Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/d23538cd-dee5-3adb-a43f-ff9d3b86969b.roa
File:                     d23538cd-dee5-3adb-a43f-ff9d3b86969b.roa (raw, json)
Hash identifier:          txbSKCW1HW8B1wcyQxSVjKqwLYeuojg4XGZ0GSwstSI=
Subject key identifier:   23:2A:38:73:37:DD:1D:4D:E5:91:0C:11:9B:19:6C:CF:B2:10:97:3C
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584E87EC36EA80F2579D2E204900
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/d23538cd-dee5-3adb-a43f-ff9d3b86969b.roa
Signing time:             Fri 17 Jul 2026 17:18:35 +0000
ROA not before:           Fri 17 Jul 2026 17:18:35 +0000
ROA not after:            Thu 15 Oct 2026 17:18:35 +0000
asID:                     7922
IP address blocks:        216.24.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:87:ec:36:ea:80:f2:57:9d:2e:20:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Jul 17 17:18:35 2026 GMT
            Not After : Oct 15 17:18:35 2026 GMT
        Subject: CN=e29f2c85-f752-497a-b41a-4954b0aebb93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d6:99:2c:0d:2d:ee:82:aa:45:80:e7:d9:a6:
                    8e:aa:0a:88:9e:1b:2b:4d:90:03:4c:ad:2c:82:df:
                    22:c3:5d:ec:ee:42:81:4b:2c:4e:f7:54:a7:db:3d:
                    96:57:c4:83:d0:d5:32:48:9a:d0:4e:d1:4f:42:22:
                    09:d3:c7:44:51:85:58:4b:c9:55:06:57:b5:26:06:
                    6e:2b:79:cf:da:25:16:96:d3:88:e3:02:bb:0b:d3:
                    0c:98:fa:d5:54:7a:c5:97:10:4c:e7:c6:57:0a:84:
                    b5:01:16:71:20:25:1a:29:13:42:92:2c:fc:bd:d7:
                    fb:5b:3f:9f:db:1b:49:83:8e:2a:21:c7:7a:14:b1:
                    ec:17:df:2e:0f:4e:f9:a3:f3:10:47:74:c0:8c:81:
                    24:f8:ea:d1:69:ac:ed:49:f4:50:2f:9f:99:ff:82:
                    40:13:d4:84:3b:e0:ae:95:6b:78:3d:07:6b:13:9b:
                    c3:07:c5:90:4c:fb:be:66:55:7b:ad:e7:16:a8:5f:
                    3a:0c:c5:4c:05:0c:c5:7b:98:8c:b1:3e:82:88:77:
                    58:9e:a7:6b:90:f8:34:51:e5:0e:07:34:fa:30:b6:
                    ce:64:65:7a:ce:45:a7:0f:55:86:b2:e8:74:6a:13:
                    04:65:3b:67:83:6f:5d:df:ac:be:9f:91:20:f9:0b:
                    bb:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:2A:38:73:37:DD:1D:4D:E5:91:0C:11:9B:19:6C:CF:B2:10:97:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/d23538cd-dee5-3adb-a43f-ff9d3b86969b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.24.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:a2:07:34:8e:66:fb:10:eb:56:e0:6d:b8:18:42:d3:cd:ab:
         9d:fe:75:39:26:cc:01:20:dc:d4:0f:15:c6:e3:fe:d8:09:67:
         f8:92:28:71:7c:f5:72:e3:26:a1:1c:92:80:0e:a2:2a:4b:57:
         40:e8:b0:4a:59:7a:fd:69:e1:c1:5f:58:35:7e:b2:a4:86:9e:
         34:89:8e:ec:55:40:fc:63:fa:b6:26:87:d8:4e:93:cb:e0:0f:
         f8:51:9d:b4:f5:dc:36:e9:59:b6:86:85:89:6e:1b:9e:96:ed:
         e2:03:dd:cd:2c:43:5d:f6:b1:a6:77:3a:18:73:19:ef:a1:c4:
         a4:71:b7:c6:25:cc:e5:ff:81:79:ca:40:bd:04:ea:2a:26:92:
         ca:b8:2f:ce:bb:75:78:ed:df:f9:dd:fb:ac:cc:34:5e:a4:f3:
         ea:1a:ef:4a:ef:1c:29:98:67:0f:5b:5b:5f:d6:79:91:fd:cd:
         0a:1f:07:2f:00:09:c8:81:5b:d4:c2:be:32:35:b7:7e:3e:23:
         86:78:9c:11:b1:f8:18:02:04:7e:f9:c1:cf:04:04:4a:9c:c4:
         a7:e4:85:74:ff:d6:5e:ae:9b:88:bf:83:66:32:cc:14:a2:66:
         e9:52:51:54:cd:e7:3d:2f:26:6a:63:a7:1f:2f:f2:be:19:5a:
         37:82:8a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:07:56 2026 by rpki-client