Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/57dcb7b6-7978-3d38-9206-63b13004d328.roa
File:                     57dcb7b6-7978-3d38-9206-63b13004d328.roa (raw, json)
Hash identifier:          nX0j6U6WjFrkWCxKIM5+rr4cNpi+D5ce1H9UkpSauvg=
Subject key identifier:   37:55:41:DC:EB:32:54:F6:4B:5B:62:26:61:B1:F6:37:8C:96:FE:06
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584DBA3B123AC41B6D8A6C17E080
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/57dcb7b6-7978-3d38-9206-63b13004d328.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     22516
IP address blocks:        209.163.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3b:12:3a:c4:1b:6d:8a:6c:17:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=ced94a42-1e70-4ec3-9b73-a8bc83a8a298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:67:31:98:6f:0e:90:b8:95:82:7a:fe:7f:c1:
                    19:09:53:17:6c:12:a8:65:63:ca:26:2e:aa:ce:bf:
                    83:d5:42:a8:05:8b:c4:cb:25:cd:2a:f7:e3:2a:55:
                    fc:3d:60:5d:9d:7d:e8:1a:a2:59:00:ff:89:0b:cb:
                    3b:00:da:7a:27:b5:64:91:96:d8:72:51:2e:ac:91:
                    75:54:3f:c9:6e:08:84:cb:73:55:6d:17:68:62:54:
                    1f:74:38:4b:8d:91:83:ca:93:80:1f:6d:ca:4a:01:
                    55:02:4f:38:a3:94:d4:12:49:3e:68:b7:4f:df:18:
                    53:1a:48:8c:6d:b8:cf:16:cb:a6:26:7f:df:3b:b2:
                    a1:09:fe:67:01:00:25:23:90:8a:16:bc:b9:2c:91:
                    76:00:0b:16:f2:c6:b9:dc:5f:fb:8d:a8:71:cc:89:
                    89:10:4c:f7:dc:38:b1:57:5a:7b:cf:7d:90:8e:e3:
                    5a:be:4b:cc:14:b1:99:20:1f:69:19:bf:5a:0a:ee:
                    f1:0a:97:de:ff:e3:75:6b:1e:d8:66:64:48:ce:84:
                    9e:ce:d8:cc:29:f6:3c:32:cd:51:7c:04:9d:fc:cd:
                    bc:e6:e3:21:3a:d6:2f:58:ee:28:64:ee:3c:06:74:
                    64:35:df:c0:f7:f0:8c:c0:72:a5:ca:3c:42:0b:b5:
                    fd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:55:41:DC:EB:32:54:F6:4B:5B:62:26:61:B1:F6:37:8C:96:FE:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/57dcb7b6-7978-3d38-9206-63b13004d328.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.163.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:49:b2:88:17:f4:fe:a6:b2:0d:62:3e:46:b2:95:dd:9c:fe:
         f7:1e:47:7f:6b:70:31:1b:fd:27:0f:8a:b4:96:fd:9b:f2:4c:
         9a:09:ff:2a:f6:ca:c3:07:4f:27:52:4f:10:fc:9d:48:75:4a:
         ec:1c:81:aa:21:f2:70:60:5c:38:49:55:69:98:77:53:b9:c3:
         39:1f:17:05:76:53:75:59:f5:f5:93:2d:42:5c:be:f4:23:cd:
         7c:13:0a:40:90:a1:cc:08:ae:5f:07:a9:d3:3a:ef:e2:7c:f0:
         ee:79:9a:55:29:b6:cc:fd:48:5c:11:90:6e:24:bb:bc:85:84:
         e2:39:49:a6:90:c9:ff:c0:00:24:0f:87:2c:ac:44:13:2e:12:
         2e:72:7b:62:87:81:93:88:8f:81:d2:97:c6:16:d2:e1:f6:42:
         62:06:75:72:a1:2d:ea:65:e3:fd:ce:fc:33:be:07:c0:a5:5f:
         69:21:f5:99:71:dd:1f:c8:34:74:1f:2d:9e:2a:5e:bc:ab:bc:
         50:af:26:49:c9:06:4d:80:bd:d3:9c:c9:c1:b6:be:dc:5a:d5:
         f1:e8:87:02:5c:3e:00:8e:10:1a:20:31:a8:bb:d4:16:e2:ae:
         f5:70:41:60:fc:2e:a4:5d:0b:ec:6d:45:b7:ec:1b:5f:7c:3e:
         14:b0:d6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:04:52 2026 by rpki-client