Signing time:             Mon 25 May 2026 01:00:24 +0000
ROA not before:           Mon 25 May 2026 01:00:24 +0000
ROA not after:            Sun 23 Aug 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        216.205.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f2:10:88:21:dc:fa:af:04:2d:32:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3b6948d-3ee1-4153-9c40-1cd7465bea2b
        Validity
            Not Before: May 25 01:00:24 2026 GMT
            Not After : Aug 23 01:00:24 2026 GMT
        Subject: CN=664c65c9-0735-4589-a404-59d67b631bdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a7:bf:4b:f9:3d:5c:ca:02:ca:c6:7c:b3:02:
                    9b:12:79:92:66:82:c8:f4:b9:0f:34:82:ee:d9:64:
                    b3:9a:f1:8e:26:f5:8c:79:9d:95:c9:c2:fc:22:fa:
                    bc:60:62:51:06:92:b6:ca:3b:2e:e0:f0:47:ce:60:
                    a5:1e:a5:e4:5e:ea:2c:53:db:bb:6c:f2:20:c0:1b:
                    17:4c:5f:ec:f2:78:59:3c:d6:5c:fb:8e:a0:1d:96:
                    0f:d6:b6:5f:2b:83:f2:2d:6b:98:3e:65:6b:8f:b1:
                    ea:56:40:74:00:78:c6:3b:6d:42:76:6d:a1:ed:4c:
                    e1:cf:b6:63:ea:9e:8f:71:e3:3e:46:ae:f2:17:5d:
                    d6:0d:d5:15:69:34:d8:8f:b5:f2:6c:94:a0:fa:21:
                    c1:93:6e:9a:27:27:8c:5e:1d:a1:f7:58:a8:a7:71:
                    99:85:3c:49:51:66:56:90:2f:62:88:2e:46:9b:c7:
                    c8:64:0c:ce:d3:55:3d:19:57:2b:9b:91:12:14:99:
                    a8:c7:5b:de:2b:94:76:3f:a9:e2:d5:9f:c5:86:c4:
                    0f:1d:78:8f:df:81:6b:89:e9:9b:a9:cf:b0:1c:01:
                    02:f2:94:d5:a2:58:dc:64:71:af:a2:44:b6:9b:01:
                    e8:c4:a2:f9:8d:cd:dc:f2:06:7c:21:07:81:3d:84:
                    ed:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:7C:9C:78:90:25:92:10:B8:89:A6:95:F1:BA:CA:58:C7:B1:A4:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/ad65a7e7-f321-3c97-be83-13340c14ee3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.crl

            X509v3 Authority Key Identifier:
                keyid:90:8D:6E:3D:A8:3C:E5:E7:6B:D5:3D:68:92:0F:67:5B:A6:D6:3E:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.205.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:61:71:7e:5f:f9:0c:8b:42:58:22:d8:f1:fa:21:96:84:94:
         b2:4e:e0:15:aa:40:ad:98:f8:08:5d:15:c6:72:1c:1a:84:42:
         b8:0a:0a:64:1a:10:b2:89:7b:5f:a7:3b:5e:15:a4:f9:3b:9d:
         a9:ef:f7:b8:41:8f:6d:4b:26:53:ea:fb:ec:3f:c8:c5:ea:5a:
         95:df:66:9f:ad:81:04:8c:f7:6d:3c:71:2f:4b:77:6d:73:97:
         1d:2a:bb:a5:19:28:27:64:a4:01:af:f4:bf:54:e5:8d:16:f8:
         ee:58:14:1b:7a:90:c3:a4:33:98:f1:9c:e2:d8:8a:31:66:4b:
         7b:6b:da:86:11:6c:4f:67:eb:b5:71:d0:f5:1e:3d:31:33:6b:
         9d:9a:f7:9e:de:e4:82:3d:00:d0:a5:a4:7b:44:80:87:8d:d3:
         1e:d6:c1:bd:23:e3:49:59:5d:de:71:fe:d0:d3:0a:66:c1:e4:
         ac:0e:f5:48:2c:48:13:b6:29:33:02:70:d1:cb:cf:7b:f6:07:
         e4:8f:ac:05:0e:70:43:95:7c:86:5a:3c:d3:6d:b1:53:83:2e:
         f2:cf:c5:f8:4c:aa:87:13:01:00:93:f8:87:89:ad:7f:9f:2d:
         05:30:a9:6d:c6:5e:82:5a:96:57:c4:39:ba:16:a6:ff:2c:f3:
         08:61:92:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:24:06 2026 by rpki-client