Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cabab0bd-d2a3-321e-8e37-81d0f10372aa.roa
File:                     cabab0bd-d2a3-321e-8e37-81d0f10372aa.roa (raw, json)
Hash identifier:          x4NWJ5uUi/8g3Uk7dXlEYejLBU5vspSn85HsshWYikI=
Subject key identifier:   97:F6:BF:E4:C2:3C:E7:58:A1:6B:0A:D1:88:91:5E:F7:22:5E:97:5A
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584DCAFB17F70F733D5B49D323A0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cabab0bd-d2a3-321e-8e37-81d0f10372aa.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     20001
IP address blocks:        209.163.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fb:17:f7:0f:73:3d:5b:49:d3:23:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=eb4ce187-48eb-43b7-b69b-27124b37edc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:51:29:ff:51:9c:8e:8f:c1:e8:6f:e1:8f:28:
                    21:b4:65:eb:16:ff:b5:23:40:8c:1c:d5:e4:14:51:
                    93:c7:3e:ff:e8:95:cc:63:c7:4b:0d:bd:6a:61:ad:
                    c0:bb:89:9b:e8:5a:97:fb:dd:90:73:7a:c0:20:fa:
                    79:80:75:83:33:76:a7:54:ab:b4:5c:0c:b4:f3:bd:
                    77:75:6a:bd:c3:93:b4:21:f4:c9:37:96:bb:21:65:
                    88:c8:a4:bf:1d:48:44:1c:04:9a:bb:00:30:8f:54:
                    72:f9:cf:78:5b:f8:d2:db:f9:28:32:e9:e0:b1:91:
                    f8:8f:a4:e6:cb:a8:0d:8f:c3:63:ae:32:91:ce:9d:
                    ef:e9:c2:a0:ab:15:44:13:c1:9a:8a:f0:db:60:13:
                    e2:25:dc:5d:6d:07:2b:c4:24:59:69:05:a4:1f:eb:
                    8e:ac:ee:17:2d:9d:26:dd:e1:a4:8c:de:91:77:88:
                    a3:a7:7c:cd:be:d0:42:18:85:dc:79:0d:a8:54:39:
                    30:bb:b9:95:db:43:90:85:f1:f8:8f:47:ad:80:b2:
                    30:80:67:b5:b2:48:5f:1a:37:50:50:69:f7:cf:fe:
                    fd:8e:e8:dc:ee:71:f3:be:26:88:4c:c1:6f:3d:6c:
                    aa:ea:2c:eb:90:60:39:12:96:8c:e3:25:a3:d4:99:
                    cb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:F6:BF:E4:C2:3C:E7:58:A1:6B:0A:D1:88:91:5E:F7:22:5E:97:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cabab0bd-d2a3-321e-8e37-81d0f10372aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.163.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:32:e1:c3:08:b7:43:fb:82:e8:27:92:11:c9:0f:66:35:cf:
         82:aa:6f:17:a4:6d:12:4c:f5:19:41:56:da:5b:32:c2:06:02:
         74:e1:bd:ef:73:32:ec:09:a5:e3:26:f3:72:79:ee:f4:a2:91:
         70:35:19:23:83:61:4f:14:e3:d2:38:87:9d:02:c9:89:6d:41:
         66:29:86:8e:bf:0e:f7:d2:f7:b4:ee:b6:5e:d3:b7:b9:56:3c:
         74:90:58:df:24:21:f2:1b:d4:40:cb:2c:73:16:61:25:71:b3:
         17:3e:e8:b0:ad:5c:62:9e:90:ce:7d:27:60:31:87:4b:eb:87:
         f3:f4:17:dd:14:6a:dd:c2:a8:b0:8b:6c:ed:72:c9:10:08:6e:
         b9:46:1b:fb:b2:81:23:01:44:7a:51:2f:81:2c:4a:8f:f2:5f:
         e8:de:09:75:d4:20:55:20:b5:5c:d4:cc:8d:7c:8e:f6:90:ee:
         50:a5:87:63:6c:cd:9b:76:87:7d:bf:49:01:e5:89:43:ce:6a:
         59:cb:58:85:ae:23:47:d1:a3:b5:62:e1:0b:a9:f3:a5:03:c9:
         11:1d:f3:79:70:1c:bd:72:fd:c5:26:e7:25:2c:06:2f:e5:86:
         33:b7:01:56:d9:9d:cd:15:b7:d6:8d:c7:8c:88:2e:16:c8:25:
         c2:8a:7e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:24:23 2026 by rpki-client