Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2366321d-3327-3eb1-aa83-61a80aefd3f4.roa
File:                     2366321d-3327-3eb1-aa83-61a80aefd3f4.roa (raw, json)
Hash identifier:          OrJ+Asw/JaW/iPRDRzVyUsAv819SINdb9nRSol77E40=
Subject key identifier:   BF:0E:BC:C1:80:43:E1:E5:AE:34:DB:2E:A5:4D:E9:C0:90:BE:B2:0F
Certificate issuer:       /CN=2a85302a-1502-4116-b560-4c2d2155f989
Certificate serial:       010D0C9F4328584E1E44562D7ABCB3FFAB094A00
Authority key identifier: 58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2366321d-3327-3eb1-aa83-61a80aefd3f4.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        216.150.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:56:2d:7a:bc:b3:ff:ab:09:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a85302a-1502-4116-b560-4c2d2155f989
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=18cf7491-dba4-4303-9fcf-961a096cd428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d7:05:73:0c:59:d2:9a:95:23:ef:e8:b3:a3:
                    d0:d5:d5:0a:b3:a8:f7:6e:0a:90:f4:46:08:4a:4d:
                    8b:ff:73:d5:4a:c7:a0:0b:0a:95:84:13:c0:c4:d1:
                    c1:45:4f:32:b9:28:f0:ac:fd:4b:80:d0:1f:35:29:
                    81:e6:43:55:f4:ad:f7:5b:97:2e:df:c0:54:c0:20:
                    76:fe:01:83:45:46:0c:a3:7c:ce:ee:5d:a1:7f:66:
                    4e:69:38:e6:ca:50:c7:cb:89:09:92:08:5e:3b:96:
                    f9:2e:69:af:15:43:33:ec:e3:ef:e4:84:4c:44:34:
                    08:52:b1:2f:d4:36:c3:3a:d2:4a:97:43:a7:1c:6a:
                    ef:64:0e:af:47:96:3e:e2:78:27:a8:64:9b:f1:51:
                    59:64:93:67:27:ed:cd:c0:26:f2:0f:07:bc:0f:56:
                    39:db:23:2d:d8:e3:3d:69:81:58:3a:2e:9a:ac:c0:
                    13:fd:9b:f5:86:10:56:23:5d:db:5f:5d:1c:31:a0:
                    d2:73:b8:29:a0:ab:e2:34:7d:95:9f:b1:c2:f2:0e:
                    56:19:e0:51:b7:1b:b0:52:d0:6b:4d:76:0c:7b:ae:
                    93:43:e5:ef:c2:d7:2d:0e:83:2d:98:d0:57:d5:0a:
                    47:1c:0a:7b:60:1b:f1:63:2a:48:dd:50:81:64:40:
                    d6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:0E:BC:C1:80:43:E1:E5:AE:34:DB:2E:A5:4D:E9:C0:90:BE:B2:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2366321d-3327-3eb1-aa83-61a80aefd3f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl

            X509v3 Authority Key Identifier:
                keyid:58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.150.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:87:ee:01:8b:84:aa:b6:ed:50:e0:b3:5d:26:32:f4:f4:6e:
         94:33:2b:da:44:6b:30:02:44:7e:9c:57:61:3a:6e:94:c1:1b:
         df:83:58:78:a3:54:13:46:71:0d:04:35:10:1c:e4:b3:f4:01:
         ba:d0:7e:a4:88:22:ce:7e:48:a5:b3:40:73:fe:89:a2:ba:8c:
         1a:68:a2:4a:6f:93:10:df:43:07:c6:6e:f2:f4:e5:e0:d6:65:
         5b:54:2b:2e:bd:f9:5f:31:91:1b:4a:69:87:38:49:50:72:07:
         6c:4c:9e:bd:83:24:0c:b5:37:c6:5c:5b:09:18:fb:f7:a2:a3:
         44:02:7e:55:91:e0:14:79:01:99:bb:40:4e:0f:c8:15:9a:37:
         0b:50:38:d4:62:3a:d2:1d:61:96:8a:f4:ae:06:cb:c4:55:cb:
         3d:23:86:64:6f:29:5d:1c:f0:55:a1:62:44:63:b9:9c:4e:9c:
         11:68:6d:34:82:8c:0e:79:81:0a:37:8a:26:a4:22:85:36:f6:
         eb:f0:88:78:4d:b9:28:cd:d8:7f:82:75:47:b8:70:62:bb:c0:
         0e:8e:7c:71:44:d3:14:73:85:d7:35:cf:49:7e:7a:82:31:f8:
         cb:18:47:35:07:8d:7b:bc:56:89:55:c0:5c:f9:96:ea:ba:a9:
         68:10:f8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:49:50 2026 by rpki-client