Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/2c883102-0a5b-37cd-a9ed-16c74a21870f.roa
File:                     2c883102-0a5b-37cd-a9ed-16c74a21870f.roa (raw, json)
Hash identifier:          vey+PpgrRAmxzlhk9SNHbXeTtT14fG4rLFqibLMGHA0=
Subject key identifier:   65:AF:66:3F:6B:B2:27:B4:49:A3:17:96:D5:03:53:9B:0B:8B:BA:39
Certificate issuer:       /CN=109078e4-3ad5-4242-9f3e-058161c97a9f
Certificate serial:       010D0C9F4328584CA5F70A0CFCFD31C6A03E6D80
Authority key identifier: D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/2c883102-0a5b-37cd-a9ed-16c74a21870f.roa
Signing time:             Mon 26 Jan 2026 02:00:32 +0000
ROA not before:           Mon 26 Jan 2026 02:00:32 +0000
ROA not after:            Sun 26 Apr 2026 01:00:32 +0000
asID:                     2572
IP address blocks:        207.160.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a5:f7:0a:0c:fc:fd:31:c6:a0:3e:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=109078e4-3ad5-4242-9f3e-058161c97a9f
        Validity
            Not Before: Jan 26 02:00:32 2026 GMT
            Not After : Apr 26 01:00:32 2026 GMT
        Subject: CN=26102825-4c1d-40b0-b7eb-82ec3e7a3a29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:6b:b9:f3:7f:36:2e:a2:72:c1:5a:73:df:e8:
                    f3:f8:3f:a9:a4:ff:8c:87:82:85:b5:6c:c8:57:16:
                    cc:20:9e:19:0b:eb:6b:39:79:15:94:65:6e:58:d0:
                    0d:74:bb:41:74:57:8e:3f:20:39:ed:85:3d:93:0f:
                    bf:ee:cc:ce:b9:5b:e2:65:bf:ae:7e:ad:55:91:1f:
                    e8:0b:4e:2c:f1:f0:78:d6:ea:d8:80:2f:29:38:e3:
                    bc:7a:b5:a6:53:34:40:d6:39:be:02:c0:15:35:8d:
                    bf:dd:e9:d2:4d:be:07:6f:39:8b:76:5d:95:1d:fc:
                    73:68:bc:c4:53:7b:2d:f4:1e:5e:75:57:1d:10:98:
                    76:42:6c:ab:66:28:f9:60:0b:6e:f5:3a:da:42:37:
                    27:cf:d1:c2:03:b4:e6:4a:79:53:e2:7a:26:15:11:
                    13:af:92:22:58:7c:aa:3c:d4:e6:fb:2b:1d:5c:c0:
                    c5:e1:5d:66:ce:1b:a2:07:8b:65:e0:a8:cd:8c:f6:
                    fe:83:07:fc:a8:d5:4d:4b:39:f7:a5:fc:c0:00:cb:
                    cb:05:98:45:92:de:71:3a:a0:cb:de:8b:46:9d:74:
                    c7:63:9d:76:25:dd:7e:7b:84:2b:1f:b2:b6:1a:5a:
                    d8:09:17:af:07:d5:74:59:0a:85:c9:1e:25:84:ff:
                    a3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:AF:66:3F:6B:B2:27:B4:49:A3:17:96:D5:03:53:9B:0B:8B:BA:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/2c883102-0a5b-37cd-a9ed-16c74a21870f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl

            X509v3 Authority Key Identifier:
                keyid:D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.160.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:a4:7f:49:b8:1c:57:ee:70:a1:10:30:32:57:70:a9:07:01:
         37:9a:a0:cd:52:4b:c1:78:1f:de:e7:e0:74:6a:cb:dd:d0:f8:
         23:a2:f5:ef:f9:a8:7c:70:c9:10:a9:82:2d:b9:19:9b:b2:20:
         65:3c:f1:31:f4:5c:0a:36:23:0d:3b:0b:f3:47:94:83:72:9d:
         5a:e2:30:f8:7b:d5:1f:f5:a7:c9:88:43:22:73:d0:64:53:e9:
         8b:3c:39:11:2b:0b:d2:49:1f:4b:5e:55:1e:b5:8d:a2:7e:27:
         2c:9a:5d:d7:e1:7f:1a:1b:e5:70:b5:c8:7d:2f:a4:27:71:2c:
         26:d1:3d:16:e4:09:06:7a:f4:25:20:37:fc:39:55:ed:ce:02:
         fd:f4:3f:56:6f:95:8e:4d:fb:ec:61:a1:cd:d7:16:9a:8f:8a:
         9f:f5:15:92:ac:2b:02:37:09:a0:08:3d:ae:a8:ff:b2:09:3b:
         b0:0b:16:ec:78:40:51:4e:09:97:be:fa:1a:5e:33:54:fa:ae:
         c5:6c:04:e2:34:5c:25:ab:f4:49:54:fa:50:9c:a7:80:4f:b7:
         e6:0b:48:c9:88:80:49:80:76:15:a4:ee:a7:a6:4b:05:b7:87:
         9a:4e:5b:75:21:af:ae:89:7d:bf:b7:c3:9c:e5:e6:97:b3:3e:
         84:18:14:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:21:09 2026 by rpki-client