Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ff30b46f-3164-454e-9713-96a04c0b8647/7bcb8fd2-dc08-3fb0-9635-287a739d4e17.roa
File:                     7bcb8fd2-dc08-3fb0-9635-287a739d4e17.roa (raw, json)
Hash identifier:          D5ZfWEf78+YZM5Smq4xAek92m8C1pYB6ULfUxoQFCVg=
Subject key identifier:   02:1A:60:6A:A7:7E:49:12:5E:E5:8F:10:79:4D:4F:56:CA:12:6F:61
Certificate issuer:       /CN=ff30b46f-3164-454e-9713-96a04c0b8647
Certificate serial:       010D0C9F4328584F99316B6A132635D71EB9FD18
Authority key identifier: D7:64:AF:95:64:E9:57:D3:27:51:ED:3B:61:EA:F2:B7:E4:8A:6D:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ff30b46f-3164-454e-9713-96a04c0b8647.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ff30b46f-3164-454e-9713-96a04c0b8647/7bcb8fd2-dc08-3fb0-9635-287a739d4e17.roa
Signing time:             Fri 23 Oct 2026 14:33:42 +0000
ROA not before:           Fri 23 Oct 2026 14:33:42 +0000
ROA not after:            Thu 21 Jan 2027 15:33:42 +0000
asID:                     23532
IP address blocks:        216.40.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ff30b46f-3164-454e-9713-96a04c0b8647/ff30b46f-3164-454e-9713-96a04c0b8647.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ff30b46f-3164-454e-9713-96a04c0b8647/ff30b46f-3164-454e-9713-96a04c0b8647.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ff30b46f-3164-454e-9713-96a04c0b8647.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:99:31:6b:6a:13:26:35:d7:1e:b9:fd:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff30b46f-3164-454e-9713-96a04c0b8647
        Validity
            Not Before: Oct 23 14:33:42 2026 GMT
            Not After : Jan 21 15:33:42 2027 GMT
        Subject: CN=3e4da03f-3e52-449e-8d57-51fac698d0ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4a:95:15:80:40:f4:b9:83:f5:49:3c:79:54:
                    2f:34:2a:90:1f:4e:27:f2:23:ee:86:60:7f:7f:c3:
                    ad:e8:9d:d5:33:16:ad:b0:36:e1:4c:1c:3f:52:a4:
                    b8:d0:4a:41:1d:8c:6e:90:d4:c8:94:48:b7:f0:f4:
                    f8:ea:7e:37:30:3a:75:4b:51:0d:27:19:56:e6:dd:
                    62:75:80:b6:01:1e:eb:77:c6:56:4d:21:82:b6:ab:
                    df:11:25:5a:7d:fe:e7:0f:a0:05:84:6d:ae:21:6b:
                    e8:24:7b:5a:0b:1f:55:5b:1c:90:98:74:e9:78:4a:
                    64:03:a5:3e:ea:19:b4:48:7b:e8:b1:0b:df:81:9a:
                    5b:24:b9:3f:ad:d1:16:bd:8d:ac:a0:bf:3f:0b:4f:
                    14:4b:d2:fd:43:ed:a5:e8:53:3c:8b:72:d5:35:ce:
                    4c:de:3a:70:c8:88:f0:5d:ce:7c:e1:0f:b2:5f:39:
                    c0:5a:a0:73:0f:66:e9:65:77:05:b4:54:51:01:80:
                    aa:b2:84:54:c9:e0:1f:30:d2:ef:e6:48:94:38:09:
                    ca:ea:20:05:09:d8:e1:de:54:0e:52:8d:9a:f3:5a:
                    bd:11:cf:c5:2c:01:a5:1c:11:61:0f:65:a2:c4:d9:
                    0f:17:53:ca:50:5e:c5:f1:96:98:76:b2:e8:21:80:
                    d5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:1A:60:6A:A7:7E:49:12:5E:E5:8F:10:79:4D:4F:56:CA:12:6F:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ff30b46f-3164-454e-9713-96a04c0b8647/7bcb8fd2-dc08-3fb0-9635-287a739d4e17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ff30b46f-3164-454e-9713-96a04c0b8647/ff30b46f-3164-454e-9713-96a04c0b8647.crl

            X509v3 Authority Key Identifier:
                keyid:D7:64:AF:95:64:E9:57:D3:27:51:ED:3B:61:EA:F2:B7:E4:8A:6D:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ff30b46f-3164-454e-9713-96a04c0b8647.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.40.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:37:43:94:80:fa:f3:e2:78:25:e7:1f:0b:01:32:2b:64:c3:
         be:dd:fc:a3:28:8b:f4:b5:6a:28:7f:d8:6d:b2:f2:00:79:4b:
         b7:77:4c:47:49:32:e4:e4:f6:ac:2a:0a:bd:8e:8a:53:81:9b:
         c4:d5:b8:5d:ed:2a:9e:d4:f0:ee:27:ed:fe:ed:8f:bf:98:2b:
         19:c6:8f:7a:a3:e9:13:63:a7:fb:d3:a1:d5:2e:ce:3d:67:e7:
         92:c6:d8:f1:03:30:1e:31:5c:0d:ff:a5:ba:89:a2:e8:79:4f:
         73:48:5a:6f:e9:30:6e:5f:0e:7d:20:6b:d6:4e:e8:9a:8a:96:
         b0:88:5c:70:0a:9c:1d:26:fc:bc:d0:72:f1:25:3e:68:a3:0d:
         1f:e6:08:05:97:36:11:9d:05:19:9c:e9:5a:3e:a4:3d:f4:ee:
         3c:03:96:b2:16:4a:d2:03:22:f5:af:a0:4a:c5:23:d9:b2:88:
         1a:73:7c:34:28:57:3e:d5:c4:20:df:a5:dd:48:d1:52:43:3e:
         b6:6e:d0:64:46:ca:38:3a:d9:96:50:c5:97:0f:d0:43:a3:47:
         b4:34:89:35:f8:06:ab:61:2a:6a:bb:8f:45:2c:c2:52:82:18:
         2d:90:72:c5:27:d7:3a:00:95:b4:4d:a2:f5:c4:62:5f:84:e6:
         a8:75:10:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 13:07:53 2026 by rpki-client