Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/2ca4807f-f8f6-3640-8ef3-356b0a165378.roa
File:                     2ca4807f-f8f6-3640-8ef3-356b0a165378.roa (raw, json)
Hash identifier:          sw9/bTo9Z5MYbHDVtV911J0uM/u8cW+8lH8PkHh4yH8=
Subject key identifier:   03:F4:41:AF:DE:47:35:B3:09:85:AC:B3:91:FE:DC:D4:0F:3D:D1:E4
Certificate issuer:       /CN=367e4bfe-b165-41fa-ab22-3f78555490cf
Certificate serial:       010D0C9F4328584E4559CF89888A4DA09DE47080
Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/2ca4807f-f8f6-3640-8ef3-356b0a165378.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        216.198.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:cf:89:88:8a:4d:a0:9d:e4:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=e7cfacf0-4659-4ccc-b1c8-9efbba725c11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:07:37:2a:be:2f:0f:9d:31:ae:95:2a:f8:7f:
                    f6:21:b0:12:cc:e7:c4:b6:fa:f4:a5:a4:98:f4:89:
                    c0:c4:97:fd:0a:88:a1:cc:e3:0f:42:04:48:d9:7c:
                    65:04:1c:fc:d3:2a:99:29:f5:6e:d7:e5:c5:03:bd:
                    f7:68:73:f5:2e:0f:47:36:48:56:27:38:25:96:b7:
                    75:bf:48:f5:a3:1e:d0:dd:c1:f3:8e:4f:a2:cb:94:
                    02:60:7f:b9:6c:49:ca:fb:b0:8e:70:ae:a8:3e:94:
                    b2:44:af:fb:b7:bb:8c:be:6b:f3:a5:3b:25:0b:01:
                    c4:a9:b1:09:89:14:2f:f4:4e:7c:3c:62:fd:b6:65:
                    29:16:41:41:2e:6d:7b:57:69:f0:10:78:c1:4a:88:
                    cc:78:bd:81:0c:84:18:69:d0:c5:24:ef:4a:b9:a4:
                    f8:68:2b:c2:3e:ac:1f:82:4f:d5:d5:08:b8:bc:1c:
                    7b:2d:21:c5:85:44:27:87:c0:6d:b3:f2:d2:85:3c:
                    87:2b:be:90:75:bc:c3:26:1e:97:51:b8:f1:3b:a6:
                    88:1e:45:e6:ee:df:75:0e:a1:6a:4a:4b:a7:3e:d5:
                    ea:07:0e:4b:3e:05:72:a4:99:44:0f:54:e9:8f:29:
                    8f:eb:89:9d:c8:72:05:fe:c9:b0:f8:3f:19:4c:09:
                    f3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F4:41:AF:DE:47:35:B3:09:85:AC:B3:91:FE:DC:D4:0F:3D:D1:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/2ca4807f-f8f6-3640-8ef3-356b0a165378.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl

            X509v3 Authority Key Identifier:
                keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.198.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:27:2a:65:84:6c:90:bc:17:30:c0:a5:d3:db:3e:32:51:b0:
         25:7f:6a:60:fd:e2:e1:44:63:e0:89:7b:f1:3b:0e:b4:13:1b:
         74:b0:60:c0:d4:8c:c5:fb:74:c5:e4:1d:d3:12:1e:08:c7:78:
         78:52:49:71:1f:ef:57:84:cb:0f:20:d7:cb:5a:0b:e1:b8:4f:
         2b:f7:41:d0:45:9c:19:0a:68:06:cd:d1:ee:18:59:95:27:a7:
         79:45:c5:6b:8e:83:90:bc:f5:6b:72:85:61:56:e0:cf:83:d4:
         12:67:8c:7b:97:9a:57:a4:5e:27:89:23:39:f5:b2:96:c0:0d:
         9c:85:e0:cb:38:47:22:ba:3a:46:36:fa:42:b9:03:b7:63:de:
         ba:e9:df:a1:53:f7:24:e7:9e:11:ca:e4:8c:b6:13:3e:da:6a:
         5c:2f:56:0a:bf:5f:d6:62:bd:df:85:0c:20:1a:40:df:07:b9:
         4c:b8:43:2e:57:2a:0d:a8:82:e5:7e:6c:dd:4c:b1:60:0c:79:
         48:0b:ff:ff:d1:d4:04:8a:82:8e:5b:09:73:e4:89:d4:a5:71:
         42:e0:45:67:3e:e6:47:c8:d7:76:7f:90:fe:79:a1:8b:48:bc:
         13:bc:e6:fc:65:e0:b3:74:e2:f5:09:26:1a:70:22:84:30:b9:
         30:6d:cb:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:13:07 2026 by rpki-client