Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/f2a8e2bd-ba4e-3209-b315-1823ebb403a4.roa
File:                     f2a8e2bd-ba4e-3209-b315-1823ebb403a4.roa (raw, json)
Hash identifier:          4HEi8DAIsCsXm78B7Zg1j5FpkNw87EF1dgH5vf1lIuU=
Subject key identifier:   D0:8B:1F:00:A3:6E:C2:F2:08:8C:69:6F:61:E7:D7:40:58:1C:21:99
Certificate issuer:       /CN=21bc3777-de7d-4aed-88bc-9c652ed17843
Certificate serial:       010D0C9F4328584D2D3F74EB775D58D44AD00D40
Authority key identifier: 51:D1:4C:A5:50:D0:D0:72:00:46:BF:9C:5F:E7:45:08:7E:B4:58:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/f2a8e2bd-ba4e-3209-b315-1823ebb403a4.roa
Signing time:             Sun 15 Mar 2026 13:00:41 +0000
ROA not before:           Sun 15 Mar 2026 13:00:41 +0000
ROA not after:            Sat 13 Jun 2026 13:00:41 +0000
asID:                     46188
IP address blocks:        199.21.176.0/22 maxlen: 22
                          199.45.28.0/22 maxlen: 22
                          208.93.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/21bc3777-de7d-4aed-88bc-9c652ed17843.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/21bc3777-de7d-4aed-88bc-9c652ed17843.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2d:3f:74:eb:77:5d:58:d4:4a:d0:0d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21bc3777-de7d-4aed-88bc-9c652ed17843
        Validity
            Not Before: Mar 15 13:00:41 2026 GMT
            Not After : Jun 13 13:00:41 2026 GMT
        Subject: CN=e5668e7a-1875-4ea6-96c1-1136e1bc68a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:00:aa:4e:4c:f0:5e:88:e6:d9:43:9a:a1:41:
                    b8:19:0c:96:65:62:f4:56:08:6b:01:47:90:0c:6a:
                    a6:49:7b:34:fb:35:a5:41:a5:7c:15:5e:7f:de:b0:
                    0a:d1:fa:f8:b6:ae:54:0f:15:84:15:c4:77:d9:3e:
                    71:a4:5f:f9:78:ca:bd:90:27:ab:6a:d7:63:35:ee:
                    b6:85:37:64:0c:b0:10:5b:9f:22:d6:91:52:36:f7:
                    87:15:b9:1b:2a:45:2d:e5:27:83:7d:20:36:5a:da:
                    93:4d:e1:f6:c9:54:63:d5:90:eb:c7:43:9e:b1:ae:
                    36:bb:99:24:40:c7:b6:a1:1f:80:51:c1:54:91:0a:
                    24:a4:a6:1d:8b:50:a1:89:15:bf:67:0b:55:a5:bf:
                    64:68:ed:03:ac:b0:f4:ea:65:6b:5d:d6:29:fe:e1:
                    3a:85:9e:80:66:53:3a:f7:ea:5d:92:27:98:dd:80:
                    84:f8:28:93:df:66:af:cf:75:ad:b5:1f:d2:f2:52:
                    65:d8:37:38:29:a0:64:6f:b7:ae:78:68:28:2e:f3:
                    39:13:ca:e0:a3:a4:a8:7c:e4:e6:e6:13:a9:d9:50:
                    51:19:8e:26:33:d5:37:9d:43:2d:cf:c5:8e:5c:e8:
                    bb:58:a2:69:f4:4c:5e:a8:f6:6f:20:bd:5f:38:af:
                    f8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:8B:1F:00:A3:6E:C2:F2:08:8C:69:6F:61:E7:D7:40:58:1C:21:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/f2a8e2bd-ba4e-3209-b315-1823ebb403a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/21bc3777-de7d-4aed-88bc-9c652ed17843.crl

            X509v3 Authority Key Identifier:
                keyid:51:D1:4C:A5:50:D0:D0:72:00:46:BF:9C:5F:E7:45:08:7E:B4:58:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.21.176.0/22
                  199.45.28.0/22
                  208.93.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:94:c1:5d:6d:4d:98:0b:3b:d3:f5:f6:ff:da:d1:05:33:1f:
         8a:12:2c:f1:2b:97:44:52:9c:7d:d9:8f:6a:43:81:36:f3:c5:
         29:c6:c5:2d:53:3d:58:31:57:1c:a0:98:5a:82:0d:25:ca:e3:
         28:9f:ce:d2:3e:7a:c7:0c:8e:00:c3:ec:63:bf:ef:c1:68:e1:
         a5:cd:c2:5e:93:29:7e:e6:50:fe:38:f9:5f:07:74:d6:0e:ff:
         7e:72:4f:9b:a3:15:27:73:38:c9:78:ad:10:f5:59:ed:e4:75:
         30:39:94:c7:d7:f2:12:31:dc:6a:72:ae:a4:af:5f:f6:13:9f:
         cd:66:9e:c4:12:e8:15:7a:09:79:b9:14:8e:2b:8c:4e:eb:05:
         ba:b0:b7:63:30:de:56:f6:b5:7a:d4:45:ab:b2:0f:68:71:70:
         fd:9a:e8:37:dc:73:6e:cf:f2:9b:b4:c1:8a:5a:72:dd:41:e3:
         a8:57:eb:2b:f6:f3:66:6e:c8:2a:b7:f1:7b:7e:25:0b:e3:02:
         d5:fb:21:94:eb:58:1c:95:04:31:43:d2:76:f2:cc:03:f8:72:
         60:1f:0b:ac:5b:a8:78:29:0f:6f:99:7f:71:a3:0c:40:5a:f5:
         db:90:da:70:9c:54:13:68:34:e8:95:cd:69:7b:f2:02:73:03:
         16:a5:1f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:25:46 2026 by rpki-client