Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/051d41b1-fc48-3fd0-9525-aa3701ddeab9.roa
File:                     051d41b1-fc48-3fd0-9525-aa3701ddeab9.roa (raw, json)
Hash identifier:          p1oY/XQyduC71LiYVe89QNRxnbKxPmT0jQcWtQRuQUY=
Subject key identifier:   EB:EB:61:2A:9E:B5:F3:55:85:B3:22:E0:D4:19:4F:8C:F2:F9:AE:E8
Certificate issuer:       /CN=28035ea2-c1d5-4b29-a8c4-1b31379c8aff
Certificate serial:       010D0C9F4328584D922BD5ABC353A96455E1C040
Authority key identifier: F1:AF:E0:C6:3F:41:DB:75:5C:B2:1E:FD:F1:D1:F8:F7:D0:A9:FB:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/051d41b1-fc48-3fd0-9525-aa3701ddeab9.roa
Signing time:             Mon 20 Apr 2026 16:37:55 +0000
ROA not before:           Mon 20 Apr 2026 16:37:55 +0000
ROA not after:            Sun 19 Jul 2026 16:37:55 +0000
asID:                     22641
IP address blocks:        216.169.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:92:2b:d5:ab:c3:53:a9:64:55:e1:c0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28035ea2-c1d5-4b29-a8c4-1b31379c8aff
        Validity
            Not Before: Apr 20 16:37:55 2026 GMT
            Not After : Jul 19 16:37:55 2026 GMT
        Subject: CN=3cecf960-3d0a-4097-acc8-6ccd5aacbbdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ec:b1:ae:2f:21:54:7b:2e:17:5a:0b:4a:46:
                    d3:3f:f8:70:02:f1:92:dd:5a:40:8c:60:1f:17:57:
                    12:ef:ef:3c:c0:93:c5:c4:33:d7:6b:48:39:a4:cb:
                    a6:a8:a3:a9:6b:d0:aa:75:9b:5b:23:cc:ec:70:c7:
                    00:b4:40:35:94:f9:74:79:32:22:f6:0b:d0:a7:2f:
                    ec:39:36:15:31:1d:f2:bc:d2:5d:16:75:10:14:89:
                    40:c9:02:63:86:63:06:5a:15:e3:e3:51:58:c2:91:
                    30:7c:1b:bf:ca:7a:0b:6b:69:d8:4e:29:c8:1a:e5:
                    33:d1:79:c1:c4:f2:29:99:2a:ad:4f:5d:9d:2a:3c:
                    53:a5:fc:a9:74:93:63:c1:b0:24:b7:ae:62:12:a5:
                    54:99:53:db:ad:b7:45:02:5e:b6:8f:88:89:f5:59:
                    ba:dc:25:88:62:16:e8:8f:cb:8f:97:72:27:71:a7:
                    da:e7:95:d2:c3:fb:07:2f:76:41:c7:0e:55:dc:92:
                    c1:6b:ee:41:d1:3e:eb:d4:1a:a7:11:d9:25:aa:76:
                    87:28:37:88:70:ab:e7:0e:e5:c1:99:e4:99:e5:ae:
                    78:9b:46:50:3c:b3:19:67:0a:ae:f5:b2:94:e5:af:
                    ab:da:21:2a:34:0f:39:18:21:22:7d:41:ba:f7:f2:
                    17:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:EB:61:2A:9E:B5:F3:55:85:B3:22:E0:D4:19:4F:8C:F2:F9:AE:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/051d41b1-fc48-3fd0-9525-aa3701ddeab9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.crl

            X509v3 Authority Key Identifier:
                keyid:F1:AF:E0:C6:3F:41:DB:75:5C:B2:1E:FD:F1:D1:F8:F7:D0:A9:FB:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.169.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:49:d8:19:ff:56:5e:79:99:75:ea:75:3c:26:5f:ab:d9:4c:
         32:07:e9:e5:e9:4f:ab:83:2e:d5:2a:ed:1f:37:4a:0d:04:34:
         2d:62:0d:91:7d:f7:ba:da:7b:97:42:18:de:df:3e:13:a1:b7:
         12:7c:b9:d2:f7:a4:01:73:b4:90:54:b7:90:6e:12:45:10:34:
         88:45:6d:74:45:5a:8d:e4:b9:53:cb:61:47:30:6a:ab:b8:39:
         39:86:d6:92:15:1a:0c:1e:77:5e:3e:6f:c7:76:29:9a:58:f4:
         e3:65:0f:40:5b:65:9d:9a:40:b5:96:8d:75:7c:c9:5f:06:32:
         f8:73:73:a0:ae:21:f7:03:d6:50:0a:19:fa:03:98:96:a9:be:
         1d:86:dd:f4:24:0f:86:de:79:4b:d5:ed:65:9f:5c:06:e6:3b:
         52:ed:22:91:33:48:fd:82:aa:f7:7b:f0:f8:76:41:48:ad:3b:
         4c:90:51:b1:62:15:f0:30:d6:e0:54:5d:36:4c:7d:37:1e:49:
         16:e3:70:bc:f4:fc:ab:a7:52:6c:e7:62:42:a8:91:a6:19:74:
         9c:11:8f:25:aa:20:9c:4c:34:73:a8:db:46:9f:6b:74:87:cd:
         6b:28:1b:88:d0:49:6d:50:f1:2d:fe:31:bd:bc:6e:e2:f9:c9:
         26:03:76:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:02:41 2026 by rpki-client