Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/1c6ee6ca-823d-393a-9d2d-0c7394e1975f.roa
File:                     1c6ee6ca-823d-393a-9d2d-0c7394e1975f.roa (raw, json)
Hash identifier:          GE9ucEjTUwZ36tgb58jbLEplWz5/t/LfbqbT3byZzGw=
Subject key identifier:   72:DC:DF:4B:B8:2E:66:91:58:E8:6C:72:7E:A7:44:19:A9:FA:47:2B
Certificate issuer:       /CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Certificate serial:       010D0C9F4328584D2644B49D526EE60B0B0A3A80
Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/1c6ee6ca-823d-393a-9d2d-0c7394e1975f.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     16433
IP address blocks:        208.76.160.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:b4:9d:52:6e:e6:0b:0b:0a:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=6f8d4c2c-bf48-47f0-b6d2-da9d3721b778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1f:f1:b7:31:5d:00:8f:43:ca:4a:8d:d3:b2:
                    60:0a:af:cb:9a:09:91:9c:18:1d:a3:fb:be:e2:66:
                    b0:22:4c:d6:4a:64:bd:fd:2e:b8:a4:1a:a3:68:70:
                    50:f4:00:78:e6:83:16:1f:f3:b1:e0:5c:eb:2a:c3:
                    bf:e1:5c:cb:fe:2e:e8:5b:4e:fc:ae:87:5d:9d:81:
                    d1:07:81:9d:a8:98:aa:e0:bc:14:91:25:a4:cc:42:
                    b2:b5:1c:3a:0c:83:16:03:6b:ea:1c:47:c0:ea:0b:
                    63:a9:5a:76:a4:80:6e:37:db:23:e0:65:c1:09:ed:
                    2c:a6:a3:e1:7b:c7:00:61:f6:a8:fb:32:9f:9e:f0:
                    dc:8c:a6:af:49:4e:6d:ae:d7:9d:69:c2:ae:18:a4:
                    8b:2c:7f:00:ad:06:61:f8:1d:15:d1:1e:0c:71:d6:
                    80:41:31:6c:12:60:e6:1e:ca:87:3f:eb:4a:bb:e5:
                    bb:ef:41:60:81:aa:78:60:34:dd:1f:7b:a9:06:1b:
                    d5:26:f3:c6:13:33:09:67:dd:dc:63:ca:3c:42:4e:
                    2f:1b:e1:12:1b:a2:3f:8a:61:74:f1:17:7c:69:1f:
                    a6:3c:8d:b4:fc:00:d8:6b:ce:49:b7:d4:89:ce:df:
                    22:61:5b:da:f9:89:c8:38:3f:b5:99:79:a5:5b:de:
                    b8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:DC:DF:4B:B8:2E:66:91:58:E8:6C:72:7E:A7:44:19:A9:FA:47:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/1c6ee6ca-823d-393a-9d2d-0c7394e1975f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl

            X509v3 Authority Key Identifier:
                keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:39:33:dd:4a:a7:b9:91:34:14:50:e3:20:a7:29:2d:71:2b:
         86:49:d1:d1:4f:5f:b0:a6:d3:b1:41:ed:de:95:84:31:e2:ee:
         29:26:24:76:67:14:ea:a1:e4:6c:28:24:16:0a:6a:15:19:93:
         2b:60:a4:de:81:67:08:10:39:34:71:14:d0:30:04:ee:c3:df:
         1f:73:fc:62:a5:47:78:c0:b2:15:7d:a7:45:27:e1:c7:d8:fd:
         fe:1e:2d:93:2a:72:97:bd:49:cf:fe:a7:6b:6e:1e:e3:6b:11:
         e6:e4:9b:a5:4e:94:f4:72:1d:d8:bf:bf:bd:9d:bb:d4:22:76:
         93:c8:60:69:9c:a1:fa:ef:37:22:01:5f:8a:8a:30:1d:a8:bc:
         26:c5:4b:53:b9:f1:22:55:40:7b:69:ee:c1:30:cc:0d:13:3c:
         47:9e:bd:1e:53:34:1d:83:d4:b2:cf:bf:00:5c:eb:6f:66:ab:
         f5:68:2f:8c:45:e9:8b:d8:8d:82:84:ca:fe:00:38:46:8c:49:
         d4:ae:1d:ae:4a:29:bb:03:2d:98:6f:70:52:af:6c:1a:de:c5:
         73:68:fe:fb:c5:84:45:0c:58:b8:bd:2c:fa:dc:4f:67:0a:2c:
         67:a7:3a:b3:f9:29:57:7c:51:81:7c:b3:01:a9:7a:fd:27:ab:
         d4:6c:33:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:58:42 2026 by rpki-client