Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/c21abfa5-eb96-3f30-bc67-c4138423851d.roa
File:                     c21abfa5-eb96-3f30-bc67-c4138423851d.roa (raw, json)
Hash identifier:          rO59eOTu1hG69cSjAZotwFijjNnBhF/oBuJYzsszT04=
Subject key identifier:   5E:40:6C:5A:1B:47:CF:D0:1E:5D:58:50:B2:D9:E5:6C:63:42:EF:68
Certificate issuer:       /CN=916b9afb-9e46-4ab0-8029-7f4d1168bb37
Certificate serial:       010D0C9F4328584E059B5AA312AB38232FAB2CC0
Authority key identifier: A3:6F:EC:7E:8D:B6:99:E5:70:51:07:00:95:68:86:2D:6A:10:2D:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/c21abfa5-eb96-3f30-bc67-c4138423851d.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     400765
IP address blocks:        173.249.160.0/22 maxlen: 24
                          2602:fb15::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/916b9afb-9e46-4ab0-8029-7f4d1168bb37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/916b9afb-9e46-4ab0-8029-7f4d1168bb37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:5a:a3:12:ab:38:23:2f:ab:2c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=916b9afb-9e46-4ab0-8029-7f4d1168bb37
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=d393b131-4995-4a6e-9200-0630ea3096fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9f:87:ee:9f:ae:a5:c8:4c:47:e6:e3:b4:d2:
                    f4:ef:83:47:db:eb:81:d3:8c:b4:eb:e7:2b:ea:f4:
                    31:86:48:fc:4a:69:55:45:dd:10:07:1a:04:67:db:
                    74:00:42:7b:56:4b:a3:3b:21:56:74:36:23:1c:82:
                    1b:92:e9:b1:d1:2b:36:e8:2a:f2:de:87:16:7a:e0:
                    34:93:84:82:40:f7:76:20:a0:26:dc:66:a9:b0:4e:
                    ca:d6:bf:96:fc:e8:23:3d:ed:c3:ba:ec:b4:42:e2:
                    b3:06:9a:b9:72:da:78:a0:d4:cb:ea:c8:21:30:40:
                    83:41:bf:bd:09:5b:2a:05:f2:a3:2b:2b:75:8e:3b:
                    43:4c:2d:07:01:58:98:62:56:98:7b:67:2e:da:8f:
                    d7:0a:25:26:78:8b:b9:2d:3f:49:b6:3c:b2:81:59:
                    1e:72:15:61:05:87:38:3e:92:7c:b7:fa:ef:7b:98:
                    8b:22:16:dd:2e:30:88:09:13:6b:d1:07:52:7e:af:
                    d0:b4:a0:e9:bc:ee:29:02:3d:3d:27:73:b1:f2:2a:
                    9a:ab:a0:57:81:c7:64:f3:e3:1e:73:7a:65:96:20:
                    a7:63:1e:96:25:4b:a9:60:00:d3:cf:8c:f2:69:1d:
                    b5:24:9e:5d:da:d7:6b:5c:c2:41:f1:96:67:13:23:
                    64:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:40:6C:5A:1B:47:CF:D0:1E:5D:58:50:B2:D9:E5:6C:63:42:EF:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/c21abfa5-eb96-3f30-bc67-c4138423851d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/916b9afb-9e46-4ab0-8029-7f4d1168bb37.crl

            X509v3 Authority Key Identifier:
                keyid:A3:6F:EC:7E:8D:B6:99:E5:70:51:07:00:95:68:86:2D:6A:10:2D:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.249.160.0/22
                IPv6:
                  2602:fb15::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:a5:7c:5a:ff:b1:59:9d:c8:54:f7:a2:f2:1d:7e:cc:d3:23:
         78:70:63:fb:54:ce:7b:7c:48:24:04:ac:be:e0:7e:b5:be:b9:
         44:35:04:91:d0:82:fb:64:68:6c:63:f3:4d:b9:df:f3:af:33:
         77:9c:1e:26:cd:9a:bb:26:ee:66:de:33:82:b0:fe:1b:d2:25:
         a8:a8:86:07:a1:b9:77:08:59:6b:00:34:83:f4:bd:80:27:d0:
         f6:93:01:a0:c6:e2:6b:dc:31:7f:8d:4e:4f:a2:f2:98:1a:62:
         f4:b3:4a:f0:73:e5:41:22:16:3f:76:b0:0c:ee:f6:d8:50:62:
         2b:23:81:95:82:27:22:38:4e:6b:a6:5a:63:d8:41:c5:dc:b5:
         ba:94:cd:7a:18:04:53:c1:1a:4e:b5:00:98:10:bc:f5:6e:82:
         90:03:3c:54:c0:62:8a:c6:2f:4e:fe:1f:c3:18:cc:62:6a:82:
         3c:28:ca:08:fd:e5:4e:39:38:3a:d5:aa:0b:a2:37:93:6d:0d:
         06:8f:0d:c9:06:be:2d:9d:64:c7:ba:60:f3:62:d5:90:39:9b:
         76:c1:9a:0a:23:c9:7f:ee:41:65:7e:3f:cc:77:fd:54:7c:02:
         ef:6c:d8:7c:04:f0:b1:86:99:5f:17:67:d8:c9:35:2b:5c:ef:
         d5:82:d2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 18:50:14 2026 by rpki-client