Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/57dcb7b6-7978-3d38-9206-63b13004d328.roa
File:                     57dcb7b6-7978-3d38-9206-63b13004d328.roa (raw, json)
Hash identifier:          mNlAsfEhcHCqDreicpsXeqkrlv7Ts1TUZ3bYZwiFcOY=
Subject key identifier:   5B:82:13:67:71:96:BE:38:62:77:D4:FD:0D:77:68:DB:29:96:65:AF
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584E9A7FE67D1055A642613F6E00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/57dcb7b6-7978-3d38-9206-63b13004d328.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     22516
IP address blocks:        209.163.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:e6:7d:10:55:a6:42:61:3f:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=cc8edbc0-6378-42bb-8dde-591110c17c1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:36:c9:51:4e:e2:2e:f7:59:ae:bc:0c:da:59:
                    6a:60:eb:28:29:de:3c:e8:42:17:cb:42:47:5c:76:
                    ad:b8:55:cf:0a:b9:a5:ce:cb:fe:ce:15:f1:b2:cd:
                    dc:41:d4:97:dd:d7:eb:a3:31:f0:c5:b5:d2:fb:42:
                    c1:f3:f4:82:b0:e5:a4:93:57:f0:ae:3f:3f:6f:42:
                    13:eb:71:d1:23:e1:e2:41:66:e3:9c:6c:99:f5:12:
                    38:71:94:ae:1b:2c:38:ab:eb:65:f1:72:a2:6f:a8:
                    7b:07:48:a2:fe:fe:05:ae:d9:59:7f:f0:00:6a:a2:
                    e1:66:6a:74:4a:d8:07:5a:1c:84:7a:54:61:08:40:
                    c2:57:1a:38:f5:b3:c8:b3:9e:4e:c8:f3:ec:c1:88:
                    f4:a0:66:2a:47:c4:be:b5:78:fd:3f:cd:64:5c:29:
                    f1:3d:93:b9:cc:d0:c1:c6:c0:99:8a:8a:e5:a5:94:
                    ad:94:8d:c5:76:b7:53:42:58:f9:5a:63:31:1f:d3:
                    2d:49:a8:e0:2e:7d:14:73:a6:1c:04:08:9f:6d:88:
                    ca:19:17:47:68:75:d4:81:d5:0e:35:54:06:b1:92:
                    20:c5:77:b2:96:27:aa:08:da:5d:87:10:78:30:2c:
                    c1:71:d8:84:ed:aa:cb:ab:56:21:ba:e0:d3:d8:73:
                    b7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:82:13:67:71:96:BE:38:62:77:D4:FD:0D:77:68:DB:29:96:65:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/57dcb7b6-7978-3d38-9206-63b13004d328.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.163.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:30:08:d8:53:23:9e:9b:54:8e:db:d9:35:17:aa:4a:69:9e:
         ae:1f:aa:68:b2:0a:5b:0a:1a:b5:f0:a3:21:9a:32:84:2a:b1:
         66:81:b3:9c:b6:a7:e6:fe:d0:f5:cf:09:bd:d4:f9:fc:42:a9:
         0f:cb:dc:0a:bf:d3:1a:0c:e0:34:49:2c:86:8d:5a:73:b1:96:
         ad:b7:bb:b0:19:06:4c:60:f1:70:72:22:71:95:ae:02:e6:41:
         15:02:ff:19:71:ac:92:ab:a6:f6:49:17:d7:88:99:56:07:61:
         d0:0f:2c:30:1f:b3:2a:a1:0f:a2:68:56:c1:c8:45:49:75:c9:
         3a:51:c2:93:9e:bc:6d:26:c0:ca:86:41:7a:03:ed:0a:cc:a7:
         8f:f4:82:dd:87:a7:5f:66:91:c7:dc:da:1f:c2:34:41:1b:d7:
         02:4d:31:37:30:d1:55:2e:89:f6:ab:5a:e7:a6:7b:cc:48:4d:
         0a:03:6f:ea:1c:78:ce:5d:27:0d:20:1d:9f:7a:6e:cb:60:5f:
         e2:9a:95:1c:e9:c3:a9:3a:e0:db:17:b9:a0:19:8d:29:37:3f:
         ea:db:8c:a2:a1:28:45:2f:b2:3a:09:31:3c:2f:9d:66:57:92:
         6f:48:56:cc:34:03:6b:8b:97:a7:8d:fa:0a:2f:f6:10:c7:44:
         54:bf:e1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:49:30 2026 by rpki-client