Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/7f168197-3e85-3fd5-b48a-baf1c2344d4d.roa
File:                     7f168197-3e85-3fd5-b48a-baf1c2344d4d.roa (raw, json)
Hash identifier:          wQaLmjK9VYD7S2yIolkCsWQkHmRJpKYbDv3iJih9tBs=
Subject key identifier:   E5:32:00:60:F7:20:E8:7D:C9:48:0F:BF:DB:8D:FA:85:81:11:F3:55
Certificate issuer:       /CN=cbdc881f-54ac-40a9-89b3-5383cf243bae
Certificate serial:       010D0C9F4328584E66DA1D7200DE1A5A540EF810
Authority key identifier: 0B:77:9F:06:0B:42:75:84:12:DE:DC:60:66:74:A4:3B:3B:C5:1C:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/7f168197-3e85-3fd5-b48a-baf1c2344d4d.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     396982
IP address blocks:        209.240.16.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/cbdc881f-54ac-40a9-89b3-5383cf243bae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/cbdc881f-54ac-40a9-89b3-5383cf243bae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:1d:72:00:de:1a:5a:54:0e:f8:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbdc881f-54ac-40a9-89b3-5383cf243bae
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=b1ea2f18-4826-4fed-af4d-94a7aa0b54b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0b:41:47:bb:17:ee:5c:7a:d3:12:bc:03:a6:
                    04:72:03:36:8d:17:58:2a:48:31:bd:6d:4f:30:68:
                    5a:9b:10:ba:dd:01:06:e9:4e:51:3c:c7:34:33:66:
                    86:34:70:39:ee:e0:e1:f1:0b:3e:98:c8:3c:53:e9:
                    52:37:99:5c:fe:db:28:a0:22:62:93:1f:fe:44:35:
                    04:c6:16:c1:a9:e0:95:47:4f:58:6d:e0:51:88:ee:
                    fe:5a:e5:d2:6d:77:c3:29:c2:1a:66:19:17:c2:07:
                    c4:ed:50:98:1b:ff:41:93:ce:cb:3a:6a:74:8b:9f:
                    10:79:ba:49:32:28:25:78:34:76:ec:47:ed:9a:33:
                    c5:0c:26:f2:a9:bf:f9:11:d6:89:d1:bc:57:4a:0b:
                    53:7a:87:6b:eb:90:64:cd:9c:0a:6a:53:0d:c6:65:
                    a8:ed:1a:72:5b:d1:b6:f1:30:ed:df:0d:1c:40:35:
                    9b:c6:a9:88:98:77:64:92:d0:1f:3b:d5:45:48:11:
                    95:b6:51:c2:56:46:b3:cc:a9:05:e3:8c:e9:6d:97:
                    7f:be:6e:80:8a:9e:69:9d:2d:bb:74:10:9b:49:fb:
                    c0:75:24:6f:27:92:82:7e:53:6b:e4:45:1b:29:59:
                    08:56:44:59:17:3a:c3:34:8b:52:b6:64:1e:b3:2b:
                    59:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:32:00:60:F7:20:E8:7D:C9:48:0F:BF:DB:8D:FA:85:81:11:F3:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/7f168197-3e85-3fd5-b48a-baf1c2344d4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/cbdc881f-54ac-40a9-89b3-5383cf243bae.crl

            X509v3 Authority Key Identifier:
                keyid:0B:77:9F:06:0B:42:75:84:12:DE:DC:60:66:74:A4:3B:3B:C5:1C:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.240.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:ab:52:0a:80:55:63:e8:f2:61:66:3f:84:02:c6:d1:80:cf:
         fc:cb:76:bc:c7:a8:af:d0:9c:24:cd:f6:4d:58:25:f7:e9:e5:
         b4:e2:96:45:a2:1d:99:9d:9c:6d:39:db:ee:81:90:fc:2e:25:
         9d:db:b4:c3:cc:20:2e:a1:ad:fc:96:0a:ce:c2:ba:cd:97:7e:
         4e:d4:98:4c:af:64:e2:40:95:f5:30:a2:01:a5:c8:9a:6f:b9:
         32:f9:48:93:c1:1a:da:2c:7c:eb:2c:9d:18:47:8c:0c:4f:9a:
         d6:e3:1f:e1:cf:89:a3:46:d8:92:26:1d:6f:63:58:2c:43:19:
         c7:34:eb:5f:6c:19:70:75:74:ac:07:f5:99:5f:a0:2e:c2:b8:
         52:30:58:70:9e:2d:4d:8e:68:9d:00:3e:d5:ba:20:5c:f9:15:
         54:44:e2:33:4e:84:dd:1f:ff:b2:76:2b:01:ab:eb:33:38:67:
         2a:65:e5:f8:a8:5d:23:75:16:51:56:c5:bb:0f:25:cf:0c:12:
         fa:91:c3:00:1d:b4:58:b4:c4:cb:24:2d:8a:89:d5:ce:c7:4e:
         1a:23:ba:26:67:1f:01:24:4f:d4:bc:e8:12:95:d6:05:a1:e0:
         cf:6a:d5:3b:f4:7a:b5:7c:25:65:62:44:78:5a:35:01:16:65:
         35:54:04:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:25:08 2026 by rpki-client