Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/30c680af-2210-3ff7-a49b-bf1302b1a5bb.roa
File:                     30c680af-2210-3ff7-a49b-bf1302b1a5bb.roa (raw, json)
Hash identifier:          sRxnYEEjqJf6sNfJtZETmPOET9qdHWDEQpaU2rF5/XA=
Subject key identifier:   B5:58:0A:61:6C:C6:6B:2C:B3:0C:09:D3:71:38:E4:5F:14:8A:7C:AC
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584D60E4FA51153DBD9D2918F300
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/30c680af-2210-3ff7-a49b-bf1302b1a5bb.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     16815
IP address blocks:        216.115.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e4:fa:51:15:3d:bd:9d:29:18:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=c0a7ee2d-a3f0-428d-80f9-c6a52bd28c76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:26:f9:24:cd:fc:c9:2d:ba:bd:3b:b5:08:97:
                    d4:bd:07:e2:00:38:27:89:ba:93:9c:26:ad:ef:68:
                    55:01:d2:c8:dc:c1:e6:c3:6a:68:96:ce:6c:f6:c5:
                    71:fa:32:c3:bc:5c:19:c8:5c:50:19:cf:64:f6:c3:
                    ff:70:2f:52:5d:71:53:8c:13:c1:47:8d:7e:86:0d:
                    d1:dd:f6:8d:48:fa:da:1c:c7:92:ad:e4:18:e3:fc:
                    9c:63:e2:13:b8:6d:ba:7a:df:cd:a2:36:74:c1:33:
                    1e:7c:7b:fa:ef:13:56:c0:09:30:5e:89:86:e3:c8:
                    d8:16:d8:b0:df:63:f0:11:f6:45:3f:3f:a0:f0:20:
                    3b:1e:51:42:61:d5:ef:76:f4:eb:5b:59:94:a7:0a:
                    76:52:c3:8e:f9:d3:ab:9f:6e:60:17:85:0f:45:0f:
                    5c:cc:de:28:9f:f5:74:e4:bd:58:c6:1a:07:33:41:
                    3f:7a:52:3b:17:c0:f4:be:4b:15:fe:9a:3d:52:11:
                    2e:3d:ab:cb:23:d0:3b:5c:89:8d:95:43:8d:29:b0:
                    39:96:d2:1f:ba:7d:8a:60:74:49:42:72:a8:60:76:
                    c6:a1:83:3b:2a:6d:cb:99:d5:59:ae:84:ca:58:ea:
                    2c:8f:c4:e9:47:0f:ea:5d:a7:df:78:c4:c3:e0:56:
                    42:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:58:0A:61:6C:C6:6B:2C:B3:0C:09:D3:71:38:E4:5F:14:8A:7C:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/30c680af-2210-3ff7-a49b-bf1302b1a5bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.115.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:f7:13:6b:2a:89:d5:50:02:e4:f1:85:44:2a:19:d3:47:df:
         49:b4:90:c1:3a:82:18:45:e4:43:1e:03:c7:f8:9b:33:cc:6d:
         4d:6c:2a:1a:d9:73:99:1a:1b:77:da:99:2d:63:d1:fb:fa:d6:
         7e:3d:80:6a:be:18:22:66:34:cd:33:4b:f8:47:f8:d5:2f:77:
         20:e0:23:0e:1e:93:b5:cc:ab:34:ef:d7:95:d5:53:2d:56:ab:
         d1:da:ae:07:89:c0:d1:35:d8:56:e0:44:9f:6a:cb:14:48:dd:
         fd:1b:b2:66:30:2a:fd:51:3b:fc:23:aa:d3:65:cc:fe:ed:36:
         e6:ca:53:9d:16:df:96:5b:28:03:75:46:7e:e9:de:4e:d5:b8:
         82:cf:2c:42:d9:e8:04:af:af:72:e7:c6:84:f2:7e:ea:0b:de:
         c5:08:f7:fb:2e:2c:fc:53:f9:d6:72:dc:d6:0f:e9:8f:4c:01:
         b6:26:68:66:04:c8:93:41:7a:44:cf:3a:32:41:a2:0f:32:de:
         f8:cb:bc:2e:f9:09:46:0c:5d:30:99:00:64:40:9f:ca:90:05:
         ab:06:72:87:30:e6:98:c4:f4:2a:a9:24:82:61:fc:86:27:54:
         8f:32:c0:b3:07:65:b0:80:a8:7f:6d:ae:35:05:7b:a8:92:fa:
         b7:1c:63:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:09:33 2026 by rpki-client