Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/9cea23b8-fe07-33f8-88ee-380667682eef.roa
File:                     9cea23b8-fe07-33f8-88ee-380667682eef.roa (raw, json)
Hash identifier:          d/7j3Yb3Peqv91lwB9l+PMdvuTPsCO2yvre1PiwXfDg=
Subject key identifier:   4A:D6:72:DD:0F:73:BF:31:98:92:FB:1C:12:96:DB:EA:A8:03:BA:62
Certificate issuer:       /CN=16ca81c3-e5bf-48ac-8af9-0d789c35a2ad
Certificate serial:       010D0C9F4328584E253F01C298A0AAE6CA7AE410
Authority key identifier: 3A:9B:77:59:C4:B4:2B:ED:89:BA:E0:4E:D2:D9:80:D6:B8:56:6B:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/9cea23b8-fe07-33f8-88ee-380667682eef.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     14618
IP address blocks:        67.221.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3f:01:c2:98:a0:aa:e6:ca:7a:e4:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16ca81c3-e5bf-48ac-8af9-0d789c35a2ad
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=a9b2c16d-b097-47d0-801b-e7e3b5154d72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:59:3c:bb:29:05:fe:5a:07:b0:a9:a9:c9:25:
                    49:77:ca:85:44:e3:08:21:ec:02:b0:06:24:4f:3c:
                    24:9c:8f:4d:cd:9f:b3:70:11:de:39:d3:07:bd:3d:
                    57:1f:9a:eb:6d:49:fb:d1:da:2e:5f:5e:ae:90:f3:
                    8e:aa:57:3b:2c:e5:a1:76:80:03:b3:35:da:af:36:
                    9e:8f:7f:42:81:24:40:46:29:8e:53:83:be:0f:70:
                    22:d8:f9:1a:b7:36:ae:57:47:f1:44:8b:6e:86:69:
                    93:3e:95:0b:d5:cb:78:6a:c8:9c:f1:e0:ab:e2:f4:
                    a3:9d:49:25:33:f2:81:2c:39:74:d5:24:95:a4:b9:
                    89:12:9e:24:37:fe:a8:fb:00:7e:d1:2f:29:d7:a2:
                    93:f5:1d:17:fb:54:be:2f:8f:eb:aa:8c:91:d8:ef:
                    64:06:e9:64:d3:a1:ea:15:34:4a:c5:bd:51:f3:80:
                    eb:4a:af:97:09:d2:13:db:41:34:bd:04:03:4c:22:
                    df:ed:0a:e2:5a:62:76:cc:70:35:2a:01:6c:3d:45:
                    19:d0:5b:43:0b:f7:09:ba:c9:23:7f:4c:30:4e:de:
                    68:2c:63:9f:c0:2b:2a:0f:49:8c:63:1f:12:e9:8d:
                    85:64:11:e0:f9:e0:99:fb:29:29:aa:7a:bb:2f:22:
                    91:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:D6:72:DD:0F:73:BF:31:98:92:FB:1C:12:96:DB:EA:A8:03:BA:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/9cea23b8-fe07-33f8-88ee-380667682eef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.crl

            X509v3 Authority Key Identifier:
                keyid:3A:9B:77:59:C4:B4:2B:ED:89:BA:E0:4E:D2:D9:80:D6:B8:56:6B:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.221.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:7a:0d:2e:cf:c7:69:75:96:46:0d:74:25:70:26:0c:2b:0f:
         81:82:a7:40:b5:77:ed:c7:ab:e5:5c:c9:1a:fd:92:44:bc:91:
         f2:c7:ee:99:f7:78:c8:cd:0c:4a:78:1c:63:b5:45:d6:d2:2f:
         2e:af:6d:dc:69:b8:60:53:2c:d3:75:a0:49:dc:b3:9b:d4:d2:
         04:60:48:5b:fc:a4:e5:80:03:82:fc:84:7d:9c:63:f7:e2:b7:
         43:fe:7d:6e:85:cf:0e:a9:23:d9:cd:cf:c1:ac:95:d2:5a:57:
         a8:7f:01:a5:1d:dd:5e:b9:09:ad:c8:e9:42:c1:4c:be:f2:1d:
         9e:7f:9f:71:75:4a:52:c0:02:2e:f9:51:cf:31:1b:5c:df:d7:
         c5:30:a8:e8:be:af:8f:7b:98:20:21:00:c7:0f:5d:d7:96:4e:
         b2:8c:07:ed:06:b3:88:a1:39:ef:f7:3c:c9:94:99:2a:fb:08:
         31:6b:fc:f6:5a:31:b7:d1:d2:2b:e9:55:78:c7:13:db:24:76:
         21:9a:8b:d4:ec:c1:b3:c2:17:94:32:8e:d7:7f:45:09:dc:b7:
         36:1f:a1:ce:f5:1f:f0:31:64:2d:66:22:21:54:12:61:92:6a:
         2b:05:bd:ba:01:54:26:47:b7:86:53:34:91:ed:7d:db:a5:a1:
         35:6b:14:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:00:03 2026 by rpki-client