Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c732f1a1-a4d1-4822-8730-10a209755167/b93e562d-2881-3bc7-b23f-74418e8a5662.roa
File:                     b93e562d-2881-3bc7-b23f-74418e8a5662.roa (raw, json)
Hash identifier:          b8CkeHXuQbAPzjewYbZcnBTayM65DCKBYX4jgqHhf2s=
Subject key identifier:   12:EB:2F:BF:8F:96:67:92:5F:C2:E0:C7:5D:AB:CB:3F:A3:A6:99:6D
Certificate issuer:       /CN=c732f1a1-a4d1-4822-8730-10a209755167
Certificate serial:       010D0C9F4328584C8B718BA20B0A13FBC38FC080
Authority key identifier: B1:C2:D6:1A:E8:39:38:C1:60:C3:AB:2F:11:83:19:4F:4B:22:37:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c732f1a1-a4d1-4822-8730-10a209755167.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c732f1a1-a4d1-4822-8730-10a209755167/b93e562d-2881-3bc7-b23f-74418e8a5662.roa
Signing time:             Fri 16 Jan 2026 14:00:40 +0000
ROA not before:           Fri 16 Jan 2026 14:00:40 +0000
ROA not after:            Thu 16 Apr 2026 13:00:40 +0000
asID:                     16509
IP address blocks:        216.241.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c732f1a1-a4d1-4822-8730-10a209755167/c732f1a1-a4d1-4822-8730-10a209755167.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c732f1a1-a4d1-4822-8730-10a209755167/c732f1a1-a4d1-4822-8730-10a209755167.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c732f1a1-a4d1-4822-8730-10a209755167.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:8b:71:8b:a2:0b:0a:13:fb:c3:8f:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c732f1a1-a4d1-4822-8730-10a209755167
        Validity
            Not Before: Jan 16 14:00:40 2026 GMT
            Not After : Apr 16 13:00:40 2026 GMT
        Subject: CN=d8969b59-08a7-44e5-8b4c-a09491374df0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:44:47:8f:4a:f3:b4:e9:b0:2f:3a:b7:59:0c:
                    cf:e0:9d:85:a3:72:08:cc:ec:57:ab:7a:05:5e:80:
                    87:e0:89:cc:2c:31:d5:63:f8:62:b0:6d:0a:c8:be:
                    5b:8e:ea:74:ed:a4:73:a7:0d:00:65:e7:43:1c:a7:
                    f1:75:10:a8:e4:bd:5d:55:a3:01:49:c4:8e:25:8b:
                    d1:5a:9c:0c:9a:48:3f:c0:32:55:73:06:32:f4:58:
                    48:10:6d:ba:5a:45:be:7c:b1:4b:88:03:d5:dc:13:
                    db:66:e8:a1:20:2d:4d:3c:d3:95:f5:ad:77:cc:8f:
                    c9:38:d6:a9:75:56:0d:67:60:e5:94:af:00:2c:98:
                    75:27:f9:fc:33:af:9f:87:ef:29:c8:75:cb:09:68:
                    74:d0:74:b9:9b:90:c6:a0:5a:e2:41:42:64:2e:44:
                    c5:3d:03:6c:40:20:df:7e:d8:63:8a:b3:40:57:53:
                    ba:47:20:32:cd:89:88:8d:30:6f:e1:d1:f9:df:10:
                    6d:fc:74:df:80:fb:0e:92:68:87:1b:1c:67:ba:8c:
                    32:c7:4f:23:d3:41:91:06:91:06:a6:37:e4:35:ca:
                    25:6d:c9:fa:f7:1b:e0:d1:af:60:89:f9:4f:25:28:
                    a4:77:a7:4b:c7:b2:d1:82:5d:24:a4:24:8a:95:1d:
                    c6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:EB:2F:BF:8F:96:67:92:5F:C2:E0:C7:5D:AB:CB:3F:A3:A6:99:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c732f1a1-a4d1-4822-8730-10a209755167/b93e562d-2881-3bc7-b23f-74418e8a5662.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c732f1a1-a4d1-4822-8730-10a209755167/c732f1a1-a4d1-4822-8730-10a209755167.crl

            X509v3 Authority Key Identifier:
                keyid:B1:C2:D6:1A:E8:39:38:C1:60:C3:AB:2F:11:83:19:4F:4B:22:37:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c732f1a1-a4d1-4822-8730-10a209755167.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.241.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:4f:6f:ef:3f:c9:20:cd:85:02:5a:24:08:d0:ff:8f:c4:ce:
         0e:8f:f9:50:bd:3b:ef:c8:25:d9:66:bc:66:d0:e5:10:e7:3e:
         be:87:7d:45:ae:2d:7f:7e:b8:7f:97:d0:06:a1:31:8a:7f:32:
         83:8b:b9:12:9d:08:3d:c9:86:4d:a7:b9:5f:3c:23:2f:2e:cf:
         4a:a6:85:da:85:6c:32:49:15:71:42:5a:3b:d9:2e:cb:c4:24:
         25:62:d1:36:19:da:dc:31:6e:cf:ac:b0:3e:46:8e:62:8e:4b:
         bc:05:9b:00:56:5c:54:a2:e0:2d:f3:79:80:4e:69:9d:c5:e0:
         4b:d2:b0:94:11:ba:98:09:6a:0e:81:0d:ba:c1:c9:68:c4:56:
         45:dc:e1:48:b2:b1:98:05:99:de:a2:e8:20:55:c0:9e:b5:48:
         a7:9c:fc:ed:ec:9c:5b:53:30:10:85:98:ba:25:51:22:13:a1:
         e8:0e:7e:62:ae:07:23:90:d7:03:3d:f4:48:98:7a:1e:6f:a0:
         6c:1a:60:f5:41:2f:0b:0a:ce:b6:79:87:3d:6c:3e:24:ce:a7:
         64:f1:15:45:5c:9e:44:08:af:6f:16:91:6d:43:6a:84:77:cd:
         47:82:6d:a6:6e:71:b8:bd:e1:a1:93:5f:a9:96:ae:09:53:f5:
         5b:4f:e4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:25:41 2026 by rpki-client