Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/0dac1b9e-e005-3716-ba57-667e5c48f339.roa
File:                     0dac1b9e-e005-3716-ba57-667e5c48f339.roa (raw, json)
Hash identifier:          YQ6HHbRh2CdVFEVR+Pu3MiKmmvsxJnp12jQBrtbBcZI=
Subject key identifier:   CF:6C:D0:BB:D1:73:52:92:1B:F6:A9:C5:35:22:B2:50:2A:23:9A:05
Certificate issuer:       /CN=00b089f9-bcf9-4483-badb-c4cf8ca6f9e1
Certificate serial:       010D0C9F4328584DA8158889D2053D6259E29B10
Authority key identifier: 63:78:09:E9:4C:B7:72:04:58:F4:A5:9E:8F:7B:B4:91:9A:DF:36:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/0dac1b9e-e005-3716-ba57-667e5c48f339.roa
Signing time:             Tue 28 Apr 2026 13:00:30 +0000
ROA not before:           Tue 28 Apr 2026 13:00:30 +0000
ROA not after:            Mon 27 Jul 2026 13:00:30 +0000
asID:                     27370
IP address blocks:        216.163.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:15:88:89:d2:05:3d:62:59:e2:9b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00b089f9-bcf9-4483-badb-c4cf8ca6f9e1
        Validity
            Not Before: Apr 28 13:00:30 2026 GMT
            Not After : Jul 27 13:00:30 2026 GMT
        Subject: CN=dcb4150a-eb0d-4b80-8f0b-d70a645ccc97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0e:27:ba:85:7a:22:76:f1:9a:10:4a:02:c5:
                    fc:71:1b:b7:84:21:64:87:4b:2c:e7:cc:1a:11:a2:
                    32:a4:b0:11:c9:31:6b:81:ce:29:64:f8:4b:f5:57:
                    72:15:29:37:1e:b4:d1:05:05:f3:ad:e8:ac:0e:fc:
                    5d:a6:d4:fc:68:37:06:b1:43:78:b1:26:77:e3:81:
                    0c:e0:0d:74:44:e4:10:1b:5f:fb:7e:9b:e9:49:63:
                    8d:57:fa:ea:1e:49:76:03:1e:22:3e:4e:84:ed:c9:
                    5b:bd:a0:54:c1:46:83:c4:9c:e0:1b:f6:82:f5:3d:
                    97:bb:15:4c:d4:38:91:9c:9a:ae:9f:69:6d:f8:2e:
                    da:45:22:b4:b5:02:50:36:8e:e4:9c:4c:d3:4b:04:
                    c9:5f:6a:89:35:26:cf:3f:ba:0e:a6:26:29:9a:90:
                    f0:33:f8:5a:9e:bc:f9:92:b0:9a:93:8e:85:bc:12:
                    be:8c:fb:a3:3a:02:80:ac:e9:91:7c:cc:ab:d8:61:
                    7a:db:2c:5c:0f:43:63:37:b8:2a:64:7a:a1:2e:93:
                    00:a1:e2:83:1b:1f:43:27:45:21:aa:c1:24:f2:1e:
                    29:88:eb:b8:78:ed:50:cf:a6:51:20:ec:72:2e:a1:
                    e7:d2:84:2d:65:6d:fb:2c:00:db:c8:f7:d6:bc:31:
                    58:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:6C:D0:BB:D1:73:52:92:1B:F6:A9:C5:35:22:B2:50:2A:23:9A:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/0dac1b9e-e005-3716-ba57-667e5c48f339.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.crl

            X509v3 Authority Key Identifier:
                keyid:63:78:09:E9:4C:B7:72:04:58:F4:A5:9E:8F:7B:B4:91:9A:DF:36:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.163.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:74:5b:e2:4a:fe:4f:b2:8a:36:56:ff:60:1d:5a:35:1c:5c:
         93:50:fe:84:f9:a9:3e:c5:cf:ce:d9:6f:4c:4d:44:54:d1:dd:
         e3:c4:21:29:c5:eb:ff:8f:0b:84:b6:5c:cf:41:e7:93:0d:5b:
         1d:c8:1a:92:6b:e1:06:5e:8a:78:6a:78:4f:a5:b6:e9:30:62:
         36:49:01:f4:33:d8:c8:35:65:b6:6e:70:1b:e5:5a:2a:36:5d:
         be:d8:01:67:33:83:bb:a7:a0:f1:31:de:fc:20:f7:60:2e:ff:
         ec:e9:6a:60:fa:dd:25:36:99:e2:c4:d8:60:09:7f:34:2a:d1:
         b1:66:87:b7:95:2d:79:44:c4:7e:35:0b:46:22:90:37:03:a7:
         ef:49:25:a6:21:c7:40:f5:1e:03:01:5d:80:27:00:6b:74:74:
         e6:1c:da:b5:23:56:46:64:da:cd:53:aa:eb:01:c9:de:d6:1e:
         c3:c8:b2:a8:ab:60:cb:9d:5d:82:2f:7b:e9:d9:d2:1d:de:93:
         7a:87:ff:4c:30:e9:cd:08:4c:30:b4:59:3f:42:29:b2:f8:dc:
         4f:55:27:cc:56:49:9b:83:2c:94:3e:ef:4b:a0:b2:cd:c0:2d:
         48:70:07:80:f5:ab:16:81:e2:b1:99:f0:09:21:04:81:b0:75:
         97:65:e0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 15:32:31 2026 by rpki-client