Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/2d8dd964-cacf-3687-b6e9-21de0d07308e.roa
File:                     2d8dd964-cacf-3687-b6e9-21de0d07308e.roa (raw, json)
Hash identifier:          82iQZQWTO0MSWCW9ijG6tsWGNTKNUm97nlmtWj+/+KU=
Subject key identifier:   57:67:0F:EB:B8:3B:53:D3:15:3A:A4:1B:28:1E:22:4A:90:46:21:CC
Certificate issuer:       /CN=69686900-f201-4b2c-a1c7-afb725abe47f
Certificate serial:       010D0C9F4328584EA797DD2116FB9C7325A75080
Authority key identifier: 46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/2d8dd964-cacf-3687-b6e9-21de0d07308e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16578
IP address blocks:        208.187.160.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:dd:21:16:fb:9c:73:25:a7:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69686900-f201-4b2c-a1c7-afb725abe47f
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d5116d7d-e656-4579-827e-ccc0434690db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:76:5b:f9:71:e5:d4:61:cc:ed:90:62:fa:5f:
                    88:62:c9:e5:78:2a:c1:67:f5:95:c3:ba:54:fc:e3:
                    9d:0e:d7:9a:c9:e4:aa:85:90:72:54:25:06:4b:bf:
                    53:80:b3:5c:ed:85:fb:41:b5:c4:98:1b:54:e0:4b:
                    aa:2f:a8:14:2f:7d:52:ed:69:6c:13:e9:36:55:0f:
                    62:8f:93:99:55:57:41:5d:3a:5e:e4:15:1d:7c:a3:
                    4d:28:1b:69:55:c8:0e:15:6e:dc:b8:21:6a:eb:4d:
                    24:1f:0d:57:13:df:ac:5c:dc:26:ac:95:fb:60:83:
                    7b:5b:24:78:19:a5:0a:18:f3:bd:9c:04:a4:2d:e1:
                    0c:60:19:39:c7:34:e4:46:14:99:09:83:a3:9d:01:
                    8b:bf:5e:09:b5:49:86:1d:3a:ab:06:ec:49:03:bd:
                    a4:96:3d:c1:34:8e:c0:ff:ca:e8:86:2a:82:fb:ca:
                    cb:17:c8:04:5a:95:5e:b3:4d:01:1a:71:0b:6d:fb:
                    ce:49:70:bf:26:d0:e6:f0:8a:fe:6a:0b:3d:e4:c0:
                    d5:df:1e:58:5e:43:a9:a5:23:ca:45:d5:e0:72:6f:
                    45:81:64:71:c8:11:91:be:7d:07:9f:dc:db:cb:a7:
                    b6:f2:f0:bc:84:b1:c4:1b:5b:dc:49:06:24:e1:8d:
                    34:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:67:0F:EB:B8:3B:53:D3:15:3A:A4:1B:28:1E:22:4A:90:46:21:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/2d8dd964-cacf-3687-b6e9-21de0d07308e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl

            X509v3 Authority Key Identifier:
                keyid:46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.187.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:44:a9:8e:07:da:bb:6b:b6:b1:d2:21:b9:c7:89:84:6e:3c:
         14:d2:8c:a5:5f:ca:e9:30:af:a7:22:e1:d7:ff:b3:11:be:8d:
         44:80:79:f0:12:ad:00:8b:f4:60:63:de:12:2d:bf:32:15:77:
         d6:d0:4a:72:6a:fc:28:99:c3:9a:06:e6:41:59:b7:48:9e:66:
         48:61:41:36:95:26:a5:ac:b3:5f:54:7b:93:df:fc:f5:b1:4f:
         78:0f:9b:d0:bc:7a:88:94:3c:42:25:9d:a5:e6:c0:89:bd:3c:
         05:31:a9:73:58:d9:af:4b:ef:f3:c8:92:31:bd:36:c8:62:36:
         ae:19:63:98:3a:65:65:75:19:c2:39:68:f4:85:e0:2c:3e:e3:
         17:88:81:80:06:87:1f:51:d7:09:e3:83:27:0f:74:fc:80:c0:
         f4:fe:5f:97:3a:64:da:36:97:65:be:7a:09:4c:38:6f:37:71:
         11:54:fd:04:54:9f:18:56:2f:46:11:bb:0d:ea:37:50:29:44:
         e6:e0:08:d3:17:60:81:6c:85:81:3d:df:bb:1b:ee:9b:66:fe:
         09:9c:dd:c0:fe:c5:80:76:20:71:cc:3d:41:b0:5c:cc:86:36:
         f6:90:42:8b:71:ef:42:cc:b5:52:e4:2c:50:8f:99:82:02:35:
         e2:0d:9b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:03:17 2026 by rpki-client