Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/c21abfa5-eb96-3f30-bc67-c4138423851d.roa
File:                     c21abfa5-eb96-3f30-bc67-c4138423851d.roa (raw, json)
Hash identifier:          vSpNimK0TTFClzM4EWTrD+WNZZFRu8WIUXsAMxLEMS8=
Subject key identifier:   6E:7A:C7:B7:BF:50:5A:64:02:F0:1D:66:49:63:6E:EC:B5:97:C4:E2
Certificate issuer:       /CN=916b9afb-9e46-4ab0-8029-7f4d1168bb37
Certificate serial:       010D0C9F4328584D24DFA549FF5C9C83DBE0D280
Authority key identifier: A3:6F:EC:7E:8D:B6:99:E5:70:51:07:00:95:68:86:2D:6A:10:2D:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/c21abfa5-eb96-3f30-bc67-c4138423851d.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     400765
IP address blocks:        173.249.160.0/22 maxlen: 24
                          2602:fb15::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/916b9afb-9e46-4ab0-8029-7f4d1168bb37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/916b9afb-9e46-4ab0-8029-7f4d1168bb37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:a5:49:ff:5c:9c:83:db:e0:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=916b9afb-9e46-4ab0-8029-7f4d1168bb37
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=444e581b-300e-4bc8-a679-f42103436b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:09:39:96:1d:dc:c5:c7:40:8f:58:02:3a:c7:
                    54:37:3b:27:b9:1d:cc:35:3c:2b:a9:ef:2e:cf:80:
                    e2:1c:2f:1c:08:be:b1:84:e0:78:f5:fe:fa:47:27:
                    5c:c8:46:59:54:eb:78:c4:10:7c:17:9b:a9:7b:60:
                    bd:07:5a:03:04:92:cd:47:3d:b2:1b:10:74:eb:52:
                    7e:a8:6d:17:5b:04:2b:9e:fb:1c:b3:84:0a:94:d5:
                    0f:50:62:a7:f4:76:56:7f:d3:35:1b:da:7e:69:9a:
                    01:9c:51:1a:44:2c:59:56:06:65:8f:74:96:4c:e7:
                    c5:57:27:57:4a:24:42:1f:be:e7:ab:01:31:92:75:
                    b9:2c:80:c4:3c:df:25:ae:78:c6:dc:33:45:49:ea:
                    b6:f3:07:af:63:56:8e:a3:5b:4a:6f:9b:32:de:b5:
                    fe:9d:94:a8:ab:e2:09:23:22:74:c7:b2:6c:30:1d:
                    93:4e:db:5c:f0:00:9c:09:31:a5:7a:e6:c6:fe:23:
                    2f:47:47:75:83:7d:ce:31:21:e3:b3:b3:f6:ad:04:
                    05:08:33:35:58:2f:64:d1:17:e6:2f:d1:6b:4e:0a:
                    c1:99:ad:84:ea:d3:6b:34:f2:2b:1b:ef:80:5d:6f:
                    28:99:5a:bd:31:ed:4f:6f:74:7f:ae:4a:48:a9:1d:
                    50:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:7A:C7:B7:BF:50:5A:64:02:F0:1D:66:49:63:6E:EC:B5:97:C4:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/c21abfa5-eb96-3f30-bc67-c4138423851d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/916b9afb-9e46-4ab0-8029-7f4d1168bb37.crl

            X509v3 Authority Key Identifier:
                keyid:A3:6F:EC:7E:8D:B6:99:E5:70:51:07:00:95:68:86:2D:6A:10:2D:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.249.160.0/22
                IPv6:
                  2602:fb15::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:11:38:c3:d1:29:80:dc:68:0a:d4:4c:a4:66:23:45:53:5f:
         c3:cb:6d:e4:fa:68:c7:c0:b5:12:65:fe:22:5e:7f:85:88:9d:
         e8:29:f2:df:d9:b7:39:9b:60:35:10:19:77:ba:bf:ab:d2:a3:
         fc:54:51:e2:62:00:a7:89:cd:c7:59:65:2a:c7:74:8f:bb:2f:
         0e:e9:81:c4:31:95:44:f9:2b:b9:fc:1c:f7:d2:05:30:db:7b:
         ea:84:9f:68:c8:21:ff:7a:2e:58:c3:41:d6:3a:0f:31:b6:6a:
         bd:2c:af:a1:12:22:76:53:3f:6a:f3:a0:47:b8:43:b3:17:e4:
         d5:09:77:f5:04:98:5a:28:5b:f5:53:91:fd:af:d6:3b:14:ac:
         20:e3:66:5d:44:02:d7:4f:ca:58:26:2a:22:14:03:59:aa:eb:
         7a:a1:d2:3f:81:62:42:7e:c4:0c:ea:96:e1:1d:89:56:62:5d:
         08:dd:a1:84:8e:1b:db:4f:35:1b:f0:b5:2d:8f:a4:c9:de:18:
         da:3b:56:18:af:cc:da:ab:40:d9:b2:7e:05:ec:a3:53:11:fd:
         f1:ce:71:e3:97:2e:31:c0:cf:7f:96:fc:10:94:2c:43:16:99:
         22:22:e0:6e:42:7b:46:2f:eb:05:0d:37:53:37:11:45:58:86:
         70:0b:b4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:15:03 2026 by rpki-client