Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2e7bba38-a2f0-3aaf-8272-6ca557efe492.roa
File:                     2e7bba38-a2f0-3aaf-8272-6ca557efe492.roa (raw, json)
Hash identifier:          ynuOQjE4tS4b5p5msK7AZJ7dUVNTPq2b6nkaorLYmcQ=
Subject key identifier:   34:3F:37:08:CE:2C:A8:53:DD:01:48:70:FB:E0:41:33:6B:2B:5A:FA
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584D7E353CBF49375C377B96E940
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2e7bba38-a2f0-3aaf-8272-6ca557efe492.roa
Signing time:             Mon 13 Apr 2026 13:00:30 +0000
ROA not before:           Mon 13 Apr 2026 13:00:30 +0000
ROA not after:            Sun 12 Jul 2026 13:00:30 +0000
asID:                     20001
IP address blocks:        167.160.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7e:35:3c:bf:49:37:5c:37:7b:96:e9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Apr 13 13:00:30 2026 GMT
            Not After : Jul 12 13:00:30 2026 GMT
        Subject: CN=1e781d9d-218f-4d10-b2f1-726afa26efb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:38:23:11:ac:4b:e2:e7:9c:7b:3b:e7:cf:3d:
                    23:be:4d:c1:eb:0a:06:06:5c:6b:b8:38:8c:61:40:
                    4a:0c:c3:95:d2:db:69:f8:49:ce:71:88:0d:b6:d0:
                    ed:fa:4d:33:2d:ee:84:c6:02:05:af:60:f0:78:0b:
                    2d:55:0b:78:7e:13:35:1f:a8:2f:62:07:01:5d:ee:
                    3b:75:aa:48:b4:42:66:11:e8:20:66:0f:5f:be:ba:
                    c9:21:b7:7b:cf:83:63:f9:07:a6:2a:31:e3:5f:18:
                    9f:5a:df:1f:18:c1:c3:c3:53:e6:53:c5:39:cf:61:
                    88:11:23:00:d9:11:69:64:1b:67:f1:ee:42:5f:7a:
                    24:e6:25:90:3a:41:9a:74:ec:e3:44:4a:96:8c:bb:
                    3d:1e:f2:d0:9b:37:5d:31:f1:bc:b4:61:b0:35:60:
                    cf:4d:25:30:8e:f1:97:b5:44:7b:75:e8:cf:c2:1b:
                    ca:97:18:71:64:65:74:b9:0e:c7:6c:73:f0:03:82:
                    99:18:54:6a:01:5e:43:94:15:dc:36:c2:eb:2c:e8:
                    cc:f5:b5:60:39:ff:0f:0d:28:c8:f3:a2:ee:53:93:
                    14:42:fd:3e:f1:aa:2f:de:86:61:da:7f:10:ec:64:
                    c9:d0:71:96:9d:ee:fb:69:14:1d:a3:7d:1e:d3:3c:
                    b1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:3F:37:08:CE:2C:A8:53:DD:01:48:70:FB:E0:41:33:6B:2B:5A:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2e7bba38-a2f0-3aaf-8272-6ca557efe492.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.160.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:e1:6a:68:b7:97:50:e4:76:60:fd:97:bf:4b:aa:68:8a:48:
         cf:60:51:18:d4:00:d5:e3:59:87:98:12:61:84:ae:d0:34:69:
         e8:ef:b3:c6:47:93:71:3d:6e:52:2f:f4:a2:8b:17:b2:73:dd:
         8e:eb:82:18:87:a0:39:d5:3e:a9:5d:d5:f0:29:6c:bd:39:a4:
         e3:87:c2:89:93:6f:c1:01:85:38:aa:0d:eb:25:21:21:e9:04:
         d5:2f:30:32:cc:52:73:31:d0:61:6a:bf:fc:b7:31:73:4f:e9:
         35:f8:3a:99:12:b2:51:72:f7:b0:0e:a7:35:1b:1f:7d:37:e5:
         79:fa:b2:b9:91:e8:27:96:03:de:ea:5d:6c:19:2f:30:70:50:
         c5:83:95:27:9f:b0:5a:46:4f:d7:81:2b:b4:a3:5f:3a:76:fb:
         d6:af:af:86:87:ca:cd:18:a3:70:55:f2:c2:3d:c8:41:5c:ae:
         84:a3:16:f7:ae:e9:62:8e:3b:aa:96:4b:62:28:11:37:c4:2b:
         32:49:e5:d6:81:e9:a4:bd:f4:ae:90:30:48:2e:41:a9:46:ba:
         36:bb:de:69:29:c7:a8:48:49:26:00:5e:84:bc:19:be:18:ed:
         05:ad:f2:62:1d:44:e2:2d:ee:3f:4a:2b:5a:e3:7e:83:9b:66:
         cd:2e:80:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:49:19 2026 by rpki-client