Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/c51db7b0-d443-3350-bd1d-cc0d3d232304.roa
File:                     c51db7b0-d443-3350-bd1d-cc0d3d232304.roa (raw, json)
Hash identifier:          w9yBinsNM9Hk2xkPdZuHTsKH4Rcj/xcc7rE3VA6wtMI=
Subject key identifier:   AD:87:3A:A7:F5:C8:B4:D2:85:45:B9:8B:37:3E:1C:C9:5C:35:1E:0C
Certificate issuer:       /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
Certificate serial:       010D0C9F4328584EA2DFBE6DBD9078BF6ABB2080
Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/c51db7b0-d443-3350-bd1d-cc0d3d232304.roa
Signing time:             Mon 27 Jul 2026 09:00:12 +0000
ROA not before:           Mon 27 Jul 2026 09:00:12 +0000
ROA not after:            Sun 25 Oct 2026 09:00:12 +0000
asID:                     3756
IP address blocks:        199.109.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a2:df:be:6d:bd:90:78:bf:6a:bb:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
        Validity
            Not Before: Jul 27 09:00:12 2026 GMT
            Not After : Oct 25 09:00:12 2026 GMT
        Subject: CN=1b6891d1-6195-49fa-9726-c1ac11844219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3c:47:6a:04:33:19:60:fd:aa:2b:09:0d:db:
                    e9:61:a5:5e:38:0f:50:c3:dc:bb:b2:29:a2:eb:1f:
                    bc:87:82:87:1d:35:6f:26:40:eb:f5:60:c7:0f:41:
                    d2:f5:2f:b9:c7:23:2a:8e:fe:3d:8c:31:7b:ec:23:
                    6b:70:0f:30:1e:75:41:7d:5d:90:01:5d:42:af:c3:
                    f8:60:7a:7f:fd:e0:fd:76:a5:a8:0b:0c:24:48:7a:
                    ca:69:ae:87:ac:72:8e:0c:f9:b3:d1:79:00:dc:e9:
                    ea:09:6f:82:1d:d5:4f:b4:db:2e:79:8e:dc:14:77:
                    62:ff:0d:42:b7:b3:13:53:42:ed:7f:06:33:0f:27:
                    bb:cf:5c:53:bb:c4:64:aa:a1:2b:f5:d8:c6:84:83:
                    08:be:4c:4e:86:d1:73:b7:ad:73:7e:6c:a7:80:63:
                    3d:9a:a5:5f:8b:fb:f1:da:78:28:94:37:eb:96:77:
                    09:64:e9:6c:90:9d:7d:f5:f7:54:f4:97:36:ca:80:
                    63:95:9f:e9:9c:7c:7c:f5:29:a9:01:c4:9e:fe:17:
                    96:a0:f0:97:88:8e:8e:6f:84:e0:f8:98:4c:2e:80:
                    8a:9d:82:a2:90:b8:e2:02:24:b1:32:4f:29:fb:f1:
                    11:90:e6:8b:86:3b:38:35:90:64:aa:38:06:b1:fe:
                    c6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:87:3A:A7:F5:C8:B4:D2:85:45:B9:8B:37:3E:1C:C9:5C:35:1E:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/c51db7b0-d443-3350-bd1d-cc0d3d232304.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl

            X509v3 Authority Key Identifier:
                keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.109.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:12:58:c2:69:07:ab:86:c5:6d:87:7b:b7:c4:7d:b3:82:ff:
         fd:6f:3a:49:5c:b5:f3:5b:e3:3f:fb:57:41:15:c7:e2:87:ef:
         8a:99:c2:2e:19:b8:6d:59:9c:36:59:b1:d8:7b:03:bf:d3:2b:
         3c:22:e5:56:33:d4:fb:c5:8f:fc:86:79:dc:37:d0:3c:d8:1e:
         cb:98:b0:da:b8:13:83:d0:ce:5e:7d:de:9e:b5:82:a2:64:e7:
         4f:3d:19:d6:b6:33:3a:67:06:ed:ba:c6:0a:e9:24:a1:79:6c:
         56:19:af:3a:d7:85:77:10:8c:aa:81:06:5d:02:55:7d:c0:39:
         48:59:50:27:b8:6c:58:71:4f:65:7a:61:3e:89:00:05:26:2a:
         fc:f9:86:02:45:07:ae:c1:90:f3:fe:49:eb:57:60:37:0b:e5:
         7c:ff:69:e5:61:96:ab:7b:ab:ca:03:59:c7:6f:60:ec:c2:29:
         4f:1c:0a:aa:6b:0e:4b:6d:7a:e2:23:22:ff:2a:5d:34:18:55:
         1a:83:f3:3e:94:a8:f0:d8:7c:70:73:33:ae:58:35:30:e3:73:
         f3:d0:8c:16:6a:50:30:48:34:6f:44:67:99:40:15:1c:88:fe:
         1c:f6:0e:31:0d:fa:5a:8b:bd:73:63:b4:f4:24:2f:ad:52:50:
         90:1c:68:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:16:28 2026 by rpki-client