Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/ea0db632-7724-3c71-b5d0-a6d993ccb2e3.roa
File:                     ea0db632-7724-3c71-b5d0-a6d993ccb2e3.roa (raw, json)
Hash identifier:          rVNgVpl0dYLiEA8zerf+oTIvlQoDvLciAbZVqW6DkQ0=
Subject key identifier:   ED:E9:8D:B1:FF:23:66:2E:02:A7:AC:5A:78:14:8D:9A:F7:6A:DB:A2
Certificate issuer:       /CN=00b089f9-bcf9-4483-badb-c4cf8ca6f9e1
Certificate serial:       010D0C9F4328584E885A4DACFC50E47108AC9500
Authority key identifier: 63:78:09:E9:4C:B7:72:04:58:F4:A5:9E:8F:7B:B4:91:9A:DF:36:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/ea0db632-7724-3c71-b5d0-a6d993ccb2e3.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     27370
IP address blocks:        216.163.208.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:4d:ac:fc:50:e4:71:08:ac:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00b089f9-bcf9-4483-badb-c4cf8ca6f9e1
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=36fe418e-1012-4bfa-a717-7ea3a2a0af43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b1:6a:24:26:af:18:2f:92:7c:77:ca:3c:cf:
                    1c:81:8d:98:70:ca:20:f3:3e:6d:b7:e1:f6:bc:6c:
                    54:38:a3:36:a2:41:5f:b5:03:62:3f:8a:e2:14:f2:
                    87:66:37:47:c3:90:e3:85:b2:2a:46:db:0e:2d:73:
                    c0:cf:7b:32:8b:87:7d:c0:01:f6:22:23:bf:e4:2f:
                    74:9e:61:ca:39:17:61:dd:8f:bb:2a:71:90:6f:54:
                    73:3f:23:d6:7e:02:55:8b:22:a7:5e:c6:5e:57:80:
                    54:31:65:92:89:d1:8b:9d:da:3f:cf:85:33:19:65:
                    1a:78:0a:f3:59:b4:f6:f3:80:a3:f9:47:e4:c7:2c:
                    a5:2c:ea:a0:1b:d7:07:a9:87:ce:2d:08:c3:3e:27:
                    57:09:70:a5:35:76:b6:bd:e5:2b:d2:ea:da:03:f6:
                    30:80:0b:bd:10:3e:e9:31:bc:6a:3f:48:85:fd:46:
                    a9:18:a0:1d:37:36:b9:d8:0e:15:91:31:9d:c4:63:
                    f8:e9:48:59:43:92:13:09:f4:2a:7f:9b:7e:de:0c:
                    99:31:62:19:01:3f:ce:27:d1:ae:32:2b:95:47:f1:
                    18:42:b0:39:df:b3:a0:9b:64:b4:d5:e8:ee:4c:96:
                    91:e7:0b:9b:92:c7:5e:57:62:82:b0:d2:a4:9e:6c:
                    23:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E9:8D:B1:FF:23:66:2E:02:A7:AC:5A:78:14:8D:9A:F7:6A:DB:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/ea0db632-7724-3c71-b5d0-a6d993ccb2e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.crl

            X509v3 Authority Key Identifier:
                keyid:63:78:09:E9:4C:B7:72:04:58:F4:A5:9E:8F:7B:B4:91:9A:DF:36:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.163.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:63:57:46:ff:05:03:e3:c1:81:6f:c3:9d:e8:96:e3:ee:44:
         29:ee:ec:3a:6d:08:eb:f1:b1:cc:61:2b:cc:e5:8f:dd:36:52:
         39:b3:8c:41:3b:ae:c8:ed:f0:78:0b:df:21:0a:a2:e4:a8:54:
         35:97:b6:ae:c4:3e:c4:c4:77:bd:38:8a:7f:27:bd:a1:9c:54:
         7a:f6:ff:fe:00:90:57:0f:bf:f1:11:a1:98:0b:6c:2b:39:0d:
         64:e1:14:34:77:b8:6d:23:51:51:92:e1:9c:fc:11:11:57:dc:
         a2:ba:a2:6d:2e:33:ba:36:ef:6d:53:b2:0b:50:46:4d:64:dd:
         ab:63:d4:77:ef:75:d2:ff:cc:67:61:ef:5f:3b:1c:bb:04:04:
         2c:60:95:fc:bd:c7:6f:24:16:c1:16:87:15:c9:09:9b:2f:7c:
         6a:17:2f:3f:11:7d:89:da:06:02:a5:2f:4f:f3:eb:79:ab:d0:
         16:dd:32:c2:02:9e:71:a4:ee:9e:de:e8:79:df:5b:6a:b8:b9:
         71:3c:78:a4:4e:32:32:cf:fa:e3:1d:81:8d:67:d1:e4:c2:18:
         1f:df:7e:ef:e8:b5:22:9c:71:86:98:ab:eb:a7:8b:86:86:65:
         e0:67:f1:09:58:0f:45:c9:0b:0b:81:4b:76:1a:a9:a6:0f:df:
         e5:5a:ed:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:46:39 2026 by rpki-client