Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/0dac1b9e-e005-3716-ba57-667e5c48f339.roa
File:                     0dac1b9e-e005-3716-ba57-667e5c48f339.roa (raw, json)
Hash identifier:          MZfzXJqSLuL79XGso8MoFwbSfELadagHgEVgrMG5gxM=
Subject key identifier:   BC:0D:7B:B4:B0:98:99:50:2C:26:B4:AD:61:14:0D:B0:4E:5C:31:CE
Certificate issuer:       /CN=00b089f9-bcf9-4483-badb-c4cf8ca6f9e1
Certificate serial:       010D0C9F4328584CC7774C380DAFC374FECDE9C0
Authority key identifier: 63:78:09:E9:4C:B7:72:04:58:F4:A5:9E:8F:7B:B4:91:9A:DF:36:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/0dac1b9e-e005-3716-ba57-667e5c48f339.roa
Signing time:             Sat 07 Feb 2026 02:00:31 +0000
ROA not before:           Sat 07 Feb 2026 02:00:31 +0000
ROA not after:            Fri 08 May 2026 01:00:31 +0000
asID:                     27370
IP address blocks:        216.163.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c7:77:4c:38:0d:af:c3:74:fe:cd:e9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00b089f9-bcf9-4483-badb-c4cf8ca6f9e1
        Validity
            Not Before: Feb  7 02:00:31 2026 GMT
            Not After : May  8 01:00:31 2026 GMT
        Subject: CN=7d52ac27-42f8-41b7-89b0-0f8c73ac5b28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f6:bf:b7:19:b4:d6:67:83:1c:f7:92:eb:e8:
                    84:65:0a:32:3d:3d:92:e3:53:35:a6:48:ad:fd:da:
                    b0:3e:03:20:d6:5e:5e:9d:47:e9:06:cd:dd:6c:57:
                    ca:bb:12:73:b8:fd:e0:1f:89:98:5c:df:bf:58:51:
                    27:6f:d9:f6:50:64:0b:34:d5:4e:12:61:35:c6:da:
                    4b:5b:a0:35:7c:4d:a4:87:18:be:26:a0:33:13:54:
                    71:52:a8:a6:f2:ac:ea:8e:ff:6f:0c:54:52:5d:01:
                    3c:a9:f9:ef:ba:fb:f3:b6:ca:31:af:6a:c3:b3:e4:
                    3f:be:53:2f:49:66:f3:c3:24:a2:ae:49:b3:ff:eb:
                    db:b1:26:ea:b8:5e:6e:db:2f:56:b5:9f:fb:bc:74:
                    66:ea:8a:f1:63:15:2c:31:5c:0e:dd:29:8b:3d:44:
                    3e:fa:3a:20:62:44:c7:63:94:7a:50:8a:d4:f2:23:
                    a0:cb:f0:17:d7:b6:1f:26:5f:65:aa:ad:4c:38:00:
                    4c:d4:5c:b0:3f:0b:6e:55:ed:ba:7f:3c:e5:39:3b:
                    0e:88:74:35:8e:5f:43:33:58:60:a0:fd:35:be:48:
                    00:59:4f:b5:2d:86:a2:1a:57:e0:4e:17:e9:a4:ab:
                    ec:b0:54:4f:cd:ac:1e:09:de:99:00:4e:1c:16:0d:
                    09:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:0D:7B:B4:B0:98:99:50:2C:26:B4:AD:61:14:0D:B0:4E:5C:31:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/0dac1b9e-e005-3716-ba57-667e5c48f339.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.crl

            X509v3 Authority Key Identifier:
                keyid:63:78:09:E9:4C:B7:72:04:58:F4:A5:9E:8F:7B:B4:91:9A:DF:36:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.163.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:5c:99:6a:d9:5f:b4:6c:6a:fa:14:30:66:3c:98:b9:26:ed:
         f1:73:e0:14:21:28:21:41:54:f0:d2:5a:fb:3e:ca:fe:97:9e:
         bb:1b:c9:0e:9a:93:cb:97:c5:4c:73:86:7f:f3:03:3e:f4:9c:
         86:c3:bc:e7:ac:de:30:38:4f:29:2c:1e:6d:2b:f1:59:25:ce:
         44:e2:76:30:bc:a9:aa:b7:20:09:4e:5c:f4:a5:01:72:58:e0:
         6a:ef:3e:5e:62:cf:de:65:b5:a7:73:f0:77:a0:d1:5d:76:47:
         68:6f:9b:7b:65:f6:c7:d0:cd:ac:7a:a5:3f:91:98:eb:5f:6c:
         9f:1c:09:83:79:02:35:83:e3:56:1d:62:6d:56:d0:47:83:16:
         49:6e:73:bc:63:a6:67:3d:65:a6:df:a7:a0:bc:94:4b:19:57:
         d9:8e:05:e7:db:e5:8a:e0:52:bb:21:fe:c1:92:f2:f8:7a:74:
         b4:8d:73:3b:66:b2:44:4f:a3:8b:b6:b4:45:7a:f0:df:f6:a5:
         a1:73:95:90:70:3c:11:f7:90:8d:1d:19:63:06:2a:54:ef:dd:
         f8:c6:86:9a:a8:1b:24:eb:d5:f9:4a:21:68:b4:53:6a:4a:56:
         b8:8f:e5:07:83:80:54:ff:7f:61:a8:33:44:a6:1d:48:cb:ce:
         76:70:1c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:32:01 2026 by rpki-client