Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b26f3895-61c3-4f43-ab2c-d515e72a36b1/1bcbe551-887b-308c-90ff-2fd2088852ca.roa
File:                     1bcbe551-887b-308c-90ff-2fd2088852ca.roa (raw, json)
Hash identifier:          ym2z2R2L4Jgy29y2XHoE1bmx261Z8Q2kxI5atzbGIuo=
Subject key identifier:   B7:D9:53:A4:79:5F:57:8A:2B:EC:1D:B6:4B:29:6D:C5:4E:75:AF:E4
Certificate issuer:       /CN=b26f3895-61c3-4f43-ab2c-d515e72a36b1
Certificate serial:       010D0C9F4328584F6FFBAF517E303D908328E300
Authority key identifier: EC:83:51:63:1D:28:5B:65:47:04:30:79:5A:CD:67:B3:30:DF:D9:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b26f3895-61c3-4f43-ab2c-d515e72a36b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b26f3895-61c3-4f43-ab2c-d515e72a36b1/1bcbe551-887b-308c-90ff-2fd2088852ca.roa
Signing time:             Thu 08 Oct 2026 20:17:17 +0000
ROA not before:           Thu 08 Oct 2026 20:17:17 +0000
ROA not after:            Wed 06 Jan 2027 21:17:17 +0000
asID:                     0
IP address blocks:        216.52.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b26f3895-61c3-4f43-ab2c-d515e72a36b1/b26f3895-61c3-4f43-ab2c-d515e72a36b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b26f3895-61c3-4f43-ab2c-d515e72a36b1/b26f3895-61c3-4f43-ab2c-d515e72a36b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b26f3895-61c3-4f43-ab2c-d515e72a36b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:fb:af:51:7e:30:3d:90:83:28:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b26f3895-61c3-4f43-ab2c-d515e72a36b1
        Validity
            Not Before: Oct  8 20:17:17 2026 GMT
            Not After : Jan  6 21:17:17 2027 GMT
        Subject: CN=0e882ea9-af2b-454b-878c-0f948cd41817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:db:32:d1:c6:44:01:54:3e:a5:1b:e1:8c:64:
                    96:20:99:01:41:56:f6:24:34:f7:d5:9f:77:97:27:
                    a2:c4:c6:11:0d:bd:78:2b:71:32:30:da:e8:d8:21:
                    f0:6b:06:1b:e2:a1:10:04:86:b7:47:f5:27:e2:52:
                    e2:b0:18:d9:32:bb:20:84:d6:17:3a:24:6f:98:91:
                    23:ef:d9:ff:78:a3:b1:21:4a:fb:4d:f5:89:fa:ca:
                    3c:15:c3:c9:bb:0c:dc:d3:9a:d4:67:29:ca:54:75:
                    6b:e2:12:38:e6:09:d8:b7:1e:7e:be:8f:21:36:97:
                    6e:d8:14:dc:04:48:7c:17:58:84:1e:c2:2d:f7:53:
                    47:56:a7:9b:67:cf:f7:db:7c:c7:b9:27:50:53:0e:
                    82:7a:01:04:6b:80:eb:ff:f3:ef:e5:08:48:10:a3:
                    3e:ac:69:6f:11:f0:68:cb:72:44:a2:e9:fc:0b:82:
                    61:12:36:75:09:9b:51:dc:fa:43:c7:78:fb:09:f4:
                    42:1c:07:b8:e3:cb:df:d2:5c:6e:cd:e5:ac:d5:91:
                    14:09:24:b9:1b:b1:4a:9a:d8:6d:45:47:4b:c2:56:
                    94:76:b0:3d:5d:14:ee:21:47:81:58:4a:d7:84:65:
                    6d:97:91:6f:29:f0:cf:ff:45:10:5c:d2:eb:2f:53:
                    8b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D9:53:A4:79:5F:57:8A:2B:EC:1D:B6:4B:29:6D:C5:4E:75:AF:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b26f3895-61c3-4f43-ab2c-d515e72a36b1/1bcbe551-887b-308c-90ff-2fd2088852ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b26f3895-61c3-4f43-ab2c-d515e72a36b1/b26f3895-61c3-4f43-ab2c-d515e72a36b1.crl

            X509v3 Authority Key Identifier:
                keyid:EC:83:51:63:1D:28:5B:65:47:04:30:79:5A:CD:67:B3:30:DF:D9:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b26f3895-61c3-4f43-ab2c-d515e72a36b1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.52.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:49:df:e2:85:16:ac:5f:97:3e:72:00:76:ee:e1:67:f3:65:
         40:a9:c6:8c:12:b4:a2:a3:41:a1:f7:a6:ca:d7:03:05:d6:70:
         8c:85:77:45:b1:7c:06:df:b2:79:7f:24:9c:c1:a4:03:68:56:
         b1:9c:df:95:65:d9:9b:df:03:a8:af:02:b7:70:18:1a:d0:c8:
         f3:ff:61:16:bd:4f:90:a3:25:ca:ba:7f:66:ee:61:8c:38:1d:
         ea:07:0b:10:19:d8:d1:de:75:5b:d6:7e:cc:33:2b:a1:25:b5:
         39:b3:e6:83:dd:e0:39:e5:53:a2:05:aa:23:9c:12:85:9e:c2:
         1f:25:be:1f:08:4a:8e:e8:89:a7:dc:6e:fc:a2:e2:a1:5e:20:
         72:06:07:09:80:06:4f:97:b4:37:f8:23:92:b1:da:05:24:27:
         a9:92:7d:e0:89:c1:72:e3:cf:e9:05:71:e1:d8:91:03:05:91:
         f3:ba:ec:60:56:c0:d7:89:80:5f:4a:1f:1e:ed:71:a3:c6:de:
         ba:f2:b8:30:18:b6:2f:3e:d8:b7:4d:f1:53:87:f6:e6:a4:80:
         2e:95:3e:b2:18:cd:d4:4b:91:42:6a:ff:24:df:ee:8a:74:c1:
         c0:74:05:7f:ba:87:05:88:4e:69:dc:28:cc:7a:ba:22:89:44:
         10:95:b2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:45:41 2026 by rpki-client