Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/dbc8f081-b1fe-3eef-b76f-82945f2e63d1.roa
File:                     dbc8f081-b1fe-3eef-b76f-82945f2e63d1.roa (raw, json)
Hash identifier:          +tbTAkat0lHZCmhb6z9qra/m6RD28ZdYX4gcSUhsph8=
Subject key identifier:   20:D2:94:1B:60:58:16:98:63:8B:CA:7F:38:2E:68:15:A6:98:F0:3E
Certificate issuer:       /CN=09440a93-986f-41da-8723-7b67f81bdbce
Certificate serial:       010D0C9F4328584F4989977EB22FBCD93F70B380
Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/dbc8f081-b1fe-3eef-b76f-82945f2e63d1.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19901
IP address blocks:        208.160.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 31 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:97:7e:b2:2f:bc:d9:3f:70:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=bdddae66-0786-478f-a5a1-e0e5135e124f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ac:28:f5:24:24:1f:2f:d9:ee:2b:1e:38:ac:
                    aa:bb:96:e5:c8:4e:ff:d0:ce:e1:19:e7:95:60:8f:
                    46:85:49:a2:e4:21:98:18:f8:d6:2a:80:23:a8:b2:
                    03:c6:98:24:6e:fb:8b:5b:f9:3b:9a:98:e8:49:e7:
                    6d:b1:85:aa:7e:ec:75:49:bd:57:21:7c:6b:97:48:
                    cc:56:45:a2:70:50:fd:33:68:bb:37:4c:ad:25:35:
                    1e:71:38:63:63:6e:54:1c:cd:91:2f:44:10:ff:16:
                    57:17:a9:ce:17:c7:7b:a6:77:69:52:e3:00:3e:c9:
                    53:e3:e8:8f:e7:d9:f1:c2:55:77:68:1f:ff:e0:dc:
                    43:68:4a:ef:5a:3d:eb:91:00:3b:ce:7c:0d:0b:40:
                    28:01:81:5d:3a:dd:6f:d3:a5:33:42:c0:08:c9:44:
                    64:fe:1b:aa:7f:0e:cd:cc:9c:ac:81:83:71:71:8a:
                    76:12:74:fd:1b:51:7a:d0:29:22:07:33:f6:2e:8a:
                    a1:0d:af:a0:36:c6:a8:72:62:aa:b0:c4:0d:3c:f3:
                    91:c7:80:05:7d:3b:40:58:0d:96:37:66:4c:f6:42:
                    ef:51:e0:19:be:f3:57:36:2c:64:68:c0:93:8f:64:
                    78:1f:80:e0:bd:d8:9e:3f:e2:85:f5:2a:fc:fb:24:
                    90:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D2:94:1B:60:58:16:98:63:8B:CA:7F:38:2E:68:15:A6:98:F0:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/dbc8f081-b1fe-3eef-b76f-82945f2e63d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl

            X509v3 Authority Key Identifier:
                keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.160.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:fa:77:8e:0e:e2:15:5b:fe:39:b4:b4:87:6b:12:ca:b4:5e:
         a9:c0:b5:87:7e:3b:43:de:69:da:65:42:aa:b1:53:a7:3c:50:
         e3:a6:a4:71:a5:6f:d5:bd:53:64:61:6c:31:1e:25:09:95:f5:
         5d:7e:e5:f0:03:1c:be:5a:d3:56:ec:cc:d8:74:0e:ba:b8:1e:
         ce:4e:60:88:d0:24:f5:14:ff:9e:96:17:ba:3c:28:87:e4:32:
         ae:6f:87:54:c1:37:1a:c3:3c:6a:d1:2c:1c:c2:04:e5:82:80:
         a7:c0:aa:8c:03:b9:19:f7:00:f0:c7:e3:ed:c3:6f:6d:7b:40:
         67:d2:f2:9f:ef:5d:6e:ea:58:36:00:c4:3a:38:23:f2:11:b2:
         1b:85:22:74:ed:a5:b7:c7:d5:db:da:f6:b7:81:2b:d6:ff:30:
         74:4a:f5:d2:00:d7:1d:37:f7:2c:fc:0c:99:9e:13:95:e5:4d:
         39:4d:ad:80:1f:29:1a:72:bf:c6:56:a7:1e:2a:0d:19:14:54:
         d0:1c:2a:dd:43:ed:d6:cd:0a:a9:e4:ad:ab:9c:65:26:53:ba:
         d1:66:ef:93:6e:59:1e:a4:61:8d:5c:12:4b:b4:38:73:e9:4c:
         d7:ae:ca:24:05:bb:e1:89:d5:b0:19:ce:63:5a:c9:41:ac:0c:
         7f:67:21:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 16:26:59 2026 by rpki-client