Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/99490edf-36b9-3f8a-8eb9-56548fd8ed7d.roa
File:                     99490edf-36b9-3f8a-8eb9-56548fd8ed7d.roa (raw, json)
Hash identifier:          6wS0WbXZOtakjZgD9iXuhalNqgUOngsUc4paHrP4CQE=
Subject key identifier:   09:DE:5B:A0:50:DC:5B:E6:56:84:0C:2C:93:0E:67:AF:E7:BF:35:C8
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584E0D84272035549D855F5EB300
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/99490edf-36b9-3f8a-8eb9-56548fd8ed7d.roa
Signing time:             Wed 03 Jun 2026 21:00:12 +0000
ROA not before:           Wed 03 Jun 2026 21:00:12 +0000
ROA not after:            Tue 01 Sep 2026 21:00:12 +0000
asID:                     64267
IP address blocks:        167.160.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0d:84:27:20:35:54:9d:85:5f:5e:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun  3 21:00:12 2026 GMT
            Not After : Sep  1 21:00:12 2026 GMT
        Subject: CN=4d99fd10-0bda-44d0-9ebd-7659a3d81c62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ed:93:f3:3e:0e:43:0d:bc:3f:67:4a:b5:8c:
                    e0:35:c2:bb:11:ad:d7:29:e7:35:2a:e0:ad:fa:b1:
                    06:a1:00:96:11:ff:51:e4:e7:f3:e2:b4:f9:14:ba:
                    8b:5d:c7:05:9b:a5:f0:d8:6b:76:5d:1b:e0:86:fd:
                    ce:95:69:37:cc:a6:b1:11:f8:75:01:bb:20:07:b2:
                    06:93:76:04:a3:ee:b5:e3:5c:20:44:ea:2b:00:dd:
                    24:91:40:ae:3c:33:96:aa:28:e8:17:d8:91:78:43:
                    93:4d:24:77:80:ca:53:86:2e:98:86:8b:7d:a6:dc:
                    49:67:75:51:86:a2:bf:62:64:d2:70:8b:97:b5:68:
                    a7:ac:28:6e:24:4e:d2:0f:9c:da:13:e6:88:43:06:
                    11:f3:b0:f6:6e:c8:e8:57:8b:58:6d:58:a0:f6:bd:
                    98:84:99:3f:13:96:42:8d:13:43:7b:54:63:23:92:
                    cb:4c:25:72:ba:d3:f3:f2:1b:60:3f:a7:9c:99:eb:
                    c0:af:55:c0:42:39:6e:6f:18:d5:5f:52:55:79:fe:
                    58:e4:ff:d8:2f:6b:f1:ad:99:bd:5e:46:98:d6:f0:
                    52:bb:ff:5c:4d:19:59:5d:a1:4c:33:32:02:53:4d:
                    6f:ee:29:89:fb:b0:40:4c:f2:56:5b:e9:a1:83:ae:
                    44:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:DE:5B:A0:50:DC:5B:E6:56:84:0C:2C:93:0E:67:AF:E7:BF:35:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/99490edf-36b9-3f8a-8eb9-56548fd8ed7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.160.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:e9:08:ee:d6:b0:f1:61:b7:5e:77:68:47:91:25:bb:a7:96:
         87:e3:f0:9d:a0:8b:81:7f:3e:f3:2e:14:d7:3c:6b:da:99:21:
         3a:e2:e0:e6:13:74:72:7b:47:5a:ff:2f:f2:67:17:7d:0b:4d:
         66:c5:4c:0d:5a:02:97:78:dc:03:27:f1:2a:2e:08:f8:46:8a:
         17:63:6a:6b:34:5e:3a:ca:d1:d3:b6:83:a4:09:99:6c:04:52:
         a8:0c:af:d6:2a:b6:db:25:cc:2f:b1:f0:c4:2c:56:89:bf:04:
         7c:b5:1e:68:21:35:6f:a2:0b:f3:96:a5:ff:d9:df:7a:2c:69:
         34:a6:9a:e2:f6:65:40:a2:18:bf:8e:0f:45:29:2c:fa:e1:52:
         31:46:df:e6:19:1e:dd:97:69:e2:c3:a5:ad:38:9b:52:d3:82:
         9e:45:da:72:00:dc:00:1d:46:39:43:3b:c1:ab:35:43:b9:2b:
         14:a5:f9:9c:84:af:48:fa:c3:e4:97:7b:2c:9b:82:72:89:cd:
         3b:ad:66:d3:4e:2e:b5:a0:09:d7:ef:33:e3:b5:7c:62:57:c3:
         36:9d:44:41:a0:e7:74:72:df:10:36:7b:72:e0:d2:e4:5f:d4:
         35:06:14:a6:a8:c6:5c:40:72:fc:9a:fe:c7:9f:64:54:e3:78:
         0d:8f:8b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 23:23:05 2026 by rpki-client