Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/316878ff-0619-3ec4-baf6-fbd8b099be9f.roa
File:                     316878ff-0619-3ec4-baf6-fbd8b099be9f.roa (raw, json)
Hash identifier:          f9EBK2XoRrFJQCda9KhQXvXBXi8+fgQ5hYkro3Q+v7I=
Subject key identifier:   E5:14:9B:DA:6B:7B:C1:F2:45:24:96:78:63:C2:AD:80:B4:55:E7:F9
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584F7FE2E4638F6CEB0129B97B80
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/316878ff-0619-3ec4-baf6-fbd8b099be9f.roa
Signing time:             Wed 14 Oct 2026 13:00:12 +0000
ROA not before:           Wed 14 Oct 2026 13:00:12 +0000
ROA not after:            Tue 12 Jan 2027 14:00:12 +0000
asID:                     22616
IP address blocks:        209.55.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7f:e2:e4:63:8f:6c:eb:01:29:b9:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 14 13:00:12 2026 GMT
            Not After : Jan 12 14:00:12 2027 GMT
        Subject: CN=c0e82c6d-42b5-4024-95b1-db3e250c8b7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3c:d5:28:52:45:ef:40:f8:90:60:2a:af:f5:
                    05:c4:2b:b0:b2:a3:1f:a8:d4:cf:1e:26:01:e8:53:
                    7e:d8:c3:07:b7:47:b9:79:31:b0:36:11:fe:7d:45:
                    8a:8f:6f:55:fa:64:67:78:6d:e5:f7:93:4c:99:c9:
                    84:dd:4b:59:87:eb:8e:b4:3e:fb:16:04:b7:de:e4:
                    5e:15:b5:9e:5f:77:1f:e6:54:2b:aa:bc:78:6f:50:
                    d2:83:d7:af:7a:35:da:0d:6a:ba:d4:7d:c8:75:f4:
                    14:00:74:e6:4d:fe:da:07:22:64:04:77:15:72:ea:
                    15:63:96:0f:61:ac:d1:c4:25:cd:fc:bc:4c:49:33:
                    37:fa:6d:7c:a3:b6:2b:b9:d2:60:d5:3b:1d:7b:2b:
                    16:71:a7:65:20:5b:e3:68:9e:c1:cb:d9:6f:c7:5f:
                    c8:fd:93:b8:49:a4:29:44:02:f3:81:1f:7f:3c:bf:
                    0d:36:19:07:9a:6a:f3:7d:d2:50:a9:8d:c8:f3:32:
                    e4:d9:40:6a:2c:58:c8:51:95:ab:43:83:b6:58:9c:
                    47:1a:86:fa:b0:e6:9d:51:07:fd:17:d5:72:d9:2d:
                    af:0b:8d:fc:84:89:1d:1e:b9:89:a1:b9:b7:c3:c7:
                    3a:90:b9:bd:eb:ab:86:97:b9:2d:bc:7f:71:1f:ba:
                    97:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:14:9B:DA:6B:7B:C1:F2:45:24:96:78:63:C2:AD:80:B4:55:E7:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/316878ff-0619-3ec4-baf6-fbd8b099be9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.55.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:4f:20:04:52:64:e6:2a:ea:a8:16:bf:ae:da:18:00:9c:ab:
         60:14:49:fb:97:f7:5b:86:28:f9:77:93:99:e9:3b:69:47:99:
         91:1a:0a:ab:4b:05:7a:15:3f:1c:4d:a8:2e:a0:d8:4f:54:43:
         03:2b:e5:19:4c:15:e0:50:f4:81:d1:e9:83:09:5e:88:83:88:
         26:c8:ef:fe:cb:82:75:9c:c9:74:fa:2f:9f:81:f9:f0:c2:60:
         96:6f:2c:94:fb:74:58:50:b5:87:f1:de:03:9e:53:14:b6:37:
         3b:3a:cc:a8:29:6b:e2:5f:6e:4f:13:50:b3:97:3f:ed:03:94:
         5e:39:01:23:80:10:78:d2:5c:93:e9:27:8d:f8:64:52:a4:b4:
         68:23:05:15:31:1a:12:64:5b:b6:30:03:b4:f0:4a:7c:54:f3:
         24:d4:37:5f:16:92:5c:a5:91:88:7d:32:4c:69:e8:17:23:d1:
         65:ec:78:66:d1:bf:6b:56:e6:4c:d7:02:4b:cf:8b:80:8d:ec:
         ae:2e:6f:f0:74:bd:e1:3d:d1:ad:df:e2:af:a8:53:02:2b:01:
         5c:16:f9:17:43:09:3e:c2:13:f3:94:58:d0:96:cc:31:65:6f:
         87:90:bc:ed:a9:86:2a:97:62:62:20:19:76:b4:0c:74:bb:98:
         05:56:78:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 20:26:39 2026 by rpki-client