Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/42cbc37a-35a3-3ca9-96c7-d9434c1642ba.roa
File:                     42cbc37a-35a3-3ca9-96c7-d9434c1642ba.roa (raw, json)
Hash identifier:          MF8DI+EfcRL+puPNkyqTwC3KO5jBAanyHyQ1K30hPXE=
Subject key identifier:   E6:16:95:E7:AA:B9:6F:E6:D8:0C:C5:86:5C:C0:9D:84:39:37:C1:F8
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584EC0A70EED8FC837B78F7F3C00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/42cbc37a-35a3-3ca9-96c7-d9434c1642ba.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     47007
IP address blocks:        216.10.16.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:0e:ed:8f:c8:37:b7:8f:7f:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=7e69384b-d49b-4613-9350-5fa6762717d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:20:88:f9:b3:37:17:1c:e1:a6:e0:62:5f:f7:
                    39:5d:09:4c:4e:e3:0e:c4:4d:a3:40:a4:74:83:6a:
                    70:74:9f:7d:08:97:f9:84:c4:94:ed:5c:f3:56:de:
                    f0:9c:5a:99:bd:47:6f:57:17:24:43:6a:ea:b3:50:
                    57:b1:9e:c1:15:fd:73:be:6d:df:a9:d9:a0:80:6f:
                    b3:d0:52:e5:f1:89:9f:92:3a:8f:aa:74:02:92:d3:
                    a8:e8:9b:fc:04:71:9a:88:87:b4:b3:2d:ab:d6:1b:
                    cf:6d:11:5b:8f:e7:ab:e6:20:0b:39:9e:04:a5:63:
                    d6:7a:2e:75:c5:12:ba:fe:f2:15:68:bd:a1:b3:2e:
                    1b:fe:46:66:30:70:6b:e8:7c:b7:00:29:ce:f4:36:
                    e6:3a:7f:0f:49:89:28:19:66:1a:b4:5c:94:84:67:
                    66:e3:09:fa:fd:be:f7:a0:93:d8:61:6f:bf:da:6e:
                    dc:70:3d:ab:34:1c:f9:75:9c:3d:a5:bf:8c:06:ae:
                    73:5d:ef:70:53:79:46:b6:5b:59:8a:16:41:d0:e9:
                    38:f7:9c:69:1b:27:13:75:29:f2:91:bd:21:ca:84:
                    3b:9b:56:49:ea:ce:c7:49:36:73:fa:10:e1:39:d3:
                    0e:10:3d:2f:e2:6e:2e:83:b8:d8:45:02:f1:9d:d8:
                    a8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:16:95:E7:AA:B9:6F:E6:D8:0C:C5:86:5C:C0:9D:84:39:37:C1:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/42cbc37a-35a3-3ca9-96c7-d9434c1642ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.10.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:fa:04:ed:5e:a8:ca:c1:f4:18:ff:d0:41:06:43:11:e7:d1:
         f1:6a:70:34:a9:de:bf:90:30:4c:bd:75:63:55:3e:7c:41:bf:
         c9:75:a8:c4:d8:78:1d:f2:15:57:b0:20:13:e7:12:a9:61:1c:
         33:28:03:9a:7c:b3:3a:6e:4c:4e:1a:61:95:8b:96:ac:83:f1:
         73:30:c1:a1:68:cb:8a:42:27:b1:bd:fe:31:92:86:33:0b:57:
         16:70:2a:26:73:07:32:f4:c5:a7:a9:ba:86:d6:73:a5:73:18:
         2c:40:1b:11:c3:87:44:c4:33:bd:a9:79:1c:1c:49:6d:d8:11:
         e9:1e:a3:05:e7:4d:9d:15:43:0d:31:08:3b:28:e2:1e:56:3c:
         50:07:57:d4:c9:86:e7:87:be:8e:d0:76:da:e5:96:5a:03:d6:
         23:49:58:c0:d8:59:41:15:8e:ec:ce:28:44:55:58:80:4f:18:
         13:5a:d1:7c:4d:53:d3:02:05:cc:04:46:45:70:b1:de:07:7d:
         52:60:63:0e:4d:87:b4:9c:ac:47:a1:7c:91:2b:b2:df:6c:ca:
         3f:a1:0d:be:e1:f1:0f:4d:a4:7a:ec:3d:1b:ff:5d:a6:13:a8:
         69:56:8a:ce:ce:b5:17:c7:69:a0:07:98:47:c3:69:63:39:61:
         6f:4c:cf:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 04:07:56 2026 by rpki-client