Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/356617d6-d98a-3c12-9d4a-857c06ded68b.roa
File:                     356617d6-d98a-3c12-9d4a-857c06ded68b.roa (raw, json)
Hash identifier:          d4v+3zjW68JQpFP+2Wp1OOC7o+5cQtvUzjlYVqj7tSE=
Subject key identifier:   ED:AF:47:AE:8B:F2:31:58:C1:67:AF:E9:2A:D0:EB:5D:D9:19:FA:73
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584E253F08D53D1308D1FCDE80C0
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/356617d6-d98a-3c12-9d4a-857c06ded68b.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     16417
IP address blocks:        216.71.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3f:08:d5:3d:13:08:d1:fc:de:80:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=1a856ca8-28ff-4c46-a7d6-d9b004d3cd9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:aa:e2:17:00:cb:19:8d:2f:e2:07:61:72:5c:
                    b6:c1:47:dd:3b:e2:6e:b3:98:6f:f2:08:46:28:45:
                    b2:a1:3c:01:24:7f:0f:ed:72:a7:3c:ae:e3:74:e1:
                    d5:c6:41:19:7f:32:28:27:83:94:31:a8:a2:ce:1f:
                    34:d6:39:21:b1:04:32:0a:a1:8f:a4:c3:cb:97:2a:
                    29:9b:e8:36:6a:7e:86:7c:79:0b:e1:d1:70:c5:c2:
                    8c:2a:52:6e:3a:50:a5:23:a9:ef:45:4f:ac:82:8d:
                    2f:22:97:fe:41:06:4f:91:64:ee:d1:8c:d3:84:73:
                    a4:33:4a:02:d2:8c:2f:3f:55:e4:ce:bb:b1:fd:4f:
                    17:a3:4d:e2:f8:ec:b8:e5:df:3d:78:3a:32:80:fd:
                    78:3b:9b:45:8c:47:c8:7f:67:80:0b:38:49:33:b2:
                    92:dd:84:b1:42:8e:0c:1c:17:12:aa:e7:3c:6a:1f:
                    19:b3:d7:fe:18:69:59:6a:b1:9f:67:0e:aa:89:66:
                    fd:a7:2d:bb:83:e0:eb:a8:47:fe:e6:80:85:a2:cc:
                    a5:3c:f3:d2:73:70:a1:8f:3a:4a:1a:27:40:b9:ff:
                    9c:a7:9b:83:2c:e2:4a:45:ad:68:fc:d7:b0:a3:3a:
                    1d:f6:f2:3d:d6:ae:69:81:c5:95:be:66:78:ba:c4:
                    75:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:AF:47:AE:8B:F2:31:58:C1:67:AF:E9:2A:D0:EB:5D:D9:19:FA:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/356617d6-d98a-3c12-9d4a-857c06ded68b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.71.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:8c:d7:f6:dc:43:d7:12:c7:ea:e5:69:ed:45:f7:b2:21:e1:
         ef:70:65:08:2d:c7:73:42:43:5d:b6:95:47:bc:33:6f:89:4f:
         74:0a:ad:5a:8a:ea:ae:c9:6e:a4:21:f1:69:96:69:72:08:93:
         27:b3:aa:52:da:d4:0b:cf:2d:60:00:a6:da:20:0c:22:2e:b3:
         3a:c4:d1:46:c7:fd:6d:7b:d7:5a:2d:c9:fa:d9:f9:95:71:a7:
         75:7b:a8:68:ae:6d:0f:0a:08:0a:e0:94:ec:6e:c6:72:56:05:
         e7:5d:f4:e5:d2:00:c4:ab:62:0a:e7:e0:67:4a:0e:f7:3a:d2:
         6a:8f:c8:f2:d0:c6:dc:07:3a:e6:e6:ef:34:eb:bd:92:f8:0f:
         f0:46:dd:ed:02:e3:67:06:ee:61:51:f7:7e:9d:c8:e4:ad:99:
         c4:6b:f2:66:69:eb:75:30:b8:79:7c:8b:9d:e0:b8:ed:2b:08:
         16:02:b3:6d:d5:d3:39:ff:80:0c:63:e0:ff:ea:eb:a2:69:ee:
         ad:74:e5:64:6e:43:22:46:5c:20:d9:3c:0b:82:71:2a:d6:c7:
         6b:ba:19:3b:e9:a9:f4:d6:95:6f:17:96:36:8c:06:b0:30:1f:
         4b:5f:cd:27:e6:6a:8c:1a:ed:4a:c2:2a:73:85:90:ee:bc:1d:
         0f:20:6f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:47:25 2026 by rpki-client