Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b0667fe0-8e37-3085-a8ef-8e2013f3b7c4.roa
File:                     b0667fe0-8e37-3085-a8ef-8e2013f3b7c4.roa (raw, json)
Hash identifier:          jo0rEfwrG+CcHLCm7V90sqOrwzk5S0B9Ltpo9Q0zHrI=
Subject key identifier:   70:59:18:3F:6C:AF:D6:8C:94:B8:B5:E9:21:8D:80:68:A9:3D:11:09
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D6C0FCEFDCB94C5035E6EB200
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b0667fe0-8e37-3085-a8ef-8e2013f3b7c4.roa
Signing time:             Tue 07 Apr 2026 01:00:23 +0000
ROA not before:           Tue 07 Apr 2026 01:00:23 +0000
ROA not after:            Mon 06 Jul 2026 01:00:23 +0000
asID:                     24319
IP address blocks:        96.16.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6c:0f:ce:fd:cb:94:c5:03:5e:6e:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  7 01:00:23 2026 GMT
            Not After : Jul  6 01:00:23 2026 GMT
        Subject: CN=1d345d85-6cc6-403d-aacc-f1f5263c3edd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9c:89:94:79:6c:f5:6d:2c:8c:75:38:90:bc:
                    3d:48:09:73:2a:4e:e5:8d:57:b4:4f:9e:7c:fb:ca:
                    7d:4e:ba:09:8f:a2:87:4d:aa:fb:04:b9:bc:71:84:
                    56:81:fb:e3:4f:6c:ba:53:5f:14:19:40:14:9b:99:
                    df:5e:9e:57:3f:b4:f7:8f:22:30:a3:b0:3d:cf:28:
                    60:ec:43:a9:d6:55:97:1b:45:c0:df:83:b5:00:ef:
                    d0:bd:2c:d9:d4:67:44:63:4c:cb:e3:61:9d:09:aa:
                    a2:9b:79:d1:d0:b2:07:21:00:fd:64:f5:70:c6:7d:
                    03:1a:dc:2e:28:ab:ae:51:19:d1:a1:29:c2:f1:cb:
                    22:14:21:db:e9:7e:fa:13:6c:73:00:5a:60:64:04:
                    85:68:5a:5f:74:5b:be:98:5f:f7:67:55:f5:03:27:
                    95:f2:df:09:b8:fa:bd:c9:6a:0f:6c:a8:4e:63:76:
                    c4:28:70:ee:9a:f5:de:72:f9:b0:b4:bb:ff:ae:b1:
                    f3:7d:7a:55:3d:0d:b4:90:c6:1a:2d:6d:67:59:22:
                    b2:9c:c4:b8:4e:36:8a:14:3f:88:86:50:7e:a7:35:
                    88:92:0e:93:c0:bf:98:28:fd:06:fa:b8:5d:dd:7c:
                    8b:0a:a4:5b:e8:9d:53:13:0c:96:bb:76:4b:ac:44:
                    f6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:59:18:3F:6C:AF:D6:8C:94:B8:B5:E9:21:8D:80:68:A9:3D:11:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b0667fe0-8e37-3085-a8ef-8e2013f3b7c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.16.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:26:36:b6:06:74:53:9c:2e:9c:b3:d1:89:e9:ac:06:23:4c:
         db:5e:4e:e8:b5:e8:49:d8:ec:82:bf:8e:0c:9d:ef:ab:44:81:
         62:b4:dd:42:bc:db:96:ea:23:c0:44:20:84:36:f9:21:b3:f9:
         27:a4:dc:97:07:99:3e:17:d5:0d:c5:86:4a:43:e6:ea:5e:64:
         46:ea:a0:05:1f:79:a1:d2:b7:03:ce:8a:51:28:d8:3c:ab:cf:
         97:b7:f2:9f:70:2d:20:ae:46:72:4f:0a:6a:53:6d:4b:3f:6b:
         ea:b3:b5:f6:ee:c7:25:bc:9f:6f:5b:8e:32:72:d2:ca:03:73:
         56:b9:3c:17:5f:68:b4:7e:ad:c5:e0:e1:9a:20:8a:52:fa:fa:
         62:d3:f9:88:05:cd:a3:92:a9:39:ac:f4:bd:f0:bc:8e:2d:c1:
         0b:29:6b:16:a0:9d:3f:37:7d:eb:a8:ba:3a:cf:e7:d1:8e:91:
         6e:2e:4c:1d:2a:41:01:41:61:f6:de:59:63:5d:af:2f:31:d9:
         e9:ec:76:42:1a:2a:42:cb:66:9b:05:1e:79:53:88:d2:3b:e8:
         61:db:7f:12:46:20:ae:59:68:66:f7:a9:9e:62:cb:c8:8c:53:
         cf:aa:c8:04:95:cf:bc:86:08:05:ea:71:96:a2:44:b5:b0:22:
         d5:92:d4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:13:59 2026 by rpki-client