Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2de61dd3-d6a1-321c-97a8-d60d75671f16.roa
File:                     2de61dd3-d6a1-321c-97a8-d60d75671f16.roa (raw, json)
Hash identifier:          l7Rfx4yAS/ekck0H6V3K6+aqhcMuvUTpHspiiqUTGm0=
Subject key identifier:   9C:4D:46:09:38:6C:4F:2E:13:06:08:46:4B:A7:D1:0B:CD:24:05:68
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584DBA3B0A1BD0C1A564AB8FF680
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2de61dd3-d6a1-321c-97a8-d60d75671f16.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     22516
IP address blocks:        209.163.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3b:0a:1b:d0:c1:a5:64:ab:8f:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=b0a23389-9239-41a2-80f3-e7cc4d2a1c21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:39:0e:01:2b:f5:c2:8d:c6:2b:ea:d1:57:f0:
                    bc:a4:2c:57:3f:8c:8a:4e:dc:b4:61:94:55:63:00:
                    53:ea:ab:5d:f8:21:5c:46:d8:64:9e:d3:10:a5:a7:
                    02:62:64:95:11:d6:d3:c9:03:a9:46:34:a1:29:4a:
                    d1:0a:33:db:74:c2:4b:c3:26:9b:4f:a8:f6:ab:3d:
                    ed:5c:19:68:ca:4e:5e:69:56:a2:5d:78:ab:be:6b:
                    bb:c0:8f:82:56:11:ce:73:3a:6f:5d:e5:9d:78:f4:
                    23:19:82:d0:4d:b8:5a:db:c7:5b:5a:72:5a:a2:59:
                    c5:af:ea:43:e2:d9:0b:84:03:fa:7d:c6:8b:8f:2a:
                    76:75:04:d0:68:92:dd:54:f5:7a:f2:be:04:3f:9c:
                    6c:ce:14:35:6e:fc:63:ce:db:4b:dd:a6:84:a2:3c:
                    91:99:e0:fd:1c:55:3d:36:4c:3d:35:7e:36:40:ec:
                    2f:56:a0:16:64:f7:18:94:68:57:d8:f2:d4:79:86:
                    03:15:a5:be:66:3c:c4:b7:20:df:76:2f:06:32:bc:
                    1f:ad:93:c9:62:36:24:af:64:78:36:5d:4b:7f:b4:
                    0c:54:01:6f:fa:bd:23:66:cb:9c:56:28:e2:4e:0e:
                    91:2c:78:ef:ca:18:62:63:62:9c:d6:9a:76:e0:57:
                    6f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:4D:46:09:38:6C:4F:2E:13:06:08:46:4B:A7:D1:0B:CD:24:05:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2de61dd3-d6a1-321c-97a8-d60d75671f16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.163.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:1d:e7:a4:05:d6:04:14:89:f5:a8:2f:a1:00:6a:5f:62:76:
         43:38:d0:83:c9:61:19:31:c2:7e:d1:1e:da:ab:97:16:09:07:
         69:4e:2c:68:a1:8b:ba:48:f3:30:bf:d7:c2:dd:12:f9:bf:42:
         6b:79:b3:04:24:b9:6a:fb:1a:c2:da:a3:f4:56:02:f1:7c:93:
         dd:24:39:b4:1d:94:84:ff:75:d0:3d:00:66:9d:0f:10:c6:0c:
         10:b0:b7:bb:91:ab:58:ce:9c:c5:f6:07:2a:e2:14:15:27:b0:
         ac:92:c2:af:9a:4d:5b:0b:ca:3b:fd:e5:05:88:4b:bc:d1:d7:
         ad:b8:32:cd:0a:63:2f:60:03:dc:75:66:17:b5:d1:b9:b9:b0:
         f0:2a:6f:ca:87:8f:19:a9:8c:ca:92:7a:a2:f3:ff:c0:4d:a7:
         7b:2c:71:1e:f2:09:ab:bf:83:8e:21:95:41:40:24:7f:31:fa:
         b8:81:df:fb:cc:c5:8d:0b:88:3e:59:be:31:34:0d:0c:c3:e2:
         34:53:65:61:b6:b6:66:7b:5b:d8:d7:51:6d:80:d1:f0:e6:37:
         35:02:a7:30:9f:3d:20:af:74:02:a4:56:8e:b8:7e:d2:a6:4b:
         a4:ac:a3:61:96:37:84:b1:96:05:72:95:86:c0:3b:d9:19:dc:
         f4:31:31:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:19:29 2026 by rpki-client