Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b/863f4acb-612c-3dc9-8399-3195b4bdd44b.roa
File:                     863f4acb-612c-3dc9-8399-3195b4bdd44b.roa (raw, json)
Hash identifier:          rBfUrJ+/dfZRIHHIJLhpmrLUvXt3FlBVwXeoLRH1xB0=
Subject key identifier:   15:69:6D:A8:6F:DC:6B:63:CD:BA:70:03:E6:23:64:9E:EC:A3:91:D9
Certificate issuer:       /CN=a05d07d2-1994-4f02-bebc-4bdc0aec1c5b
Certificate serial:       010D0C9F4328584D4D5A52084B39297093539B00
Authority key identifier: 69:ED:05:15:B3:4E:6B:49:E1:4A:A4:CE:3F:BF:7B:8F:A3:99:A1:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b/863f4acb-612c-3dc9-8399-3195b4bdd44b.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     16509
IP address blocks:        199.250.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:52:08:4b:39:29:70:93:53:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a05d07d2-1994-4f02-bebc-4bdc0aec1c5b
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=ad187b24-ec5e-40dc-9a9a-55bdf100828e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9d:4d:97:11:b1:35:89:d5:14:72:8b:24:c5:
                    5d:58:2d:6e:9d:78:fb:23:92:7b:30:8f:c6:7d:ee:
                    6f:00:cf:d4:25:0e:a4:13:99:e4:b6:10:14:37:f6:
                    a7:be:c5:bf:e6:e2:cf:6b:64:7a:95:83:6e:ff:8b:
                    bc:3f:44:a0:3f:0e:09:2a:d6:37:8d:95:60:eb:67:
                    11:11:fd:da:0d:00:8f:df:d3:da:28:95:a1:49:e1:
                    db:8d:56:63:ac:57:99:85:7f:85:ed:bf:19:f2:cf:
                    ae:42:14:af:f2:43:c9:be:0b:5b:75:3d:ad:33:1c:
                    80:f5:93:dc:96:e2:4a:d2:83:ce:22:cb:37:a5:11:
                    e9:52:1d:47:bc:9c:fb:bc:3f:3a:6c:2d:12:5f:4f:
                    ba:d7:88:47:fc:8d:9e:80:95:5c:68:05:49:d1:53:
                    39:7d:45:a9:5f:88:1c:b3:dd:85:71:e2:3f:83:7d:
                    aa:a6:f5:3a:7a:eb:03:25:74:56:18:32:b6:1d:e0:
                    0d:96:72:41:17:70:5a:15:39:74:09:92:21:97:c0:
                    ad:89:b6:17:a0:0c:39:16:11:84:ce:ed:fd:d9:ac:
                    81:f9:8d:20:70:0a:8d:db:1f:79:d2:05:e3:08:02:
                    c2:b8:81:8e:a9:f0:7e:a2:ee:be:7e:f3:22:09:7a:
                    32:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:69:6D:A8:6F:DC:6B:63:CD:BA:70:03:E6:23:64:9E:EC:A3:91:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b/863f4acb-612c-3dc9-8399-3195b4bdd44b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:69:ED:05:15:B3:4E:6B:49:E1:4A:A4:CE:3F:BF:7B:8F:A3:99:A1:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.250.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:65:c1:11:cd:f4:56:30:9a:8c:cc:94:e0:4e:2d:ce:28:4a:
         1a:c7:56:fd:f6:04:6d:7e:5b:93:db:b0:06:cf:bc:fe:2d:a7:
         ce:e7:b3:42:98:a1:2e:b3:48:09:1c:50:ea:83:a4:e6:e6:53:
         f5:cf:9a:45:13:91:c4:ef:6e:4c:83:72:58:59:a4:f0:36:72:
         3e:01:c2:16:0d:fe:e1:f3:43:86:95:3c:26:a3:50:ad:e2:fd:
         00:f1:66:3f:c9:4a:5b:67:c4:7b:cc:29:69:39:a2:be:d8:16:
         e7:c9:23:0d:ca:1e:81:a9:44:65:2e:53:04:8f:36:2f:25:ba:
         20:52:9a:07:8d:db:70:23:1b:e6:e9:6e:ad:94:6f:14:6b:1f:
         eb:e4:a9:53:46:c2:66:03:8a:2c:ff:56:2d:6c:d4:6f:be:8a:
         fc:b2:2c:fd:ae:24:ce:eb:75:6e:87:f8:59:05:4d:bc:c1:49:
         c2:e0:49:e9:6f:fc:9c:c3:4c:1d:56:f3:0e:10:72:20:96:0e:
         24:d3:b6:45:be:a9:89:cd:15:6f:c5:ab:93:5d:71:d6:5a:fb:
         2e:22:38:02:fc:76:91:88:85:6b:ac:02:1f:37:4a:18:8a:92:
         2c:a0:bb:18:f0:7f:c9:28:a6:5b:2a:e4:42:4b:2f:74:8b:bf:
         12:7a:92:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:21:10 2026 by rpki-client