Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2a816672-e581-3dea-87ab-1013b6c94457.roa
File:                     2a816672-e581-3dea-87ab-1013b6c94457.roa (raw, json)
Hash identifier:          JfE/3/8lbtRatHRgVPd6QQZRsh7vAV1GGEI/rOMzshw=
Subject key identifier:   2B:49:9B:47:5B:B3:56:44:D9:ED:77:36:8B:E9:AC:C6:15:3B:56:AC
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EB2B1A3150EA9F2E7DB837640
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2a816672-e581-3dea-87ab-1013b6c94457.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     19905
IP address blocks:        64.237.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:a3:15:0e:a9:f2:e7:db:83:76:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=e2221a09-7237-4c47-aa75-ffae6f05600f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:70:44:e5:8f:cf:2c:f8:f2:22:8f:c9:f3:67:
                    ce:3f:15:29:c6:b0:f1:b6:3c:d4:91:d9:1f:d4:38:
                    34:57:84:08:55:24:78:ad:fa:76:e5:8c:b1:f2:07:
                    ff:bc:1a:98:0c:35:16:a6:8e:cd:3a:41:62:b1:87:
                    4d:d5:00:23:e1:28:db:cd:ac:9c:48:d2:8f:f5:dd:
                    30:b7:94:4f:7b:f5:b2:da:e3:d2:aa:0e:52:2b:4f:
                    02:fd:b4:a1:0e:8e:70:82:25:3f:41:9d:f9:67:5b:
                    d4:7a:07:02:d6:64:5f:de:3b:b4:70:32:4d:a4:7e:
                    20:83:10:06:e0:7a:32:e4:89:06:aa:8a:6b:71:76:
                    b8:2c:a7:4d:20:a2:c8:29:a1:c0:24:64:9c:78:60:
                    e5:94:fa:65:d1:c7:ea:dd:76:87:a2:3d:ee:2b:f6:
                    8b:f8:0f:40:95:e3:b7:bb:ea:cc:56:5d:7b:a3:c4:
                    38:b4:2c:a9:15:94:46:c0:09:5d:bd:15:6d:08:ce:
                    6b:42:bd:ba:1e:04:6a:2d:31:4a:54:23:4c:c5:96:
                    5d:76:1f:05:2b:81:9e:bd:45:62:7a:25:55:de:da:
                    f7:a3:e0:5c:29:19:be:78:d1:f1:0a:8b:e1:6b:4b:
                    e2:d9:2a:44:b3:f5:7e:87:12:e3:8f:79:62:1c:37:
                    1b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:49:9B:47:5B:B3:56:44:D9:ED:77:36:8B:E9:AC:C6:15:3B:56:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2a816672-e581-3dea-87ab-1013b6c94457.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.237.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:d4:1c:43:cd:0a:fe:eb:69:3c:88:fc:e1:42:9d:8f:31:58:
         8d:96:c6:c2:2c:eb:95:d8:3e:81:ad:95:ca:3b:3c:6f:b8:49:
         e3:5d:7c:c2:9b:57:b2:5f:bd:5e:ac:b0:a4:31:77:74:3f:5c:
         5e:cf:35:d8:84:ee:80:4d:5b:49:d7:b8:3e:19:f5:77:83:ba:
         14:05:b5:5b:e4:24:83:4c:d8:22:f0:38:8e:b5:df:cc:86:93:
         2f:b6:9c:e2:5a:97:03:22:c2:00:e4:16:67:8c:80:f5:1e:34:
         f7:10:f0:41:1c:6d:11:c4:97:f6:93:47:d7:c8:f3:68:b3:5e:
         b2:61:62:f6:ae:03:66:17:ff:d3:7e:ce:b1:ed:0b:93:af:02:
         0b:05:67:0c:52:bc:f5:59:4f:27:58:00:38:c4:d8:04:20:3f:
         be:15:64:73:99:62:70:bb:c0:f1:53:4d:50:bc:c7:43:38:75:
         37:4a:6f:38:3f:24:8e:af:65:52:d9:3d:cf:f1:a2:36:ac:10:
         4d:c6:34:74:b2:c4:dd:78:64:25:52:7d:04:37:0f:a4:bb:4f:
         a1:f5:7d:bb:56:4c:95:17:1b:1b:38:94:ae:ed:04:56:a4:eb:
         39:be:d6:9b:4e:93:ba:f9:d4:68:5a:80:ee:4c:a8:91:e7:f0:
         42:3f:fb:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:08:02 2026 by rpki-client