Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/7d8ceba9-1594-3c62-a612-2c79c11cd18e.roa
File:                     7d8ceba9-1594-3c62-a612-2c79c11cd18e.roa (raw, json)
Hash identifier:          2NZ8SUPE7VwgUcZHB3e7DuvVZMnSIoEeeb0ctMIsygo=
Subject key identifier:   A1:E3:69:A1:88:05:7C:D8:56:F3:37:F2:FB:89:62:48:5D:6B:DE:36
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584D037D49CEEBEC76C5F43177C0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/7d8ceba9-1594-3c62-a612-2c79c11cd18e.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     16591
IP address blocks:        216.21.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:49:ce:eb:ec:76:c5:f4:31:77:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=21165faf-cfaf-4a35-9cae-bf48e8c3a589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d5:15:8e:06:97:4f:36:2f:dc:22:91:59:ae:
                    9f:e6:00:10:95:1c:4d:30:67:85:7d:a3:00:4e:cc:
                    86:11:4c:54:5e:35:b9:14:80:6e:23:d3:8a:08:49:
                    13:27:76:3c:f9:0e:12:43:9a:8c:27:40:6a:84:71:
                    ac:8f:2e:95:7b:42:7b:19:58:82:d6:57:06:d4:ac:
                    ad:e2:46:3c:fe:b6:e8:2d:17:6b:39:b0:f1:f6:0a:
                    f5:3e:12:df:4c:3e:fc:fe:a2:61:ba:70:f7:9e:d5:
                    d0:92:22:0a:0e:7f:8a:17:37:e3:38:9b:e0:1f:44:
                    72:09:af:30:78:83:6b:ce:2a:79:1b:ad:8c:df:cf:
                    54:50:82:f7:de:50:8d:11:0f:2c:87:b6:02:4a:39:
                    f7:49:0b:66:90:1a:4a:9b:27:a0:de:73:ce:2b:54:
                    37:50:a1:44:9a:a9:bb:25:28:e6:ff:a9:f7:c9:52:
                    9a:d9:fe:55:86:8d:15:25:f7:ad:63:0a:df:33:87:
                    5c:c7:55:ad:9a:22:56:1b:e1:c7:df:1c:21:60:fd:
                    67:cc:7d:f6:4e:28:e7:73:0b:5e:b8:b6:de:e1:bf:
                    17:d6:a9:95:bb:4d:7b:8b:70:0e:c3:dc:4a:48:1d:
                    2a:35:ab:e4:d2:2c:4c:02:40:c3:a4:f7:7d:a4:e5:
                    6a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E3:69:A1:88:05:7C:D8:56:F3:37:F2:FB:89:62:48:5D:6B:DE:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/7d8ceba9-1594-3c62-a612-2c79c11cd18e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.21.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:6d:ec:7f:98:6c:7a:4e:24:9b:22:74:64:30:65:d4:57:24:
         c1:70:3d:18:32:8b:ab:d8:a6:bd:93:8d:1b:e4:8c:0d:56:af:
         c3:06:be:aa:b5:51:a5:6a:86:d5:d9:76:e4:d2:51:ca:25:9b:
         c1:fd:3b:7c:be:59:08:4c:8b:08:21:b5:11:bd:2e:d1:18:d1:
         3e:8c:9b:b3:92:b7:6b:c3:40:93:eb:a2:69:68:25:6c:9e:0f:
         84:87:00:14:38:45:2a:bc:73:92:27:d2:4a:e4:6e:a3:8e:0c:
         2f:75:78:d0:32:55:28:e5:a6:8a:fb:f1:a9:63:b3:06:c9:3c:
         d3:ef:b7:2d:c9:f1:78:29:53:5c:f9:da:67:2d:67:a0:0d:d8:
         5f:5f:b6:cb:2d:7b:de:5e:82:80:c2:1b:b7:0d:90:2e:ab:e2:
         ef:a2:c2:47:42:ba:79:2e:dc:d1:38:ad:61:9f:72:d4:13:65:
         d5:be:4f:23:c4:f6:05:a7:20:16:97:5a:84:5e:13:f4:16:9e:
         fb:f8:d4:6b:da:74:5e:46:2c:2f:8b:e9:20:0d:d1:09:53:80:
         2d:62:72:9c:ba:f3:69:c8:7a:80:e1:0a:ee:8c:7d:68:83:43:
         93:35:db:1c:cc:4c:cc:e5:f0:a6:ec:fc:3d:42:9f:6a:57:65:
         b2:e3:e8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:46:38 2026 by rpki-client