Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/fddb6154-d8ef-349a-ad7c-f41cc2150f43.roa
File:                     fddb6154-d8ef-349a-ad7c-f41cc2150f43.roa (raw, json)
Hash identifier:          bSnUvVcfu2Z+r2XngPDg9AjbOZTp41QRW8Xrj+e1SKo=
Subject key identifier:   C4:09:C6:C2:EB:BA:AC:E3:87:7A:8A:0B:56:68:ED:1E:89:9A:34:49
Certificate issuer:       /CN=8dbe5e2d-b7f8-4dba-b97b-8b6164e83890
Certificate serial:       010D0C9F4328584D571FAF4DF57EF4DAA15CD680
Authority key identifier: CC:B0:CB:3A:A6:3A:8F:FA:2A:54:EF:E8:C8:EB:5A:7D:33:60:5C:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/fddb6154-d8ef-349a-ad7c-f41cc2150f43.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     32482
IP address blocks:        216.82.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:af:4d:f5:7e:f4:da:a1:5c:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dbe5e2d-b7f8-4dba-b97b-8b6164e83890
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=c70d7754-a62b-49fb-98e2-d87951dc1e1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:bf:0d:08:45:60:85:36:59:0b:79:91:01:b4:
                    d8:72:ec:18:91:47:ba:a4:7f:1f:22:ba:a1:4b:73:
                    c7:73:0c:7c:74:7c:13:11:9e:af:2b:d3:95:a1:bc:
                    56:04:cb:18:7f:19:7e:5d:88:77:f1:3a:ee:e4:e4:
                    54:ea:af:e5:b4:a6:f3:ad:cc:2f:51:11:52:07:65:
                    b3:2b:8e:5e:d0:b0:b5:df:3d:81:9e:d4:cb:04:07:
                    ac:85:2b:69:10:8b:c0:63:91:29:4c:e7:19:1b:1e:
                    47:03:83:02:c5:af:8e:8b:10:3a:4d:12:5c:6a:44:
                    a5:a3:92:7f:e6:31:7d:b6:09:ed:91:87:75:91:7e:
                    6d:8d:7c:9e:41:31:7f:47:54:22:41:f1:42:cc:03:
                    7a:2f:f2:73:4c:fb:62:ae:11:9f:13:8a:cd:2e:e6:
                    82:be:7d:f9:25:01:66:b0:d6:66:ed:56:8e:c5:e9:
                    22:80:23:b9:20:0e:13:56:87:ca:8a:00:b0:4c:68:
                    c0:ab:41:81:fb:07:42:2f:ee:56:e1:16:2c:96:1d:
                    ad:8f:1e:c1:08:a0:63:ec:f9:87:f8:fd:7a:f0:a8:
                    42:87:c3:8d:f1:84:42:5b:08:b8:1d:89:97:b7:4d:
                    99:dc:75:04:0f:51:ac:e6:d8:a3:96:8b:f5:37:15:
                    1b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:09:C6:C2:EB:BA:AC:E3:87:7A:8A:0B:56:68:ED:1E:89:9A:34:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/fddb6154-d8ef-349a-ad7c-f41cc2150f43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.crl

            X509v3 Authority Key Identifier:
                keyid:CC:B0:CB:3A:A6:3A:8F:FA:2A:54:EF:E8:C8:EB:5A:7D:33:60:5C:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.82.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:a9:9b:1f:14:8b:2f:1e:9f:7e:54:21:2f:c2:63:bc:b7:fa:
         24:c7:6e:65:e3:0b:ea:73:b8:26:4b:53:6f:2b:ea:a5:10:ea:
         26:0d:d2:d9:a1:8b:fe:1d:21:c1:03:2f:63:2a:49:57:42:ea:
         c7:ac:21:1b:d0:47:f3:67:8d:1f:82:f7:31:4d:7b:1e:57:c9:
         5c:fd:c3:1a:24:d1:59:43:61:c1:49:5f:ba:0b:62:df:41:a7:
         d6:ce:8d:c8:fe:83:f2:a7:00:3a:54:64:80:08:b4:e3:36:ab:
         ee:41:3f:99:c3:4b:f2:1b:ae:d0:53:a7:97:9a:e0:bc:bd:63:
         e6:38:ba:5c:51:63:b5:c7:d3:11:ec:39:5a:a3:43:17:8e:22:
         0e:cd:6b:21:cc:94:f4:64:98:b6:e0:09:71:fd:6b:5b:40:e3:
         59:57:b4:c2:f0:53:09:32:3d:2f:f6:0c:32:ca:9b:ca:95:dc:
         bf:10:81:a6:52:d2:bc:05:9f:08:6c:7b:24:b0:ec:af:5b:d2:
         b3:d8:1c:21:ca:b8:50:5c:7a:0e:91:df:d0:2e:e1:25:56:0d:
         e0:23:dc:b0:74:9b:91:4c:fe:25:0e:db:80:86:2a:50:48:d2:
         af:d5:99:f8:a7:85:b8:cc:3d:91:9d:cc:2a:ab:d3:86:34:8a:
         b7:bf:46:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:59:55 2026 by rpki-client