Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/2b8fce89-fbde-3da2-8921-8e4ac2aaa243.roa
File:                     2b8fce89-fbde-3da2-8921-8e4ac2aaa243.roa (raw, json)
Hash identifier:          nX7p2m5AmD8TQwIhoPNu6VxA3sg+gxhhMi0sjVBFRkY=
Subject key identifier:   83:EB:87:AF:8C:72:34:2C:17:19:E5:6D:04:1C:B8:31:16:46:C2:D0
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584DDE85C021832DAB73EC10D100
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/2b8fce89-fbde-3da2-8921-8e4ac2aaa243.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        216.122.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:85:c0:21:83:2d:ab:73:ec:10:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=5b0d78cc-e940-4f7e-9519-0c8b126e105e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:bb:1d:45:3e:41:f0:b8:fd:ba:bf:db:6c:08:
                    f0:82:67:ce:91:eb:09:c1:f5:6c:0d:0f:b1:6e:cd:
                    af:ab:92:36:fe:46:0c:65:cc:ef:f7:f9:91:5e:1b:
                    fd:b9:51:b7:89:11:8a:4a:d3:9b:1d:da:42:b8:11:
                    3a:9e:ee:98:75:76:77:fd:b2:38:ec:b6:bc:d2:55:
                    d0:7b:e3:94:4c:1c:be:ce:ce:3a:50:54:13:65:bf:
                    e8:7f:0a:b3:37:b5:21:69:58:1d:3a:6c:ed:b2:a7:
                    d3:7e:9c:a7:bc:ff:62:56:bd:2e:61:21:37:65:b1:
                    0e:49:1c:12:5b:17:6f:cc:81:15:22:a5:bf:af:ae:
                    b6:8e:45:69:1b:ee:d8:f2:f9:ad:b8:79:f1:78:70:
                    60:67:63:57:e3:4d:e5:52:2c:9b:60:9f:4b:ef:73:
                    61:a9:e2:1b:1c:32:14:a3:03:46:1b:20:9e:0c:97:
                    0e:06:7c:01:41:7b:8c:38:23:89:70:1c:e0:11:0b:
                    6c:99:79:21:6d:74:3a:16:9e:36:c1:6b:30:92:fa:
                    5c:bb:7f:1e:5b:c7:5a:0b:a3:94:c7:06:ae:b8:dc:
                    1f:52:7e:d9:12:4e:c4:e6:bc:cd:e5:e3:2b:6f:f2:
                    9e:98:ea:68:d5:4a:db:3f:fb:20:a6:2a:ae:37:e9:
                    9d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:EB:87:AF:8C:72:34:2C:17:19:E5:6D:04:1C:B8:31:16:46:C2:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/2b8fce89-fbde-3da2-8921-8e4ac2aaa243.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:93:f4:15:0b:c2:01:91:71:d4:99:b8:34:bd:60:bb:52:81:
         35:9a:7e:33:f1:31:c0:4f:35:66:ef:82:2e:1e:f5:88:e6:92:
         48:0e:82:55:41:08:1c:82:33:99:e3:85:1c:69:dc:30:7b:a0:
         cd:04:0e:a9:04:c8:bb:d9:02:f0:bb:48:64:0e:d9:a1:fa:9f:
         4a:c1:ac:6d:23:22:2c:f4:57:77:d7:69:7d:39:0d:d4:85:11:
         ee:34:ae:e2:e0:6c:d2:3f:9e:19:60:37:93:fa:86:28:7f:b7:
         c7:7d:87:99:b7:ed:b0:29:c1:d3:be:28:94:ea:05:e0:43:4d:
         8e:59:ad:d8:a8:18:3d:c5:be:c9:c8:3f:c0:75:71:82:a0:1a:
         a7:85:86:99:ef:68:76:ed:e5:46:bf:a2:a6:9d:5f:62:fb:9b:
         ca:53:bf:d1:59:a8:88:88:0c:c1:c5:71:a5:c9:b6:d1:7f:79:
         81:9b:6c:ae:1b:95:e4:65:27:72:72:df:86:76:83:09:22:fe:
         91:43:59:df:ee:0c:42:34:f3:f4:40:9c:a9:ea:20:52:9e:a2:
         96:8f:09:0f:09:5a:48:e1:04:b4:cd:f2:9e:63:43:81:30:28:
         92:8b:3d:58:47:f0:b2:1b:e7:e8:ea:a8:1d:d3:2f:75:7a:57:
         6d:ea:a1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 11:53:30 2026 by rpki-client