Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2d9c8c49-35fe-42fb-a908-c07b97255b4a/817d97f7-5adc-3334-9df3-d50b2f74f417.roa
File:                     817d97f7-5adc-3334-9df3-d50b2f74f417.roa (raw, json)
Hash identifier:          DXxZpDcjFEh/epVDTHy7ABm26Z1FhSeS3vqOhL4j4NU=
Subject key identifier:   46:A8:06:D2:44:CE:D3:4C:31:0B:FA:3C:B8:70:0C:1A:45:49:13:0F
Certificate issuer:       /CN=2d9c8c49-35fe-42fb-a908-c07b97255b4a
Certificate serial:       010D0C9F4328584E35FF1AAFF9DB63EB23204D20
Authority key identifier: DE:BD:AA:75:38:5A:90:C6:36:0B:ED:CA:72:F4:F4:17:4A:0E:93:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2d9c8c49-35fe-42fb-a908-c07b97255b4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2d9c8c49-35fe-42fb-a908-c07b97255b4a/817d97f7-5adc-3334-9df3-d50b2f74f417.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     394769
IP address blocks:        141.216.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2d9c8c49-35fe-42fb-a908-c07b97255b4a/2d9c8c49-35fe-42fb-a908-c07b97255b4a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2d9c8c49-35fe-42fb-a908-c07b97255b4a/2d9c8c49-35fe-42fb-a908-c07b97255b4a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2d9c8c49-35fe-42fb-a908-c07b97255b4a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:1a:af:f9:db:63:eb:23:20:4d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d9c8c49-35fe-42fb-a908-c07b97255b4a
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=0922bd67-6ab6-4b2e-8fb7-d828bd634245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:6c:8c:bb:82:9d:bf:41:70:09:4f:7b:2a:72:
                    8e:94:46:6a:2e:c7:6c:e8:27:10:11:e3:67:fd:5b:
                    08:2e:36:9f:db:d0:6d:91:73:a0:ee:34:74:45:e1:
                    28:37:84:13:5b:41:6e:13:1a:8f:0e:fa:2d:b0:93:
                    76:1f:7a:99:37:82:d1:f5:be:5d:1c:6d:c2:23:c8:
                    a4:65:9c:18:dd:be:44:38:ff:38:0d:90:f2:6b:8d:
                    18:9a:35:ec:b6:59:b6:95:25:8f:a3:07:08:40:53:
                    59:78:1d:20:78:e1:d4:5b:ff:4c:f6:78:cc:8e:51:
                    e8:81:58:03:39:3d:af:da:f4:47:08:97:32:5c:0e:
                    da:ea:72:73:c9:67:4f:8c:57:2c:c8:72:5b:ee:04:
                    e1:c6:28:a4:9e:7d:b3:24:a2:67:ce:16:a2:fc:a5:
                    f2:3b:c6:f6:8b:f2:f6:2e:dc:4c:c6:ce:17:1b:0e:
                    1e:fe:9f:23:3f:1e:55:b7:c6:28:4f:4c:12:0b:47:
                    d5:ab:be:8e:d2:ee:98:b1:31:0b:4e:b4:58:ad:66:
                    07:eb:d8:1a:32:1f:9f:78:12:16:f8:b5:c5:3c:02:
                    46:04:84:4d:68:ed:02:f9:41:8c:a5:14:98:69:59:
                    b8:99:b9:ea:c0:e4:03:b0:1c:02:c4:31:11:f1:2b:
                    63:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A8:06:D2:44:CE:D3:4C:31:0B:FA:3C:B8:70:0C:1A:45:49:13:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2d9c8c49-35fe-42fb-a908-c07b97255b4a/817d97f7-5adc-3334-9df3-d50b2f74f417.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2d9c8c49-35fe-42fb-a908-c07b97255b4a/2d9c8c49-35fe-42fb-a908-c07b97255b4a.crl

            X509v3 Authority Key Identifier:
                keyid:DE:BD:AA:75:38:5A:90:C6:36:0B:ED:CA:72:F4:F4:17:4A:0E:93:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2d9c8c49-35fe-42fb-a908-c07b97255b4a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.216.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:82:08:66:a0:9b:a4:70:3b:63:d2:9a:2e:19:be:6d:91:c2:
         cc:a7:7b:51:86:a1:1f:9a:81:0f:d5:fe:1e:a7:dc:f4:a3:9e:
         00:ce:94:37:69:20:8c:8f:83:0b:73:22:cc:54:e4:0c:88:15:
         41:f1:be:d1:98:18:b8:7b:af:4e:d4:26:b4:10:ea:cc:2d:16:
         e0:e3:e8:b4:13:72:71:7e:d9:84:01:2f:ec:20:76:02:c4:57:
         80:5e:bd:22:32:22:bd:7c:63:4d:e8:d6:49:1f:e1:cc:ff:13:
         de:7b:49:9e:ce:ec:b4:14:ee:fc:21:d2:ea:6e:ff:62:9d:ac:
         0d:a4:b9:1d:53:ff:d0:83:dd:ca:e9:91:7c:1e:c7:0d:f5:ac:
         45:e6:0a:d3:bd:7c:36:d2:47:ac:e5:66:b7:6c:68:87:80:77:
         56:24:36:cb:ae:1a:eb:ff:91:0f:6e:02:0b:f2:db:a6:8d:67:
         60:0e:01:2a:e0:9c:9d:f4:e2:33:67:93:03:6f:42:c0:f1:e3:
         25:a4:3f:83:e7:2b:a8:c5:72:d2:eb:6d:a1:62:52:e1:1a:f0:
         7b:fc:07:e3:8e:b5:fe:d2:04:57:13:e5:d6:c3:fd:15:cf:a9:
         43:9e:df:30:27:ae:08:c3:7a:11:62:ee:ed:f5:cb:45:42:01:
         e8:a9:d8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:50:13 2026 by rpki-client