Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9429c49c-ebf4-4253-a67a-a9227bba188a/fe251756-8ae3-3289-8880-1fd5ff0e96b7.roa
File:                     fe251756-8ae3-3289-8880-1fd5ff0e96b7.roa (raw, json)
Hash identifier:          qpKoyyro+LjxWjlvCbMBV4UIuQu/Fix0zYFBeAhQhOI=
Subject key identifier:   5C:7E:B8:D4:9D:2E:B1:CE:85:B0:8F:45:F0:E2:A8:CE:E8:2E:D9:36
Certificate issuer:       /CN=9429c49c-ebf4-4253-a67a-a9227bba188a
Certificate serial:       010D0C9F4328584F4973728E243F85DCB8753BC0
Authority key identifier: CF:23:8F:33:83:4E:3C:D0:FD:6C:2F:33:70:FF:EA:F0:F4:B8:BE:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9429c49c-ebf4-4253-a67a-a9227bba188a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9429c49c-ebf4-4253-a67a-a9227bba188a/fe251756-8ae3-3289-8880-1fd5ff0e96b7.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19843
IP address blocks:        216.59.132.0/22 maxlen: 24
                          2602:810:3000::/44 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9429c49c-ebf4-4253-a67a-a9227bba188a/9429c49c-ebf4-4253-a67a-a9227bba188a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9429c49c-ebf4-4253-a67a-a9227bba188a/9429c49c-ebf4-4253-a67a-a9227bba188a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9429c49c-ebf4-4253-a67a-a9227bba188a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:72:8e:24:3f:85:dc:b8:75:3b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9429c49c-ebf4-4253-a67a-a9227bba188a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=18f4db49-e9c4-4ed0-bded-2ffbaedf7874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:78:37:ce:5d:7f:cb:ae:d5:ec:d5:fa:63:74:
                    6b:05:01:9c:6a:bf:8b:c1:69:65:69:ec:c0:80:3b:
                    bc:b2:0c:29:03:d3:57:d8:31:16:4c:02:2e:da:54:
                    43:9d:8c:6e:dc:76:7f:ef:86:04:48:19:93:49:2c:
                    18:74:64:a7:5f:13:a4:6b:65:26:d9:34:3d:48:81:
                    42:c5:50:d5:8d:d0:36:8c:d8:55:30:9f:f3:b6:1a:
                    2a:07:4a:1c:84:47:79:47:74:02:6b:12:61:23:a2:
                    b0:c0:c4:6a:93:45:4d:6a:02:26:33:6d:f8:db:6e:
                    a0:13:11:6b:63:c2:55:f1:fb:42:3c:da:df:f3:97:
                    9a:c5:e2:a4:fa:77:44:69:a8:17:76:57:93:1e:57:
                    dc:ec:8a:57:d1:23:79:99:15:17:73:db:a0:fb:7f:
                    fb:61:47:69:d3:18:dc:3e:8d:0c:b9:9b:8e:88:0f:
                    23:eb:e7:9f:c3:13:f4:1d:3a:fb:08:ba:5d:27:c1:
                    3a:d4:c9:6c:fc:0b:0c:fa:ea:26:9b:59:24:47:68:
                    ff:b8:b1:40:15:41:87:b3:9c:b9:8c:ee:9d:2b:90:
                    55:67:57:64:2b:c2:f7:0a:52:58:0c:ac:b9:57:cd:
                    a0:0a:b8:4c:a2:ce:d2:95:c0:85:86:95:8e:85:da:
                    7b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:7E:B8:D4:9D:2E:B1:CE:85:B0:8F:45:F0:E2:A8:CE:E8:2E:D9:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9429c49c-ebf4-4253-a67a-a9227bba188a/fe251756-8ae3-3289-8880-1fd5ff0e96b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9429c49c-ebf4-4253-a67a-a9227bba188a/9429c49c-ebf4-4253-a67a-a9227bba188a.crl

            X509v3 Authority Key Identifier:
                keyid:CF:23:8F:33:83:4E:3C:D0:FD:6C:2F:33:70:FF:EA:F0:F4:B8:BE:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9429c49c-ebf4-4253-a67a-a9227bba188a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.59.132.0/22
                IPv6:
                  2602:810:3000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:ef:a0:ab:94:b0:eb:70:01:3a:89:07:46:cc:b1:33:8e:2e:
         e7:2b:c8:1e:02:a2:cc:6e:73:4e:9f:22:7e:ee:c4:40:d8:14:
         01:15:22:2c:34:b7:34:50:77:8f:3f:8f:3d:5c:ed:fd:96:42:
         b5:d4:d5:d4:9f:dc:f3:5c:92:7e:62:40:42:b4:e7:bc:d0:55:
         25:fa:e2:42:33:bd:49:77:48:ac:c1:f4:7d:35:6b:51:f5:3e:
         f1:41:8f:ca:94:8d:a5:6a:e3:d6:54:1c:97:96:53:8b:32:8b:
         1e:a6:83:32:15:7d:6e:20:d5:2d:67:81:08:d7:b3:1e:29:5e:
         bd:e0:f7:2a:49:36:e1:c6:0a:cc:44:24:1b:7f:17:0d:49:91:
         2f:51:5c:c8:56:51:d8:8a:ae:53:91:67:37:e8:4a:7d:1a:ea:
         11:40:7e:c3:57:13:0d:4d:e8:1e:be:1b:8e:04:0e:85:ba:04:
         47:76:83:69:52:a1:4b:d6:36:4c:3c:eb:45:1a:e7:b1:e8:2d:
         00:aa:b0:65:64:66:94:64:aa:6f:4e:ed:0e:bf:a1:6f:c2:c2:
         c6:56:b1:c4:08:e7:8e:1a:6d:c0:97:7f:b3:ee:0b:ac:47:34:
         c1:53:7a:44:ce:21:5e:ce:65:e7:e8:9d:0b:18:9f:6b:a4:4d:
         c3:0a:3e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 10:33:21 2026 by rpki-client