Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7be8111d-0e20-386d-8dfb-2135cf16f86d.roa
File:                     7be8111d-0e20-386d-8dfb-2135cf16f86d.roa (raw, json)
Hash identifier:          iGE3imHZWu8w6U+pSn6x88e2B4LRP1LlQbDYnW2FDnM=
Subject key identifier:   D7:06:0E:34:99:C9:C0:3F:7E:A4:9E:5C:EC:D9:3C:3C:B5:38:36:1F
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F4328584CBDB1FDC6313DCD8B4E1F6740
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7be8111d-0e20-386d-8dfb-2135cf16f86d.roa
Signing time:             Tue 03 Feb 2026 14:00:39 +0000
ROA not before:           Tue 03 Feb 2026 14:00:39 +0000
ROA not after:            Mon 04 May 2026 13:00:39 +0000
asID:                     15204
IP address blocks:        216.106.192.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bd:b1:fd:c6:31:3d:cd:8b:4e:1f:67:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Feb  3 14:00:39 2026 GMT
            Not After : May  4 13:00:39 2026 GMT
        Subject: CN=3435377b-207a-4d60-88cf-3de8a7aea046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:0b:7a:ca:c7:17:1f:ee:67:3b:f4:80:3a:c3:
                    55:5c:8f:b2:b5:43:fb:88:44:4d:cc:91:33:2e:97:
                    74:b0:c0:a1:63:06:44:96:6f:47:72:8e:65:7c:f2:
                    e6:35:5c:aa:b2:c6:53:d3:f7:41:a9:96:d7:3d:a2:
                    3a:3e:41:1c:0a:12:d4:17:a9:50:1a:b2:7b:f6:9e:
                    67:71:cb:c7:5a:83:1c:ea:b5:39:0a:0f:11:32:c7:
                    6d:9d:93:d6:83:31:bf:fb:f5:80:8d:17:49:bc:49:
                    94:42:3f:ca:1d:83:37:f6:92:3e:8b:41:71:54:db:
                    f2:15:70:92:08:92:97:2a:63:f2:11:36:f6:9c:9a:
                    42:06:0b:7c:19:16:8a:d6:d1:c3:54:5d:9d:58:6d:
                    d2:0f:bc:14:97:16:56:38:2f:ca:73:bf:39:07:90:
                    b6:51:0d:af:ad:1e:fe:0d:94:c1:a4:fb:bd:68:e4:
                    50:d3:40:8b:71:a7:cf:4d:07:55:ed:d0:f7:e6:93:
                    7d:75:85:9d:5a:eb:29:42:ca:d8:74:95:cf:ce:26:
                    34:96:a6:c2:e0:11:6b:c5:1a:52:0c:73:6b:58:10:
                    ec:c9:f0:5d:4e:23:f0:37:8e:f8:74:08:0a:37:35:
                    4a:6c:ca:3c:26:f4:05:06:1e:3d:6f:2b:d7:4a:ed:
                    ba:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:06:0E:34:99:C9:C0:3F:7E:A4:9E:5C:EC:D9:3C:3C:B5:38:36:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7be8111d-0e20-386d-8dfb-2135cf16f86d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.106.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:f7:46:25:39:e0:e9:80:90:c5:93:62:7d:0d:4f:20:5a:08:
         41:25:67:1c:53:38:0a:87:65:66:d2:67:64:45:f7:76:0e:a5:
         c9:5c:42:b4:60:69:2b:d7:62:f7:72:5c:b2:3a:cf:1e:94:e1:
         85:f9:e0:26:8a:60:33:b2:59:a0:e6:2d:fc:2b:ee:8a:78:0a:
         db:0f:85:0e:f3:ed:a6:c9:83:aa:67:cb:81:df:83:70:38:b1:
         aa:43:0c:e3:ec:d7:c7:6c:48:6a:62:5a:ff:7f:dd:5c:66:c1:
         cd:87:35:ab:72:53:bd:c4:36:7e:27:18:f7:0d:8f:f3:27:a0:
         8a:62:c0:fd:0a:b5:ac:18:7e:92:c3:20:4f:02:d8:b2:77:0c:
         5f:15:92:74:f1:1f:02:70:8f:f1:cf:ee:73:5f:bb:b4:4a:82:
         eb:8c:a0:54:02:1d:a3:8f:53:09:43:41:22:84:e7:eb:b0:3e:
         cf:65:6e:14:3c:e7:c8:62:e1:8a:5f:4d:e0:1e:fe:55:d7:fa:
         14:0f:4d:6f:c6:6b:e6:ab:40:1d:c5:d9:35:3c:f5:0d:f2:e5:
         e8:31:00:0d:4f:ef:9b:63:bd:68:bc:d1:7a:2b:fc:ac:ff:ee:
         e7:da:b9:3e:44:52:4a:d6:61:e4:66:ad:e8:92:c8:fc:18:0c:
         d2:7a:fd:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:30:28 2026 by rpki-client