Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/995efe20-f339-3067-94d9-cb4ac509c5a8.roa
File:                     995efe20-f339-3067-94d9-cb4ac509c5a8.roa (raw, json)
Hash identifier:          38Wqz7EpQI6B2SWedZ55VAQ9j4rYBWOlkVCBea3lJ+8=
Subject key identifier:   4E:C1:A4:0E:E8:B7:1F:90:86:38:02:D7:C8:7B:08:5E:B5:E3:BF:18
Certificate issuer:       /CN=21adcbb8-b500-460f-90cb-bca0525aabcb
Certificate serial:       010D0C9F4328584E3E5F19F2F589AC2BE3837380
Authority key identifier: 62:2B:0A:1E:7B:53:D2:E2:2B:6B:5A:FF:1D:C1:AA:ED:0A:06:69:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/995efe20-f339-3067-94d9-cb4ac509c5a8.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     16509
IP address blocks:        170.176.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:19:f2:f5:89:ac:2b:e3:83:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21adcbb8-b500-460f-90cb-bca0525aabcb
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=ef2d94ee-557e-46e9-8c5e-1d086ddc0251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:71:e9:e9:37:46:27:c4:97:ab:a1:a2:f1:08:
                    79:e5:08:b0:50:51:67:ea:a7:e0:84:ee:8b:16:e8:
                    af:c9:fd:5e:60:b1:45:52:9c:2c:73:01:ac:dc:12:
                    9b:91:cd:a9:77:14:58:38:de:7d:5e:a0:5f:00:b4:
                    0a:c9:95:d8:f1:69:27:cd:11:65:ef:c0:5b:1f:6f:
                    2e:e4:19:38:31:6f:fa:77:78:0a:27:52:67:8b:74:
                    86:81:8b:2e:7d:90:7b:49:41:97:be:9f:08:5c:f6:
                    11:81:6c:44:2e:d4:62:9f:43:46:f4:ae:e2:a1:0d:
                    7e:92:c7:31:7d:49:b7:52:9f:7e:e2:38:f5:fa:34:
                    8b:b7:75:76:e9:46:d2:16:b8:33:7a:80:d2:17:17:
                    c9:19:f6:55:65:b0:e5:7b:4d:8a:a0:ab:98:df:ae:
                    8c:ac:7d:5b:dd:b8:ee:a1:89:ce:43:e6:79:3d:b1:
                    db:54:36:3d:cd:6c:74:18:0a:87:f3:16:bf:83:fd:
                    a1:38:25:b5:32:c2:c7:2b:12:32:01:e8:81:6d:f9:
                    5c:3c:1c:f1:c5:27:98:57:4e:29:8d:d0:13:96:2f:
                    b6:30:25:12:8d:5e:80:3a:a8:9e:ed:d7:a4:e1:9b:
                    36:69:d9:5d:3d:b2:fe:ed:c1:80:47:43:03:71:b0:
                    25:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C1:A4:0E:E8:B7:1F:90:86:38:02:D7:C8:7B:08:5E:B5:E3:BF:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/995efe20-f339-3067-94d9-cb4ac509c5a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.crl

            X509v3 Authority Key Identifier:
                keyid:62:2B:0A:1E:7B:53:D2:E2:2B:6B:5A:FF:1D:C1:AA:ED:0A:06:69:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.176.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:72:1b:28:f0:c2:2c:f8:16:a5:92:af:5d:de:4b:89:f1:85:
         79:e2:db:30:73:95:fb:59:41:39:74:0c:16:65:a3:cc:31:06:
         9c:d6:9f:9c:3c:60:ee:e2:c0:94:88:4b:3e:bf:8d:49:db:ac:
         4a:34:e6:33:44:f5:4f:89:de:4e:99:29:8e:59:20:8f:02:88:
         49:20:c2:cd:90:36:f0:36:f1:0f:eb:b5:73:03:23:3a:88:f1:
         af:5a:76:14:16:76:45:cc:2d:ed:28:c7:dc:88:f6:86:58:25:
         5d:d2:c9:d6:5b:a3:b5:8b:b1:bf:1a:11:0d:79:d0:62:30:28:
         51:1e:f4:73:52:ef:66:7b:1e:29:ca:39:d2:11:a9:81:6c:60:
         bb:95:e4:c5:0e:86:7f:81:c7:48:0c:7b:76:8d:be:4e:df:91:
         c1:0d:f4:58:79:78:fe:dc:a7:41:9a:cb:6d:e0:4b:d3:00:01:
         a4:2f:2c:2d:54:c9:38:d2:22:65:b0:8b:ce:8b:b1:d0:be:fd:
         2a:40:4f:9e:a5:b3:ab:02:bb:40:0f:89:76:e3:8c:59:94:c8:
         39:da:fb:98:ae:65:6a:d7:c9:ed:36:b7:a3:9d:76:7c:ee:35:
         a9:f1:c0:36:6a:9e:da:6b:61:b7:8b:d4:0d:3d:49:3f:4f:a2:
         d0:b8:cd:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:59:48 2026 by rpki-client