Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0ab4f47a-c323-3cd1-be3f-9758762a20f6.roa
File:                     0ab4f47a-c323-3cd1-be3f-9758762a20f6.roa (raw, json)
Hash identifier:          /8H/SLpjDbzSRsZonabT4eBEJiwt63i/spqY8QzTxAM=
Subject key identifier:   26:BD:B8:AB:3A:8F:28:18:6D:8A:53:3F:CE:93:7D:2A:89:82:DB:05
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584E0C1ED9146FB083078574CB80
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0ab4f47a-c323-3cd1-be3f-9758762a20f6.roa
Signing time:             Wed 03 Jun 2026 09:00:13 +0000
ROA not before:           Wed 03 Jun 2026 09:00:13 +0000
ROA not after:            Tue 01 Sep 2026 09:00:13 +0000
asID:                     64267
IP address blocks:        216.180.104.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0c:1e:d9:14:6f:b0:83:07:85:74:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun  3 09:00:13 2026 GMT
            Not After : Sep  1 09:00:13 2026 GMT
        Subject: CN=bee9f640-3979-4b51-99c4-82a98b65ed41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:9e:c0:42:19:cc:26:ac:74:0e:9f:37:be:8a:
                    a1:63:a3:d4:1d:15:06:e9:40:29:e3:2a:7f:8b:05:
                    57:76:17:66:3a:41:ce:67:94:36:9b:bc:bb:85:27:
                    b4:e0:85:0e:6c:8f:62:bb:87:f4:8e:01:35:1c:a1:
                    98:bc:47:04:b1:e1:e5:34:1e:cf:7a:24:ee:0f:6b:
                    4f:1a:69:44:f5:dc:34:c8:e8:20:4c:0e:82:ce:7f:
                    f9:65:a0:b4:39:dd:b9:96:d5:6f:da:02:76:93:d8:
                    84:ba:30:25:7e:0c:b5:4b:be:df:7e:3b:6b:55:48:
                    41:63:21:bb:04:ad:9d:f5:2b:aa:6a:cc:19:29:8f:
                    c4:4f:2c:51:24:d0:26:6a:26:06:74:70:32:ee:70:
                    b9:05:c4:5f:79:ec:55:08:6c:6a:bd:91:76:d7:5b:
                    e1:33:ac:56:a3:30:d9:e0:01:d5:3d:d8:cf:fa:d0:
                    49:d7:6d:39:fa:06:cb:71:c8:d5:24:aa:5c:f6:84:
                    0c:3f:9f:66:1e:dc:2b:6c:eb:63:35:61:49:f8:1b:
                    b2:40:3b:6e:60:fd:23:e1:5d:1b:7b:5d:cc:2b:2e:
                    86:69:e6:fa:13:3e:93:89:82:b3:85:07:53:63:66:
                    f3:d2:dc:ea:54:76:f1:71:dc:50:f7:ad:88:10:b1:
                    f5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:BD:B8:AB:3A:8F:28:18:6D:8A:53:3F:CE:93:7D:2A:89:82:DB:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0ab4f47a-c323-3cd1-be3f-9758762a20f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.180.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:63:be:7d:d4:4b:ab:b8:56:5e:a5:06:85:35:4a:cf:3a:b9:
         4e:2b:f9:85:ff:3a:24:7f:d4:f4:19:06:95:27:4a:c0:48:af:
         45:f3:d6:f7:e0:2c:d8:5e:37:5a:4e:40:dc:e5:c9:66:47:a2:
         96:2e:32:eb:e1:8f:4c:60:f7:36:46:68:cb:43:42:b7:eb:ac:
         6a:2b:d6:b1:50:4f:aa:3e:82:49:a0:2b:a4:0c:57:04:15:ef:
         40:71:1d:49:c4:71:0a:ad:04:16:83:18:66:13:ec:50:a6:31:
         b2:0d:de:01:cb:ce:77:0b:2e:0b:69:36:02:ca:6c:ed:90:2c:
         17:0f:c6:da:ad:d6:d8:58:08:4e:a0:89:7d:0c:a4:5c:09:f9:
         21:9f:b8:15:eb:33:e8:24:b9:01:a2:d8:d7:b4:db:21:23:67:
         19:57:6e:0e:b1:a2:d0:59:02:db:63:9e:03:04:98:25:53:cb:
         f6:ca:a5:15:96:0e:0f:78:74:50:f7:ab:b2:76:59:b1:95:7b:
         3a:ee:10:78:5f:cd:49:68:c5:5f:92:d9:2c:6c:56:26:66:69:
         d4:40:cf:ac:4f:a8:87:50:13:55:8c:07:11:25:42:be:f1:e6:
         c0:f1:b1:4b:cd:e1:ed:49:e1:20:ac:48:eb:bc:db:da:97:41:
         75:8f:6b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 23:24:08 2026 by rpki-client