Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/2c883102-0a5b-37cd-a9ed-16c74a21870f.roa
File:                     2c883102-0a5b-37cd-a9ed-16c74a21870f.roa (raw, json)
Hash identifier:          ItNuVr2V8mOBM/tEXAvWN52UtCyQifC4eX1F2UZabF8=
Subject key identifier:   7B:52:A5:E3:3D:FA:D2:DB:B9:6E:7A:96:82:A4:08:28:FF:99:1B:76
Certificate issuer:       /CN=109078e4-3ad5-4242-9f3e-058161c97a9f
Certificate serial:       010D0C9F4328584E66DA175FCFC142276C62D780
Authority key identifier: D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/2c883102-0a5b-37cd-a9ed-16c74a21870f.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     2572
IP address blocks:        207.160.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:17:5f:cf:c1:42:27:6c:62:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=109078e4-3ad5-4242-9f3e-058161c97a9f
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=8c4d5cca-00a9-4c6f-a37e-893c8d43bd49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:79:be:bc:12:af:93:15:65:27:76:d0:29:e3:
                    8a:a2:77:ea:be:db:fd:e7:91:6f:c0:d9:70:9b:36:
                    80:39:f7:a4:e8:30:de:be:37:e9:17:f8:d2:51:b9:
                    db:83:01:e4:56:07:69:fd:92:dd:50:5d:3f:bf:ad:
                    67:a8:ba:17:90:44:a4:82:4c:62:b3:36:ca:f9:7e:
                    e8:a2:7f:66:ba:7a:9f:f3:ac:1d:64:f0:ee:fa:32:
                    b0:fe:45:f9:33:ef:15:9b:7f:a5:49:ba:44:7c:78:
                    6d:59:25:24:9d:5d:b4:2d:80:69:bc:6a:bf:7e:89:
                    e4:65:c0:51:c3:82:1e:12:8b:e7:71:12:18:84:85:
                    ef:ac:2c:08:ef:ad:bd:33:a0:2d:93:d5:62:e7:c1:
                    81:c4:17:f3:4d:2a:16:50:8b:29:4f:5c:ad:46:58:
                    83:b9:7c:da:83:86:ec:1e:4d:14:13:70:91:57:24:
                    20:7c:ad:9c:aa:f2:1c:72:6b:8d:21:f3:06:e1:fc:
                    31:1a:ab:73:4a:a9:2e:4b:d7:b9:5a:db:23:01:06:
                    b7:2c:9e:d3:b7:01:b3:bc:3f:20:6f:1c:94:e0:66:
                    ee:75:93:cf:9a:8c:5e:a0:4f:e8:78:b8:63:c2:bc:
                    a2:e2:41:d2:8b:8e:6c:dd:b5:42:bc:2d:8b:2a:f6:
                    1a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:52:A5:E3:3D:FA:D2:DB:B9:6E:7A:96:82:A4:08:28:FF:99:1B:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/2c883102-0a5b-37cd-a9ed-16c74a21870f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl

            X509v3 Authority Key Identifier:
                keyid:D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.160.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:18:7b:b2:92:e7:7d:bb:d3:96:e2:ba:62:cc:9d:f7:5a:0f:
         87:52:99:8f:fb:89:9a:0f:02:27:dc:89:7b:fc:9a:1a:3d:f0:
         29:d5:af:a7:f0:1d:04:bb:67:ac:9c:74:5c:5c:94:63:11:00:
         d9:1a:b2:e9:45:35:91:88:3e:d3:46:a9:4b:2f:a0:4f:20:ee:
         20:db:e4:5d:bb:1e:be:60:e1:98:27:25:ef:4d:ea:a3:5a:20:
         db:47:24:14:c7:6a:60:ab:15:ba:1a:de:43:6a:de:5a:ee:8c:
         1b:5a:8f:71:3f:87:19:9f:dd:b4:00:76:f0:9e:c5:83:34:25:
         62:d2:19:96:40:ed:05:40:87:13:00:66:6c:a7:bb:36:4c:31:
         e7:fb:48:7f:af:6e:bc:c9:bd:69:ed:8d:68:46:11:8e:db:bb:
         e8:e3:c9:83:0c:61:57:a0:c7:7a:41:ef:f0:e0:e6:58:54:49:
         de:7c:a8:cf:dd:2c:9f:e0:0b:61:fd:cd:9a:1d:45:52:50:ca:
         a6:0b:44:8c:08:91:39:2b:97:52:82:5c:3f:b8:6d:a3:5c:04:
         57:6e:12:d5:52:33:64:6a:ad:c2:43:5a:15:c8:aa:ba:13:3b:
         45:8b:32:d6:27:89:70:38:6e:4e:99:99:b8:fc:4a:3b:1c:e1:
         4b:a9:34:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:53:22 2026 by rpki-client