Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92/5f16356a-9348-336f-aee4-e4ace7aff025.roa
File:                     5f16356a-9348-336f-aee4-e4ace7aff025.roa (raw, json)
Hash identifier:          bTF1GPxOzyrUZbPYzBNFmrK57jebOPHoBMy0yHFpl7o=
Subject key identifier:   0E:0D:80:58:35:9D:A7:BE:08:A3:36:01:AA:85:38:ED:AF:08:CB:CC
Certificate issuer:       /CN=7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92
Certificate serial:       010D0C9F4328584E15E46F0C4DADA40D1A7ED780
Authority key identifier: D9:88:ED:AC:D6:31:9A:84:0D:9A:49:23:C1:1F:E9:03:57:46:2A:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92/5f16356a-9348-336f-aee4-e4ace7aff025.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     3851
IP address blocks:        131.216.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:6f:0c:4d:ad:a4:0d:1a:7e:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=d30a0243-ab89-4568-a2e7-9fc7f2fbb3e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:65:27:10:ba:a7:5b:c8:4f:47:57:cd:8b:de:
                    5c:78:c7:54:34:9b:34:4c:63:1d:1e:26:64:c1:c3:
                    a8:1b:fc:fb:25:3e:28:46:42:ae:da:e8:8a:59:ce:
                    5d:b8:be:8d:4e:37:33:42:21:47:f6:67:73:0d:f2:
                    b9:2d:4a:10:97:64:83:86:75:bc:d6:52:ca:70:a9:
                    d5:ac:fb:83:9e:e3:8c:2b:6b:a7:ec:f9:ca:5b:91:
                    c2:94:ae:46:eb:94:56:12:42:a2:6c:74:d3:06:04:
                    17:db:6a:ee:9c:04:d3:a3:73:42:55:08:6d:c6:c5:
                    b8:01:55:24:f1:7a:67:3a:6a:a0:0f:68:97:77:f5:
                    d8:4b:25:a3:5e:e9:53:9e:69:ec:c0:fc:27:e8:b9:
                    59:1a:77:ef:36:46:90:a7:4a:aa:12:d3:5d:d8:cb:
                    8d:b7:01:2b:88:0f:ba:49:f5:a2:9e:b2:19:bb:78:
                    51:6f:44:29:22:47:0e:ae:4e:f2:0f:31:de:3c:19:
                    46:dd:7d:57:3a:55:88:08:d1:83:12:9a:73:66:0b:
                    2d:db:ef:2e:ab:7c:93:09:d0:61:81:94:7f:03:66:
                    c9:95:9b:5e:79:a9:74:88:e9:51:27:54:ee:39:fc:
                    7e:1f:b3:9b:21:1c:98:7f:fe:f8:33:b3:a1:2a:74:
                    1b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:0D:80:58:35:9D:A7:BE:08:A3:36:01:AA:85:38:ED:AF:08:CB:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92/5f16356a-9348-336f-aee4-e4ace7aff025.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92.crl

            X509v3 Authority Key Identifier:
                keyid:D9:88:ED:AC:D6:31:9A:84:0D:9A:49:23:C1:1F:E9:03:57:46:2A:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.216.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:9a:c0:99:a6:28:b4:f7:41:9a:d7:70:a4:45:e3:33:dd:9a:
         ac:85:63:4f:71:f0:d3:39:e0:cf:b1:c3:b3:54:ab:63:9e:c2:
         ab:53:d9:10:d0:ac:18:7c:ca:97:35:a9:f7:ef:63:e3:68:f6:
         cc:29:aa:e5:84:99:ef:ca:67:5a:61:3f:cf:ba:b7:a7:91:da:
         20:d8:8a:e5:4f:bd:14:e8:5a:50:2d:12:b2:1e:d1:c2:1a:45:
         1b:1b:b2:5c:61:a9:f2:dc:0e:c4:dd:15:e4:26:65:6f:3e:45:
         5d:b0:35:3f:65:8a:1c:e2:39:36:aa:04:26:a2:ac:12:bc:ba:
         3d:f3:cc:f3:f4:8d:e8:d9:ea:13:cf:c7:6e:f1:ac:6a:1c:8f:
         99:d4:06:cd:ee:b4:ac:b2:85:06:3d:a2:f8:43:f6:cd:e5:91:
         fe:39:7d:59:b5:85:13:e3:cd:d3:7f:ac:e3:70:f7:ca:54:e8:
         37:75:ef:ee:76:85:a6:18:6d:e9:49:19:54:58:a4:55:31:08:
         0e:66:c6:29:1b:aa:91:5e:42:7e:8c:55:c4:dc:63:e8:c6:16:
         09:74:cb:99:06:0b:25:c9:f8:64:38:24:5c:6d:f6:eb:57:7b:
         5b:4e:98:83:87:a2:17:29:e1:96:5d:30:f7:50:15:25:02:6d:
         e4:bf:23:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:32:10 2026 by rpki-client