Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/673fc5f1-83f6-37bf-a155-4138a1b7a18e.roa
File:                     673fc5f1-83f6-37bf-a155-4138a1b7a18e.roa (raw, json)
Hash identifier:          Pv/E1SfGbwdZq8TrMZjnsTMDm9EA1YrRSUFA4vTHJDs=
Subject key identifier:   E3:8A:E0:FE:2C:25:AF:86:C9:FD:32:DF:2A:0C:CD:F9:23:14:E9:88
Certificate issuer:       /CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Certificate serial:       010D0C9F4328584CEE8CCB5DB11468B48D709700
Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/673fc5f1-83f6-37bf-a155-4138a1b7a18e.roa
Signing time:             Sat 21 Feb 2026 02:00:32 +0000
ROA not before:           Sat 21 Feb 2026 02:00:32 +0000
ROA not after:            Fri 22 May 2026 01:00:32 +0000
asID:                     16433
IP address blocks:        160.79.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ee:8c:cb:5d:b1:14:68:b4:8d:70:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50
        Validity
            Not Before: Feb 21 02:00:32 2026 GMT
            Not After : May 22 01:00:32 2026 GMT
        Subject: CN=d720f52f-0e5d-4a28-830b-540fff1c6ab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:10:9f:4a:8f:2e:85:33:60:75:c1:28:04:de:
                    e7:0a:5b:6e:ca:1d:20:c4:81:ba:7f:90:ba:47:06:
                    7e:87:0c:dd:3e:24:23:75:6d:71:44:e8:92:4c:64:
                    ea:10:63:a4:6a:fd:a9:f1:12:81:34:95:05:82:38:
                    de:e9:82:83:79:a0:99:71:49:c3:06:13:4a:d9:66:
                    06:ff:03:77:b1:22:45:b1:a5:80:6d:c5:80:d0:6e:
                    55:00:4e:0d:86:74:3f:46:dc:6a:1d:c7:bd:11:d3:
                    08:c3:97:a1:44:94:28:64:ac:74:47:b9:7d:9f:60:
                    b0:f2:16:42:40:24:99:d1:74:50:fb:63:11:d7:86:
                    b6:64:47:ab:bd:ab:a0:3a:d5:89:46:db:e8:85:f8:
                    ce:00:7c:14:1f:af:93:6b:40:07:1e:ab:04:65:94:
                    34:59:25:ce:cb:38:d0:23:7a:d9:33:74:76:72:2b:
                    d2:23:1a:38:fe:ba:ec:f7:e2:70:2e:86:de:5e:74:
                    da:82:20:33:c2:67:0b:cb:1c:b4:c0:03:9e:db:1b:
                    2f:63:32:ab:8c:71:ad:51:d4:63:ba:5c:17:0b:86:
                    9e:b8:dd:b7:97:6a:15:6d:c1:5d:24:25:56:f9:44:
                    47:c0:ef:b8:5d:49:08:57:1c:c8:2d:ca:55:1d:5d:
                    78:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:8A:E0:FE:2C:25:AF:86:C9:FD:32:DF:2A:0C:CD:F9:23:14:E9:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/673fc5f1-83f6-37bf-a155-4138a1b7a18e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl

            X509v3 Authority Key Identifier:
                keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.79.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:7a:a1:d1:05:76:8d:87:9b:d9:8a:90:80:0c:f2:09:83:2d:
         72:89:f3:0c:9e:2a:56:12:36:9b:48:1b:a2:e0:67:91:8a:ab:
         0c:d4:b3:a9:21:cc:39:f8:97:1b:35:a9:46:4e:ac:d2:58:82:
         c9:0b:20:65:10:54:3b:20:7c:ed:aa:d9:31:70:df:fc:ea:c2:
         e4:53:ba:0f:e6:fe:bb:77:a5:35:da:9d:2c:ba:4e:81:c4:fe:
         b6:8e:b0:45:4c:82:6b:c1:bc:42:5c:9c:61:6a:34:de:72:51:
         b5:57:09:cf:ae:58:76:ec:73:09:61:93:42:31:dd:f2:76:09:
         96:41:3a:0d:c4:1f:32:d8:1f:86:25:4a:6e:f2:15:78:23:e8:
         4f:22:3f:8a:47:43:0b:63:ca:61:aa:22:69:19:78:77:e3:ae:
         a5:00:b4:4d:e0:82:5e:ca:5d:53:ea:ed:78:d5:15:77:ae:c1:
         53:2f:b0:90:aa:42:71:76:e2:15:66:04:72:72:9f:07:9e:3a:
         e6:2f:f3:97:67:29:73:af:20:96:8d:15:2f:c1:24:4f:92:83:
         b3:c4:4a:49:2f:f6:4d:76:0a:d0:cd:af:88:cf:db:07:6e:0f:
         06:36:e2:3a:6f:ed:14:48:14:09:3b:d3:68:5f:d2:a3:b0:57:
         dd:fb:28:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:07:48 2026 by rpki-client