Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/0f216025-08f0-3ed8-84c5-9f7904503c8e.roa
File:                     0f216025-08f0-3ed8-84c5-9f7904503c8e.roa (raw, json)
Hash identifier:          xrivIqrh9kYaGJzpl9biASYhHwjxobSZhNDEQW18u9w=
Subject key identifier:   8E:FA:2C:05:A8:A6:E2:3B:07:06:67:0B:27:B8:A4:F2:80:4F:0E:20
Certificate issuer:       /CN=4ad5bd25-8afa-4e50-bb02-f6317eac7e05
Certificate serial:       010D0C9F4328584E296F03F115339A5B3CB60600
Authority key identifier: 46:BB:87:7A:ED:B3:EA:9B:8F:09:96:21:80:08:E9:2C:ED:4D:C2:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/0f216025-08f0-3ed8-84c5-9f7904503c8e.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     14717
IP address blocks:        72.21.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6f:03:f1:15:33:9a:5b:3c:b6:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ad5bd25-8afa-4e50-bb02-f6317eac7e05
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=5e7fd62b-c3e2-4135-8bea-7c86f72506e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3b:b3:82:ac:e7:c6:ed:f6:f2:7a:5c:1b:e7:
                    79:26:07:40:79:06:2d:e3:59:4c:f4:28:6f:97:d5:
                    e8:c4:a2:1e:4e:d8:17:2d:5e:ab:bb:6d:c1:76:0d:
                    b9:62:4d:a6:13:d5:4d:e2:57:63:f3:62:fd:3a:7b:
                    33:5c:0c:f9:36:67:e4:76:e8:c3:4a:93:c5:b1:a2:
                    85:5e:ca:db:4b:9f:5e:a4:ff:ee:33:dc:df:88:49:
                    5b:3e:c8:7b:68:47:18:c1:3d:e3:9b:7e:75:29:4b:
                    fc:61:f1:74:81:06:90:81:8e:ab:7a:21:3f:d8:01:
                    b0:4e:05:91:8e:3d:86:f4:17:01:a7:b4:77:59:a3:
                    d0:d9:7d:9d:18:12:fd:ee:e5:fb:3f:db:63:3c:0a:
                    af:8e:cc:e8:1e:0d:bb:49:dd:28:71:3d:6a:c3:d5:
                    f5:34:08:34:02:7e:40:91:bf:b8:2d:15:4c:1f:08:
                    63:c3:cf:4f:3a:cd:ec:03:e9:4a:ad:76:6d:72:8a:
                    16:31:d3:3d:68:9c:46:b8:54:5f:e7:c1:fc:50:9b:
                    1b:4d:09:ee:e7:4e:39:4e:38:9d:4f:84:20:e8:0b:
                    0f:ca:2e:7e:96:b2:71:32:98:07:88:7b:48:c5:42:
                    3d:02:50:5f:53:c0:49:43:3e:d9:7e:e4:c8:60:c2:
                    e3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:FA:2C:05:A8:A6:E2:3B:07:06:67:0B:27:B8:A4:F2:80:4F:0E:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/0f216025-08f0-3ed8-84c5-9f7904503c8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.crl

            X509v3 Authority Key Identifier:
                keyid:46:BB:87:7A:ED:B3:EA:9B:8F:09:96:21:80:08:E9:2C:ED:4D:C2:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.21.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:47:86:d9:37:fe:fc:fe:08:3d:c3:6a:34:b6:9b:23:13:15:
         58:51:77:b4:97:d3:69:96:2d:00:e8:26:9a:6a:68:e8:29:8a:
         bd:c1:7a:df:be:5a:fd:6d:c4:89:8f:ec:2f:79:89:42:11:8a:
         ef:8c:0e:0a:7b:57:b7:b7:83:4e:74:29:b6:22:7c:51:23:cb:
         2e:6e:c5:d6:98:0e:87:3f:b4:04:97:12:17:66:0d:1b:92:12:
         2c:62:19:f0:38:ad:f4:be:db:7c:86:25:ad:38:48:de:b7:3e:
         6a:81:bb:df:57:4f:f7:10:89:81:6c:2a:b4:e6:ed:57:d1:51:
         cf:29:ae:2e:02:30:60:50:76:e5:89:15:59:cc:90:89:1d:b8:
         48:1c:e7:3b:cd:2b:d9:0e:c4:8b:20:61:69:ff:12:71:b3:e7:
         14:d7:77:02:1b:c7:37:9c:33:36:4a:ca:70:a2:fe:82:99:bb:
         b7:29:9a:dd:7e:ef:65:29:f5:ab:ed:86:f1:1f:64:14:fe:4c:
         e2:38:cd:45:e9:3c:86:2f:99:e0:63:77:f8:f0:aa:2d:14:c6:
         bd:b4:76:61:0e:3a:ae:3b:f9:b9:75:05:2a:03:a9:6f:ba:92:
         d9:41:41:7a:a0:2c:be:cb:af:91:f8:e0:49:5a:04:3b:6f:df:
         d8:7c:e9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 12:51:26 2026 by rpki-client