Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/848eca05-b02f-4712-a12d-b97fa60b95ca/9e7b6634-7aae-3529-bc26-aaf5b84b000a.roa
File:                     9e7b6634-7aae-3529-bc26-aaf5b84b000a.roa (raw, json)
Hash identifier:          1sZdB39B8Mq3RupvN4e6aXU2cMWOTmnfnbzbXXlnWfk=
Subject key identifier:   9E:36:D9:50:38:96:CF:24:1E:87:FB:1F:02:C6:97:D2:7C:6F:3B:24
Certificate issuer:       /CN=848eca05-b02f-4712-a12d-b97fa60b95ca
Certificate serial:       010D0C9F4328584D575CC927A960BA781EB56080
Authority key identifier: 62:04:4D:09:45:B7:4B:C8:B8:7D:B7:AE:1B:2B:58:D2:3A:53:4C:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/848eca05-b02f-4712-a12d-b97fa60b95ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/848eca05-b02f-4712-a12d-b97fa60b95ca/9e7b6634-7aae-3529-bc26-aaf5b84b000a.roa
Signing time:             Mon 30 Mar 2026 15:03:51 +0000
ROA not before:           Mon 30 Mar 2026 15:03:51 +0000
ROA not after:            Sun 28 Jun 2026 15:03:51 +0000
asID:                     401938
IP address blocks:        216.176.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/848eca05-b02f-4712-a12d-b97fa60b95ca/848eca05-b02f-4712-a12d-b97fa60b95ca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/848eca05-b02f-4712-a12d-b97fa60b95ca/848eca05-b02f-4712-a12d-b97fa60b95ca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/848eca05-b02f-4712-a12d-b97fa60b95ca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:5c:c9:27:a9:60:ba:78:1e:b5:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=848eca05-b02f-4712-a12d-b97fa60b95ca
        Validity
            Not Before: Mar 30 15:03:51 2026 GMT
            Not After : Jun 28 15:03:51 2026 GMT
        Subject: CN=770be556-b3ca-49d2-b3b8-de19df45c1ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a0:01:38:35:e8:ae:db:5e:2e:53:e0:32:cf:
                    87:78:2e:21:50:35:b2:e7:32:37:20:d7:fa:eb:d8:
                    ff:63:1c:7b:36:6a:6e:11:19:3d:8a:9f:3a:23:16:
                    02:a5:6a:bf:ad:74:6c:69:df:a4:3c:80:ce:c8:75:
                    34:2b:be:ea:59:28:b0:b0:76:a9:65:f7:8c:f8:94:
                    80:64:e2:c4:c2:94:27:21:35:81:49:c2:e1:7b:8c:
                    b0:a1:c1:7a:fc:d2:b1:93:e7:a6:51:2d:e2:cc:56:
                    34:17:42:49:2e:54:c6:bb:da:21:4f:db:31:05:ec:
                    0e:09:8b:88:73:18:21:ae:2a:dd:45:dc:24:4a:27:
                    a1:b3:ea:5d:a3:41:65:b0:f2:90:3e:8d:4a:91:66:
                    0e:c5:48:3f:dc:45:96:85:7c:2c:b8:b1:43:59:4e:
                    1c:6d:93:a3:b2:65:78:f1:dc:72:d5:d9:59:d0:56:
                    62:e9:36:4d:05:38:b9:cb:4f:e4:a0:83:87:f2:76:
                    59:78:8f:5a:44:3f:d6:ca:41:71:8d:e7:44:89:99:
                    28:6b:62:b5:b1:95:79:9a:a8:2a:fa:88:00:26:8f:
                    63:c5:9e:53:60:b9:ef:1e:7f:c2:ec:8d:9d:30:6d:
                    b6:f4:9e:dd:7c:90:31:c4:b7:23:82:c3:60:ed:c6:
                    5c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:36:D9:50:38:96:CF:24:1E:87:FB:1F:02:C6:97:D2:7C:6F:3B:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/848eca05-b02f-4712-a12d-b97fa60b95ca/9e7b6634-7aae-3529-bc26-aaf5b84b000a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/848eca05-b02f-4712-a12d-b97fa60b95ca/848eca05-b02f-4712-a12d-b97fa60b95ca.crl

            X509v3 Authority Key Identifier:
                keyid:62:04:4D:09:45:B7:4B:C8:B8:7D:B7:AE:1B:2B:58:D2:3A:53:4C:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/848eca05-b02f-4712-a12d-b97fa60b95ca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.176.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:8f:da:76:e8:7d:06:80:05:9a:83:ee:11:f0:0c:86:ad:ee:
         9e:ec:b4:46:ed:66:c0:e3:ce:f6:cb:56:92:53:45:88:1f:19:
         ad:98:70:12:37:76:51:50:ea:33:2e:5d:a2:1c:61:be:07:b3:
         e7:70:1a:25:1b:54:c3:61:33:bc:b3:f0:ce:d0:30:aa:bc:47:
         cf:95:23:35:79:2f:ae:28:0e:c4:da:e7:9d:07:ce:73:40:4a:
         07:d0:f3:c5:45:28:7a:1c:01:40:04:de:f8:38:fd:69:a4:1a:
         45:90:25:62:a8:2d:a4:e0:90:0b:d6:24:12:95:04:02:5c:9c:
         d6:73:a1:be:b8:b0:5e:2c:f9:f2:63:84:0c:75:31:0e:79:6b:
         b7:de:3d:71:96:81:f3:15:2d:85:79:ec:5f:8b:9a:7a:ea:1e:
         a3:1d:18:9b:e4:62:6d:e7:de:8e:58:00:05:60:8c:bc:a6:74:
         9a:7b:6f:9d:72:c6:a8:29:99:57:bf:74:1f:9b:9c:cd:40:c7:
         70:12:47:06:66:89:83:b0:68:be:5d:96:c2:50:4d:4f:0c:bb:
         29:a3:ae:e3:0e:df:8d:c1:9a:30:dc:f3:67:6c:95:0e:96:c9:
         09:d1:c0:e6:78:27:fc:86:6b:6a:dd:1a:2f:ba:a6:8c:d0:53:
         2f:b6:15:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:42:40 2026 by rpki-client