Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c45cb1c-e77b-45f7-82cb-f77570cda8d0/aec78747-c44b-3b0b-938e-f97eab4797a9.roa
File:                     aec78747-c44b-3b0b-938e-f97eab4797a9.roa (raw, json)
Hash identifier:          BnlE6tWyvYu5ex84QBRNxxlDYXmv76DE3UNR6Mv1Sd4=
Subject key identifier:   D7:3C:0D:56:7A:B3:A2:9F:E7:B1:11:B0:AB:FC:93:7F:41:52:F7:6E
Certificate issuer:       /CN=4c45cb1c-e77b-45f7-82cb-f77570cda8d0
Certificate serial:       010D0C9F4328584F78E82EEAC614EEE320507100
Authority key identifier: 2C:0F:BA:E1:41:15:7F:2B:DA:83:D8:AB:E9:28:0C:CB:5A:D6:E5:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c45cb1c-e77b-45f7-82cb-f77570cda8d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c45cb1c-e77b-45f7-82cb-f77570cda8d0/aec78747-c44b-3b0b-938e-f97eab4797a9.roa
Signing time:             Mon 12 Oct 2026 01:00:13 +0000
ROA not before:           Mon 12 Oct 2026 01:00:13 +0000
ROA not after:            Sun 10 Jan 2027 02:00:13 +0000
asID:                     3257
IP address blocks:        216.39.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c45cb1c-e77b-45f7-82cb-f77570cda8d0/4c45cb1c-e77b-45f7-82cb-f77570cda8d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c45cb1c-e77b-45f7-82cb-f77570cda8d0/4c45cb1c-e77b-45f7-82cb-f77570cda8d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c45cb1c-e77b-45f7-82cb-f77570cda8d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:78:e8:2e:ea:c6:14:ee:e3:20:50:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c45cb1c-e77b-45f7-82cb-f77570cda8d0
        Validity
            Not Before: Oct 12 01:00:13 2026 GMT
            Not After : Jan 10 02:00:13 2027 GMT
        Subject: CN=86608df7-9daa-430f-91f5-fe6fd4bedc6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1e:66:73:c3:64:7e:0e:f5:08:20:ec:47:f2:
                    c4:27:a8:7e:bd:c6:8f:7b:ef:31:54:5d:85:da:99:
                    50:5c:38:20:b0:ae:6f:98:39:94:66:67:78:bc:36:
                    c2:cc:0c:e7:dc:71:68:7a:66:7d:5d:b2:b0:aa:f1:
                    b5:6f:b5:8a:ee:d0:a0:a7:43:92:71:ae:74:06:58:
                    cc:40:51:68:7d:92:f5:a2:53:97:9e:49:0b:10:c5:
                    ca:17:59:10:a1:b0:20:9c:87:a9:11:e3:16:6a:2f:
                    81:dd:30:24:23:06:b7:5f:6d:d8:d1:7e:91:4e:87:
                    e2:cd:2a:39:3a:89:6c:0c:35:8b:bc:5e:7e:67:a3:
                    d1:84:75:54:d0:30:33:93:e7:9b:dc:14:dd:71:22:
                    a3:49:fd:f5:01:42:8f:44:5e:a9:94:c5:8e:79:60:
                    ce:f0:cd:6b:73:a2:f4:45:7a:1a:26:99:1f:97:63:
                    35:89:7a:ad:cc:34:de:ed:9f:e8:a5:e6:56:ef:44:
                    1d:a4:00:be:3d:9e:5e:78:45:d2:36:d2:9b:d0:c7:
                    dd:8e:1f:c2:3c:a9:4d:86:77:14:3f:65:90:7b:76:
                    e3:7e:01:23:73:8a:f0:19:e7:14:fb:08:f2:54:39:
                    5c:38:92:52:a5:92:7e:6b:38:4b:83:ed:e9:6c:0f:
                    7a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:3C:0D:56:7A:B3:A2:9F:E7:B1:11:B0:AB:FC:93:7F:41:52:F7:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c45cb1c-e77b-45f7-82cb-f77570cda8d0/aec78747-c44b-3b0b-938e-f97eab4797a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c45cb1c-e77b-45f7-82cb-f77570cda8d0/4c45cb1c-e77b-45f7-82cb-f77570cda8d0.crl

            X509v3 Authority Key Identifier:
                keyid:2C:0F:BA:E1:41:15:7F:2B:DA:83:D8:AB:E9:28:0C:CB:5A:D6:E5:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c45cb1c-e77b-45f7-82cb-f77570cda8d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.39.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:8d:84:9b:1c:93:e7:42:8c:9f:95:73:12:a3:76:1d:14:c3:
         e1:fc:23:1a:4f:52:07:77:f0:4a:c2:6e:2b:2a:74:ac:b0:10:
         7e:52:1a:69:c4:52:ef:b4:9c:cb:20:a0:1c:1a:8c:ed:a6:bf:
         8b:d8:67:42:e8:15:8d:f7:24:82:b9:1b:61:a8:f9:40:b5:92:
         7e:3f:46:48:f6:3c:72:37:c7:c8:96:80:95:4f:a9:7d:40:23:
         70:60:17:22:9b:34:1e:12:0d:83:e1:5d:7c:6e:17:bd:e8:7e:
         86:c5:d3:af:7f:f6:6b:03:70:96:28:2f:61:cd:46:a7:b2:ae:
         7e:83:74:3d:ee:4e:0b:50:51:5f:76:4f:73:ee:f3:ab:26:59:
         c0:3b:d6:fe:54:96:4e:88:60:8f:ec:ef:c7:3b:98:ea:8d:7e:
         ad:d8:42:3b:9a:fc:8b:9e:ad:ca:7d:b7:0a:6b:74:cc:f0:6f:
         6b:72:e3:7b:d5:3d:58:4a:9a:b6:bd:5c:3e:be:42:1d:a4:23:
         62:18:6c:aa:c0:03:7a:24:d6:f9:ac:d1:46:61:c2:c1:62:59:
         66:6c:5b:58:bc:cf:fb:cd:b7:99:46:5f:7f:77:33:b4:04:c9:
         70:e4:68:3b:4a:cf:2a:20:4e:60:a8:b1:a8:97:09:00:ab:14:
         d5:09:3b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 21:00:00 2026 by rpki-client