Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/516657ac-6019-4ef8-a6bd-3e1e8b8f1d28/08264a58-3eb1-365d-9eb5-abf7e985902d.roa
File:                     08264a58-3eb1-365d-9eb5-abf7e985902d.roa (raw, json)
Hash identifier:          Ntk617v4jARRtgMF0rwkpwPSfdsB26xnm3EnHPYwLb4=
Subject key identifier:   0A:7C:3B:B2:86:44:35:AC:9B:5C:7A:74:4F:82:04:45:06:3E:17:9E
Certificate issuer:       /CN=516657ac-6019-4ef8-a6bd-3e1e8b8f1d28
Certificate serial:       010D0C9F4328584F47B2CC12932D2AE8B5BCC000
Authority key identifier: 97:A5:64:C7:50:29:20:BE:A2:2D:8C:DD:56:E3:E2:99:FA:51:DC:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/516657ac-6019-4ef8-a6bd-3e1e8b8f1d28.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/516657ac-6019-4ef8-a6bd-3e1e8b8f1d28/08264a58-3eb1-365d-9eb5-abf7e985902d.roa
Signing time:             Thu 24 Sep 2026 09:58:06 +0000
ROA not before:           Thu 24 Sep 2026 09:58:06 +0000
ROA not after:            Wed 23 Dec 2026 10:58:06 +0000
asID:                     16509
IP address blocks:        169.128.118.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/516657ac-6019-4ef8-a6bd-3e1e8b8f1d28/516657ac-6019-4ef8-a6bd-3e1e8b8f1d28.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/516657ac-6019-4ef8-a6bd-3e1e8b8f1d28/516657ac-6019-4ef8-a6bd-3e1e8b8f1d28.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/516657ac-6019-4ef8-a6bd-3e1e8b8f1d28.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:47:b2:cc:12:93:2d:2a:e8:b5:bc:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516657ac-6019-4ef8-a6bd-3e1e8b8f1d28
        Validity
            Not Before: Sep 24 09:58:06 2026 GMT
            Not After : Dec 23 10:58:06 2026 GMT
        Subject: CN=2b980520-af93-4b76-a6bc-fbfd3a21140a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:73:a8:94:a9:39:61:2d:84:f3:cc:e4:97:95:
                    93:7b:f2:d6:18:ab:ff:ba:ef:7b:1c:3a:73:f0:45:
                    ac:3f:d6:b5:34:b1:e1:a8:0b:ee:20:ba:c7:ec:33:
                    12:95:81:b1:84:9c:b5:63:0a:9b:ca:b9:02:12:16:
                    37:9d:ef:fa:b8:be:ca:54:63:fe:9f:90:a6:81:3e:
                    d6:05:3a:2c:b3:05:cd:3b:26:e5:9e:d7:03:d5:ab:
                    a6:ad:b6:91:15:a3:fc:64:69:ad:fd:1d:d8:3f:43:
                    09:d0:80:fe:35:be:16:53:65:1e:6b:16:33:ae:b8:
                    ed:3f:00:d6:95:1d:12:2c:6f:90:95:a9:7b:ea:f8:
                    5a:8b:83:7b:43:e7:49:cb:49:ab:63:27:1a:d9:22:
                    24:e5:34:5f:dd:e0:5f:74:a0:78:02:6b:32:fc:8b:
                    f1:bf:8e:39:55:5a:bd:33:23:03:93:30:72:dd:43:
                    3d:dd:24:70:67:27:ed:bf:90:ea:72:11:16:2c:63:
                    32:60:38:fb:18:e4:cd:4e:2b:09:76:b5:db:86:3f:
                    11:cc:d4:e6:18:b0:51:af:1a:16:8d:b5:ef:ab:68:
                    cc:99:23:89:5c:5e:39:8e:42:a6:93:68:89:47:7e:
                    87:b1:89:fd:fb:77:f3:a1:0d:1b:b1:3d:f4:0d:06:
                    31:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:7C:3B:B2:86:44:35:AC:9B:5C:7A:74:4F:82:04:45:06:3E:17:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/516657ac-6019-4ef8-a6bd-3e1e8b8f1d28/08264a58-3eb1-365d-9eb5-abf7e985902d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/516657ac-6019-4ef8-a6bd-3e1e8b8f1d28/516657ac-6019-4ef8-a6bd-3e1e8b8f1d28.crl

            X509v3 Authority Key Identifier:
                keyid:97:A5:64:C7:50:29:20:BE:A2:2D:8C:DD:56:E3:E2:99:FA:51:DC:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/516657ac-6019-4ef8-a6bd-3e1e8b8f1d28.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.128.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:dd:96:5f:95:ab:2c:f9:1f:01:d6:b7:9c:a3:1e:e1:7f:d8:
         38:8f:d3:08:78:c9:07:61:3a:3c:81:93:1e:55:f5:cd:ee:73:
         38:c0:52:2d:d1:df:47:82:d8:a0:c1:7b:ab:f6:45:c4:62:88:
         e3:4a:e5:ff:57:13:4c:68:3e:fb:16:77:bc:fc:75:09:5c:4c:
         f5:85:7e:14:26:47:11:90:a7:6d:a0:21:6c:ed:a7:06:fd:dd:
         9d:af:93:57:36:26:e5:7d:ba:63:81:f6:19:9a:1e:fc:39:1d:
         e6:54:55:02:c6:e9:da:7c:3e:5d:b2:2f:35:86:e6:46:02:78:
         cc:bb:8f:7b:e3:13:35:4f:d0:28:8f:25:43:7a:2f:ad:5b:bf:
         29:e5:18:5a:b4:50:d7:f4:03:54:6e:43:9c:68:0c:1f:da:01:
         07:0a:ba:13:66:6a:3c:0c:c8:10:97:81:8e:6f:20:2d:5e:13:
         a0:e3:11:b5:45:34:4d:45:60:29:aa:d9:41:27:c0:6d:85:25:
         75:96:ec:47:3f:24:9a:df:a1:af:29:c4:5c:9d:7a:ad:b3:d0:
         cc:8e:ed:20:2c:f3:8d:63:3a:9b:2e:70:13:b7:05:b8:4b:ad:
         4e:59:66:5d:a9:a7:6c:00:85:e0:ed:ab:e6:c8:2f:f8:af:82:
         9a:03:e3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 22:38:15 2026 by rpki-client