Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae28eec8-afdc-41a3-8af9-7fd6c40e68ac/8df264b1-40cf-3ac2-9486-ae088c2c3173.roa
File:                     8df264b1-40cf-3ac2-9486-ae088c2c3173.roa (raw, json)
Hash identifier:          SCzQn7hvBAObe9/gn1ByYIZ06vN/BgWllvD4nAf4gk0=
Subject key identifier:   16:E8:40:45:3C:3E:B3:43:A2:12:72:56:97:D5:93:40:FD:E8:D9:CF
Certificate issuer:       /CN=ae28eec8-afdc-41a3-8af9-7fd6c40e68ac
Certificate serial:       010D0C9F4328584CFB1CE9F7D7B025ACADAA8380
Authority key identifier: C4:D1:EB:E6:A4:69:B0:AE:04:66:6F:76:A8:95:C2:DD:9A:4E:4E:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae28eec8-afdc-41a3-8af9-7fd6c40e68ac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae28eec8-afdc-41a3-8af9-7fd6c40e68ac/8df264b1-40cf-3ac2-9486-ae088c2c3173.roa
Signing time:             Wed 25 Feb 2026 14:00:39 +0000
ROA not before:           Wed 25 Feb 2026 14:00:39 +0000
ROA not after:            Tue 26 May 2026 13:00:39 +0000
asID:                     203963
IP address blocks:        216.238.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae28eec8-afdc-41a3-8af9-7fd6c40e68ac/ae28eec8-afdc-41a3-8af9-7fd6c40e68ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae28eec8-afdc-41a3-8af9-7fd6c40e68ac/ae28eec8-afdc-41a3-8af9-7fd6c40e68ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae28eec8-afdc-41a3-8af9-7fd6c40e68ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fb:1c:e9:f7:d7:b0:25:ac:ad:aa:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae28eec8-afdc-41a3-8af9-7fd6c40e68ac
        Validity
            Not Before: Feb 25 14:00:39 2026 GMT
            Not After : May 26 13:00:39 2026 GMT
        Subject: CN=4b446640-8a5f-4523-833d-e7b3add560d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:53:b3:a6:1e:4c:52:52:4c:f8:37:34:40:da:
                    a2:67:02:81:89:70:6c:a1:a1:ee:1f:6a:63:09:db:
                    45:c3:a3:f0:6c:78:91:8a:04:92:1a:10:9a:06:65:
                    1a:11:bd:e5:7f:8a:77:63:c8:e5:ea:93:aa:68:f0:
                    a9:db:8a:41:36:2b:ab:fb:f8:e4:13:8d:88:3f:ed:
                    7b:91:04:11:e0:9b:83:44:95:05:a0:f7:57:fb:27:
                    c3:9d:bf:46:6d:8a:2d:f6:31:cd:3a:86:0b:f1:ee:
                    84:13:b7:a6:36:62:11:b5:61:e2:d7:d7:35:cb:3d:
                    1e:b3:04:5e:99:d8:36:f3:f3:0b:d1:7d:1a:29:8a:
                    ce:c7:e9:8c:fe:1a:f5:94:04:c8:b6:5b:ad:48:38:
                    5b:3b:2e:fc:db:bf:82:86:61:bd:04:c5:0f:c2:5d:
                    78:f3:05:4d:a6:ee:46:c7:02:dd:ed:d9:67:3b:cf:
                    7c:43:89:9e:6c:bc:dd:1c:a6:34:d2:16:20:0a:34:
                    68:4d:ae:a0:dd:68:8f:a0:83:94:0b:8c:63:ad:72:
                    ed:fa:e3:91:b6:b7:db:17:eb:27:50:05:41:d2:ae:
                    2a:e8:42:f1:b2:eb:34:a5:24:83:25:75:50:d4:6c:
                    66:7d:06:ed:ab:a5:a9:18:f0:65:bc:53:9c:03:05:
                    12:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E8:40:45:3C:3E:B3:43:A2:12:72:56:97:D5:93:40:FD:E8:D9:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae28eec8-afdc-41a3-8af9-7fd6c40e68ac/8df264b1-40cf-3ac2-9486-ae088c2c3173.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae28eec8-afdc-41a3-8af9-7fd6c40e68ac/ae28eec8-afdc-41a3-8af9-7fd6c40e68ac.crl

            X509v3 Authority Key Identifier:
                keyid:C4:D1:EB:E6:A4:69:B0:AE:04:66:6F:76:A8:95:C2:DD:9A:4E:4E:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae28eec8-afdc-41a3-8af9-7fd6c40e68ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.238.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:62:27:3c:46:6d:8e:56:06:68:35:d4:11:ce:c5:26:af:8e:
         17:66:fa:2e:23:80:37:ec:13:38:6b:32:eb:71:93:29:f8:ea:
         ed:dc:2a:3b:25:a8:5b:3c:bb:74:b9:0c:11:eb:0d:5d:59:e9:
         bf:38:92:4e:be:6e:3b:c5:ab:65:cf:80:84:39:be:c1:49:b8:
         5a:e1:ab:5c:34:f6:9e:5b:9a:ec:72:d7:f1:71:e8:d2:fc:4f:
         2f:6a:9c:28:64:25:67:ac:ca:b2:83:98:8e:27:fd:5e:73:14:
         e0:20:75:6e:ae:4f:57:99:d4:07:d0:07:9d:d5:2e:3b:51:4c:
         21:dd:7e:41:61:e1:10:a6:ff:7d:ac:ff:94:e0:c5:f4:2d:04:
         5d:2b:eb:2d:1f:f9:7e:6e:da:a4:f5:43:dd:c5:ca:b8:ac:54:
         b6:4c:33:24:e0:bc:c4:f7:b2:db:1a:23:24:ef:37:20:c2:7f:
         b7:43:11:e0:f2:b8:bc:e4:10:be:c7:7a:d6:9e:8c:db:2e:60:
         fa:f4:04:ad:9a:0f:eb:f4:9e:d0:7b:83:cd:95:75:4b:03:3e:
         40:4a:81:ae:ef:58:72:38:9a:04:0b:69:d1:ee:63:a5:7f:a5:
         31:5b:74:2e:22:fa:a5:64:e5:0a:0e:fb:6e:a8:8d:7a:a9:3d:
         5f:73:cd:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:20:24 2026 by rpki-client