Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/3a4f7762-0e9b-325f-ace1-81d1e1f109de.roa
File:                     3a4f7762-0e9b-325f-ace1-81d1e1f109de.roa (raw, json)
Hash identifier:          rjVE0JVG5E3ysAiLF0Iag8VXZjAJBTsv6fWixjisVK4=
Subject key identifier:   02:55:B1:DF:5D:58:B1:F3:1D:C2:42:D7:41:0F:25:3A:F6:93:55:98
Certificate issuer:       /CN=c178d21b-9bf0-4172-9ece-4a4d84fc66e7
Certificate serial:       010D0C9F4328584E1B798D6D781B89AC03845780
Authority key identifier: 98:1B:22:24:7B:4C:CC:8D:BA:0F:59:A9:01:99:8A:D9:CF:BE:CF:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/3a4f7762-0e9b-325f-ace1-81d1e1f109de.roa
Signing time:             Mon 08 Jun 2026 21:00:12 +0000
ROA not before:           Mon 08 Jun 2026 21:00:12 +0000
ROA not after:            Sun 06 Sep 2026 21:00:12 +0000
asID:                     26356
IP address blocks:        216.86.160.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1b:79:8d:6d:78:1b:89:ac:03:84:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c178d21b-9bf0-4172-9ece-4a4d84fc66e7
        Validity
            Not Before: Jun  8 21:00:12 2026 GMT
            Not After : Sep  6 21:00:12 2026 GMT
        Subject: CN=0030ac36-0bc6-4b68-a991-4f38e0aa1ab6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:aa:e9:26:63:ac:89:3a:00:13:70:fd:3a:09:
                    f3:f5:eb:24:57:77:f4:47:59:0e:40:e1:e5:6e:af:
                    e1:bb:eb:8e:85:e1:4e:d6:9e:eb:e9:57:54:52:39:
                    75:38:c4:f3:a6:7a:7f:61:f9:89:16:f1:37:41:f4:
                    72:f8:dc:f8:18:a4:0a:e8:90:4e:8b:b9:b3:e4:d0:
                    39:26:16:3f:1a:39:34:50:da:99:73:9e:38:bf:a0:
                    36:5f:23:6d:8a:ac:1b:6a:99:61:dc:1e:24:9e:a6:
                    65:6f:38:06:11:95:bc:c8:2f:7f:2b:d4:8b:47:03:
                    0b:ff:7f:a5:53:6a:a3:03:fa:83:7c:79:51:d0:f3:
                    56:9c:2d:ca:d1:aa:a0:b2:ac:00:35:21:f5:1a:04:
                    cb:74:02:75:8e:cd:1d:07:67:d6:f0:77:07:ff:9b:
                    2f:f7:35:bf:13:73:6a:c5:e4:56:d2:e3:fe:52:0f:
                    88:28:13:a0:e0:4d:b1:c8:8a:06:2a:36:f0:8d:0f:
                    d2:19:70:85:32:e9:a9:61:ea:73:d0:eb:70:3b:35:
                    fe:9b:d6:3a:5e:0a:d8:9a:4b:69:ea:fe:f7:3b:17:
                    34:b5:53:10:00:9b:5f:36:4e:19:10:7e:28:4a:15:
                    15:1b:ad:0f:1d:a0:2b:f5:fd:6a:eb:93:6f:5e:a7:
                    b1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:55:B1:DF:5D:58:B1:F3:1D:C2:42:D7:41:0F:25:3A:F6:93:55:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/3a4f7762-0e9b-325f-ace1-81d1e1f109de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.crl

            X509v3 Authority Key Identifier:
                keyid:98:1B:22:24:7B:4C:CC:8D:BA:0F:59:A9:01:99:8A:D9:CF:BE:CF:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.86.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:18:11:ea:fd:f6:a4:a4:1e:a1:62:8c:ab:91:41:cb:fe:36:
         7e:ff:b3:82:ed:de:8e:1a:4e:b9:d3:da:7d:42:02:a2:a7:5d:
         32:25:a0:4e:75:a8:e0:3e:a0:26:b5:28:c9:23:2f:4e:55:08:
         c1:dc:d8:38:e3:1c:9f:20:17:e3:5b:2c:92:90:85:1b:78:5b:
         2c:56:5f:de:c5:5a:f3:eb:45:7c:e7:26:e1:74:47:e0:b8:d4:
         3f:ed:6f:43:1e:cc:40:ec:39:a5:2d:e4:85:f2:b2:7b:25:4e:
         94:d5:9e:98:4a:ba:e1:3a:cf:b1:a8:32:ed:25:8a:99:fc:57:
         1a:3a:8e:91:86:ea:8a:0c:aa:41:24:e6:35:6a:fe:4c:e5:94:
         df:84:3b:76:d1:a8:bd:e3:f8:a3:d1:ab:d5:01:3d:b1:fb:f0:
         ca:cc:69:b7:13:44:f1:60:00:72:08:a2:6a:c5:e9:a0:ba:a7:
         30:f2:d4:31:dd:76:ed:5d:80:f3:57:bb:c4:4f:a5:50:b6:d2:
         38:25:38:07:09:90:51:86:02:a4:f6:aa:70:81:eb:fe:de:31:
         82:b8:8c:71:96:d8:d4:1c:d8:d6:27:00:2a:16:34:07:7e:a1:
         ae:28:75:1c:a6:fa:49:3b:ae:2e:53:9b:f9:5a:d6:cd:0a:31:
         6d:e2:2d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:10:39 2026 by rpki-client