Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/c4106caf-a2e7-3e4c-91b3-b1e887c6a9c7.roa
File:                     c4106caf-a2e7-3e4c-91b3-b1e887c6a9c7.roa (raw, json)
Hash identifier:          zfz2vSm7YcBDK//CWkHbMMnzIV34y243uGzBgS+BdIs=
Subject key identifier:   F1:0F:82:DC:A6:A5:67:8F:3E:2E:82:72:D5:2E:F6:D9:4C:B6:A4:DD
Certificate issuer:       /CN=21adcbb8-b500-460f-90cb-bca0525aabcb
Certificate serial:       010D0C9F4328584DDD2079788A6A937791EF5300
Authority key identifier: 62:2B:0A:1E:7B:53:D2:E2:2B:6B:5A:FF:1D:C1:AA:ED:0A:06:69:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/c4106caf-a2e7-3e4c-91b3-b1e887c6a9c7.roa
Signing time:             Sun 17 May 2026 13:00:32 +0000
ROA not before:           Sun 17 May 2026 13:00:32 +0000
ROA not after:            Sat 15 Aug 2026 13:00:32 +0000
asID:                     396982
IP address blocks:        170.176.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:dd:20:79:78:8a:6a:93:77:91:ef:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21adcbb8-b500-460f-90cb-bca0525aabcb
        Validity
            Not Before: May 17 13:00:32 2026 GMT
            Not After : Aug 15 13:00:32 2026 GMT
        Subject: CN=83e98fa7-9c6a-455e-8259-08d31a51614c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:53:82:9f:39:5f:01:9a:5e:20:3d:68:1e:1e:
                    4c:31:ea:e6:da:dd:15:0f:ba:8a:98:89:fa:f3:04:
                    6e:58:6c:3f:54:fc:79:88:6f:4f:65:4d:1d:fc:ba:
                    f9:e7:0b:bb:d1:0e:9c:69:2a:1d:f3:11:1f:8e:94:
                    13:5e:df:78:6d:35:e7:48:7d:63:b1:01:c9:65:cb:
                    9a:2a:48:85:6e:71:54:9e:0c:97:8f:d6:bf:1d:88:
                    87:37:55:61:17:1c:15:9a:49:73:97:da:a7:1b:24:
                    ad:be:14:26:20:6e:48:75:4d:66:4c:a2:d4:7f:13:
                    e9:b1:9a:44:22:59:2e:4b:1e:c2:21:aa:56:24:f7:
                    89:93:ba:64:04:34:c5:61:f8:df:6e:1a:ed:1f:6f:
                    80:a8:c7:10:7a:dc:7f:52:c5:25:ad:dd:12:48:bd:
                    53:57:64:28:c9:4d:19:1f:4d:c6:a4:b3:b2:04:26:
                    91:a8:4f:26:11:58:8a:ac:79:a5:47:56:86:fd:d1:
                    06:f1:bf:70:5e:64:05:20:30:8d:8a:6d:ff:8b:5f:
                    93:b3:7a:eb:4b:b5:e2:74:01:63:3e:6c:04:2a:d9:
                    2f:84:a3:4a:90:d6:ca:da:94:65:cf:5f:ca:35:09:
                    39:22:03:6f:b3:7a:c5:ea:9c:4e:01:16:fe:96:ef:
                    63:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:0F:82:DC:A6:A5:67:8F:3E:2E:82:72:D5:2E:F6:D9:4C:B6:A4:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/c4106caf-a2e7-3e4c-91b3-b1e887c6a9c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.crl

            X509v3 Authority Key Identifier:
                keyid:62:2B:0A:1E:7B:53:D2:E2:2B:6B:5A:FF:1D:C1:AA:ED:0A:06:69:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.176.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:3e:f8:89:9b:37:70:6f:d4:c0:60:70:4f:cc:19:e1:8d:d0:
         94:0c:a5:96:6c:d3:1b:ac:1c:23:64:aa:cc:e0:63:ae:52:1c:
         4c:fb:82:18:01:60:f0:20:ae:58:9d:ef:2a:8b:85:f1:d1:ba:
         e7:6c:f1:bf:bc:26:63:bd:ce:2b:ba:ae:26:1a:26:f5:22:e1:
         b9:d1:af:79:ec:fc:52:2c:e7:90:92:7f:43:28:93:3b:34:a1:
         f0:c0:67:be:cb:e0:0a:0f:a4:e1:61:29:fc:f3:b3:47:05:35:
         b2:90:db:77:de:c3:8f:6e:66:fc:27:f4:de:61:25:ac:0f:0a:
         48:66:92:cd:56:a4:47:7d:b1:99:72:ea:23:02:66:33:d9:36:
         26:43:28:c5:aa:6e:e6:53:82:6b:09:67:c2:9e:b5:e8:7c:f3:
         28:26:81:21:a5:cb:4e:5e:6e:2c:dc:36:37:d3:dc:da:0d:c7:
         e5:da:fe:d4:7d:12:ed:76:08:3e:e1:e2:3e:91:92:b1:53:3b:
         1d:92:2b:42:54:a8:79:b7:a8:6d:6c:81:d9:08:6a:7d:9a:d8:
         99:78:bc:6b:6a:17:2c:45:5b:e6:5b:79:0c:05:bd:bb:a0:97:
         f6:2f:d3:d2:c1:c2:4b:cc:4e:f6:9f:02:48:e9:9b:89:e7:ac:
         f2:af:6c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 20:17:47 2026 by rpki-client