Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9/2ffa1deb-a3f7-3c06-943f-a6e4982f853c.roa
File:                     2ffa1deb-a3f7-3c06-943f-a6e4982f853c.roa (raw, json)
Hash identifier:          DfjLnv5U13AkV0z+tswvQAViMVjQfyvqROiDYdm5Ao4=
Subject key identifier:   2F:E3:29:4C:BD:B5:56:77:9E:E3:16:DA:AF:AA:C5:F8:09:CE:37:45
Certificate issuer:       /CN=ee195698-fb60-40ef-a454-85fcbf3381b9
Certificate serial:       010D0C9F4328584E921F9FDEE67041BC8D87C600
Authority key identifier: 3D:17:25:F1:DB:02:A8:AF:CC:73:D4:E1:BF:81:5A:F6:F9:8C:08:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9/2ffa1deb-a3f7-3c06-943f-a6e4982f853c.roa
Signing time:             Tue 21 Jul 2026 09:00:12 +0000
ROA not before:           Tue 21 Jul 2026 09:00:12 +0000
ROA not after:            Mon 19 Oct 2026 09:00:12 +0000
asID:                     198949
IP address blocks:        137.216.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9/ee195698-fb60-40ef-a454-85fcbf3381b9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9/ee195698-fb60-40ef-a454-85fcbf3381b9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:92:1f:9f:de:e6:70:41:bc:8d:87:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee195698-fb60-40ef-a454-85fcbf3381b9
        Validity
            Not Before: Jul 21 09:00:12 2026 GMT
            Not After : Oct 19 09:00:12 2026 GMT
        Subject: CN=710ffce7-d584-415e-82d0-0faf9f3235d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6b:7f:12:48:20:50:9a:5d:40:07:4d:41:3e:
                    1b:11:94:9d:37:fa:4e:84:a1:d2:06:1d:af:a3:a6:
                    eb:63:8f:e0:1a:ea:25:99:8a:d3:70:86:75:f5:7a:
                    15:e1:b8:64:7c:fa:09:47:d9:2c:f4:50:b0:78:07:
                    0f:ca:16:f7:70:f1:f9:3d:62:69:6f:3a:e2:e8:c6:
                    6e:1b:3d:98:53:5c:e5:43:54:16:e1:89:4f:75:c8:
                    79:f9:7e:e0:82:7d:fb:91:36:03:42:e5:78:f3:22:
                    2c:78:31:b0:0b:01:ee:7a:08:7f:3d:0f:da:f4:a4:
                    01:59:a5:0a:ec:6c:ff:0d:fc:24:cb:91:ff:b4:d7:
                    f9:5a:ba:59:c1:f8:ae:c9:4a:60:c6:a4:a9:74:67:
                    3e:ef:eb:0d:24:f8:0f:61:f8:4a:de:39:3c:cb:86:
                    fd:6b:f5:48:0a:3d:3f:6f:22:16:90:97:f4:b5:51:
                    c5:50:65:7e:ae:ec:ff:bd:b0:b3:f7:aa:c8:62:87:
                    e8:ce:55:50:9e:26:97:d8:ac:fc:67:e4:e0:bc:35:
                    e4:3a:e3:9a:b6:c5:e0:61:fa:4f:9a:02:23:b6:e8:
                    d7:76:d5:18:c2:9a:8d:14:43:9f:09:c8:ba:2f:10:
                    29:b5:98:39:a4:93:0a:69:e8:28:56:be:3e:de:b6:
                    da:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:E3:29:4C:BD:B5:56:77:9E:E3:16:DA:AF:AA:C5:F8:09:CE:37:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9/2ffa1deb-a3f7-3c06-943f-a6e4982f853c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9/ee195698-fb60-40ef-a454-85fcbf3381b9.crl

            X509v3 Authority Key Identifier:
                keyid:3D:17:25:F1:DB:02:A8:AF:CC:73:D4:E1:BF:81:5A:F6:F9:8C:08:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.216.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:63:0b:24:c2:62:11:eb:8a:f1:03:a5:f6:da:65:14:f6:ff:
         6c:69:58:17:bd:b2:f0:b6:70:0b:96:84:4b:e5:47:b8:f2:d5:
         44:fe:f4:0e:95:7c:9c:4b:9a:3a:8d:9e:fe:c8:b7:af:09:db:
         8b:75:1f:ce:06:0a:27:2e:f3:b3:e9:16:1b:6b:66:dd:12:b6:
         17:15:2f:6e:b9:4c:1f:ce:ac:ea:ad:28:02:3b:bb:f8:45:73:
         83:1f:37:d3:8e:68:3d:7d:55:24:bc:c6:72:e4:0d:d2:a3:18:
         13:ec:7c:11:db:c8:12:b4:56:d5:a6:90:0f:be:41:5b:51:a3:
         38:e3:a6:d7:77:4b:ba:00:26:ec:e9:81:50:cc:c6:03:4b:2b:
         31:b4:69:8f:35:ef:ae:a5:14:c3:b9:ce:13:33:6c:a6:38:0c:
         2c:6a:81:a5:fb:74:98:40:43:69:8a:3d:7b:86:55:da:4e:2c:
         75:37:df:14:70:49:5c:39:09:ef:2f:b4:5a:e6:95:5e:5c:5e:
         d3:83:aa:0c:e6:c3:97:73:18:94:a2:f5:66:92:28:94:5d:d1:
         2f:50:32:f0:58:b5:53:57:f1:86:7a:43:4d:82:00:51:f0:df:
         87:44:a7:3e:cc:55:63:3f:f8:e2:b9:e5:17:da:94:db:28:ae:
         4c:8c:db:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:12:12 2026 by rpki-client