Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/16f5dcf5-54ad-3865-9e01-ab3f54cdb427.roa
File:                     16f5dcf5-54ad-3865-9e01-ab3f54cdb427.roa (raw, json)
Hash identifier:          Vrbst+B7GgpnPJy43ul4ceABaPXYT05TDgLP35WAXmU=
Subject key identifier:   4E:4C:77:7B:74:BD:42:12:8B:85:3E:A2:68:70:8A:B9:AB:D5:49:EC
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584DBA3B19360D4956397A5B47F0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/16f5dcf5-54ad-3865-9e01-ab3f54cdb427.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     22516
IP address blocks:        206.206.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3b:19:36:0d:49:56:39:7a:5b:47:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=59fbce3d-85c8-45e2-8d40-6762830c7a54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b1:40:8c:ce:9d:a2:81:d4:fc:22:7c:cb:f4:
                    64:53:b8:b8:af:54:3b:46:6b:dd:66:6b:db:38:7d:
                    cc:14:92:71:90:34:1b:15:4f:28:1e:b2:41:42:a6:
                    b2:a0:62:66:14:64:1a:53:f9:fe:13:cc:de:e5:1a:
                    96:67:bc:b9:d0:f9:47:0b:69:1c:83:35:85:b0:a2:
                    8c:9b:07:4d:ac:91:21:18:7f:58:77:e3:5f:ad:b6:
                    86:54:f9:d2:45:1e:6f:15:6c:55:60:81:95:b3:c8:
                    11:a9:0f:41:54:8e:fb:d3:50:13:4a:b8:b7:53:7f:
                    9a:18:ae:29:92:a1:46:5e:e3:3e:77:c4:80:97:a0:
                    d5:8d:78:1e:a9:01:60:19:19:0d:f3:d2:9e:cd:2b:
                    f5:3b:b3:a5:33:08:61:bd:e6:e2:37:18:86:d0:1b:
                    40:46:87:aa:42:65:a6:a5:66:02:de:87:c2:19:23:
                    26:9e:d7:ef:ab:c1:53:35:f0:e1:b3:12:5e:5d:34:
                    8f:dd:48:97:93:33:e1:a3:9d:ec:54:d4:34:49:f9:
                    f6:03:26:02:e8:01:49:ab:ee:c0:0f:fa:51:87:9e:
                    e1:95:ee:a0:62:b2:89:8a:85:b8:a5:76:2a:e8:92:
                    58:66:e9:9b:2d:85:be:f7:b7:e9:d3:e7:b7:44:df:
                    fb:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:4C:77:7B:74:BD:42:12:8B:85:3E:A2:68:70:8A:B9:AB:D5:49:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/16f5dcf5-54ad-3865-9e01-ab3f54cdb427.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:a9:4d:52:e3:1d:24:7f:6a:4e:05:1c:e3:a0:f4:ac:3b:1e:
         8a:d9:7a:fe:a6:27:ee:ef:01:70:e5:75:d6:c2:8e:1d:b1:10:
         95:eb:8d:bf:9e:e3:02:a9:25:c7:fb:51:a1:cf:08:e1:bd:54:
         20:c2:a8:dc:f6:f7:ce:59:e3:f0:d3:1e:0e:04:18:21:2e:74:
         92:0c:e5:11:88:cf:99:2c:bd:1d:9c:12:8d:98:f2:85:31:fb:
         15:32:ff:d2:ba:be:c4:0c:34:dd:ab:5e:f2:68:2d:28:fc:1d:
         35:98:55:af:c8:54:fa:08:56:81:b7:ca:57:21:99:45:73:2e:
         c5:31:dd:8c:5f:a9:9a:6b:4b:d0:91:1c:a0:4c:8b:88:99:f6:
         d9:e4:1a:83:19:db:94:96:22:ea:37:e9:1b:4b:e3:c0:f2:2e:
         30:ca:82:08:3d:97:df:f5:db:fc:7c:b8:8f:39:ce:4b:9b:c2:
         45:d5:81:a9:25:75:58:33:9d:00:5f:79:bd:f9:59:44:b9:29:
         0e:ce:cd:cf:26:cd:23:18:15:6f:7e:8a:2b:92:57:59:aa:7a:
         45:4d:8a:90:94:d7:d2:7e:01:98:71:31:81:92:2c:b0:fe:d2:
         45:d0:d5:0f:37:9e:be:f0:b2:72:a6:51:13:8c:21:68:6b:06:
         c9:3a:45:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:54:07 2026 by rpki-client