Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/827760ae-41c2-3ed2-9864-89ad94ed59f5.roa
File:                     827760ae-41c2-3ed2-9864-89ad94ed59f5.roa (raw, json)
Hash identifier:          ldRsRgyQZtFVqXaXTS02hsy7DisMapympA3KSi1xal0=
Subject key identifier:   43:14:BB:9B:76:C0:38:CE:9C:38:A6:15:6E:08:6D:4A:9A:3D:5D:A0
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F4328584E376465B40FFEA1F5C1C35700
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/827760ae-41c2-3ed2-9864-89ad94ed59f5.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     16904
IP address blocks:        216.129.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:65:b4:0f:fe:a1:f5:c1:c3:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=05cb6431-be0a-4069-b596-63950a69fa67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e9:66:99:b5:74:23:a0:25:fc:1e:68:48:32:
                    b3:97:3a:9f:ea:c6:c9:aa:bf:2f:e4:bb:b2:2b:df:
                    39:f1:d9:eb:78:20:9d:ec:db:75:6b:20:e3:c0:fb:
                    3a:43:97:31:9e:38:92:eb:c8:fd:6e:dc:33:7f:c0:
                    d3:2f:de:16:37:69:2e:bb:f5:81:fa:d3:e7:cd:c1:
                    02:2f:7a:6e:f5:e9:93:81:70:85:df:5e:e6:70:54:
                    c0:57:25:da:59:bb:52:54:73:45:72:44:13:46:73:
                    74:9c:a9:f6:00:2a:61:c3:1b:4f:5a:e6:b8:a4:f2:
                    69:d2:fb:08:49:c2:09:b3:db:39:b0:b3:52:6c:17:
                    a6:69:56:d1:0e:40:75:21:25:86:1f:0e:a0:57:46:
                    b8:71:84:a2:5e:89:b8:41:67:91:be:54:25:dd:77:
                    84:a7:94:60:ad:15:48:63:f4:1b:d0:b2:5b:58:f0:
                    a6:e1:3e:b9:44:a5:54:99:44:17:1b:78:1d:99:b1:
                    06:9c:c5:bd:6a:be:66:5c:b2:8e:83:ec:6e:08:bd:
                    c4:af:03:50:cb:cd:bf:5f:f7:1d:69:5d:1a:15:b8:
                    d5:1f:11:d0:a0:25:d1:9c:eb:f2:bb:92:60:d4:a0:
                    a7:0f:28:88:c6:49:c6:4f:ff:bd:6c:fe:20:ad:79:
                    bf:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:14:BB:9B:76:C0:38:CE:9C:38:A6:15:6E:08:6D:4A:9A:3D:5D:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/827760ae-41c2-3ed2-9864-89ad94ed59f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.129.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:86:a9:c3:08:9e:cb:d2:29:30:37:8b:22:bf:e1:e3:09:65:
         72:b6:00:61:39:51:df:4b:1e:b1:c3:1a:aa:2c:b0:58:51:9c:
         72:56:3b:42:3a:cc:9d:d9:73:7d:98:f6:5a:5c:5a:62:1a:9e:
         9f:08:af:79:42:f2:87:f1:4b:ea:77:3e:0b:5d:ee:14:6d:e1:
         7a:a3:98:0a:1a:12:bb:e4:03:1d:15:29:cc:eb:a1:bf:e8:e8:
         20:4f:8b:e4:40:c5:41:38:eb:15:8d:13:74:0f:5d:3c:af:5b:
         c6:8e:45:34:5d:17:9e:8e:cb:6f:3c:6e:c0:8d:20:f3:ea:f0:
         64:29:d8:be:e5:32:3c:2c:ad:e9:09:c0:b2:e6:dc:b6:14:73:
         1b:e2:f0:0d:87:29:b9:89:34:3c:ee:2c:19:2b:a5:5b:d9:90:
         b7:0c:9a:3e:f0:0a:72:b2:dd:83:86:8e:64:5b:cc:7e:1c:02:
         22:48:25:6e:fe:a9:f0:6e:ab:df:2d:3c:44:17:50:ca:66:6d:
         26:c8:ad:f0:bd:90:c0:6e:1f:a2:5a:ed:96:84:93:64:f9:d2:
         96:b1:d2:b1:48:f6:75:5c:31:ae:30:7f:cc:4d:a7:39:a4:c8:
         6c:f4:31:d7:47:2b:20:f3:71:68:28:7e:69:d6:0c:32:0a:9f:
         be:7d:1b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 15:56:54 2026 by rpki-client