Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b37ad7e7-1801-3d05-9ab7-849acb9404a6.roa
File:                     b37ad7e7-1801-3d05-9ab7-849acb9404a6.roa (raw, json)
Hash identifier:          LOzf57skfXuyFFyGjptqDwjenagO4bACsXP2nZDwtAQ=
Subject key identifier:   CC:2B:99:00:43:57:71:A9:6C:72:37:3D:7E:27:0D:67:FE:69:10:7A
Certificate issuer:       /CN=b2fad91b-4146-4274-9411-fc471c444156
Certificate serial:       010D0C9F4328584FA308D578B53EC4B43C006B00
Authority key identifier: ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b37ad7e7-1801-3d05-9ab7-849acb9404a6.roa
Signing time:             Tue 27 Oct 2026 03:10:01 +0000
ROA not before:           Tue 27 Oct 2026 03:10:01 +0000
ROA not after:            Mon 25 Jan 2027 04:10:01 +0000
asID:                     11696
IP address blocks:        216.246.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a3:08:d5:78:b5:3e:c4:b4:3c:00:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2fad91b-4146-4274-9411-fc471c444156
        Validity
            Not Before: Oct 27 03:10:01 2026 GMT
            Not After : Jan 25 04:10:01 2027 GMT
        Subject: CN=830bdeab-3a18-4606-b788-c79b7a8b398b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:43:9a:64:59:f1:05:a9:25:00:05:e0:d0:6c:
                    64:3e:51:22:51:17:8a:d6:8a:e8:43:3b:25:82:f4:
                    e7:e9:32:a4:b1:98:1f:08:ff:5d:05:ba:ce:62:71:
                    0b:12:aa:9e:2a:36:be:b7:49:d0:75:f6:81:99:1c:
                    c1:82:cd:c1:91:9b:2b:4d:25:20:5b:36:e0:32:fe:
                    36:f9:ad:da:f0:6f:a8:84:08:4e:ca:a1:97:1f:82:
                    a4:9a:a2:ec:ff:8f:19:0a:9f:a9:50:cc:fa:3a:43:
                    19:ed:fa:1d:a7:72:aa:ab:9c:e9:f0:9f:73:46:c4:
                    f8:6a:24:1c:72:fb:b2:62:bb:c2:28:0d:f7:4b:26:
                    a6:2f:6e:3f:f3:9b:7e:82:c8:72:14:d2:d0:6f:52:
                    82:09:79:51:c9:61:08:17:42:a7:89:52:f4:16:6c:
                    04:34:64:48:b3:87:78:92:5f:38:c1:74:30:87:ca:
                    7e:69:55:7f:59:db:dd:c3:79:34:fd:95:d5:26:d2:
                    21:27:22:52:fb:c9:56:29:c0:b7:3f:52:e0:b3:91:
                    3d:07:48:4f:ba:b3:9b:50:4c:ba:45:46:1f:f5:60:
                    51:e6:44:59:01:00:75:c4:11:71:97:aa:07:58:90:
                    e3:8f:9d:60:78:bd:2e:70:7c:64:a4:70:9b:31:3a:
                    fa:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:2B:99:00:43:57:71:A9:6C:72:37:3D:7E:27:0D:67:FE:69:10:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b37ad7e7-1801-3d05-9ab7-849acb9404a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl

            X509v3 Authority Key Identifier:
                keyid:ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:e2:50:5d:60:eb:c9:b1:ab:eb:23:18:60:4b:88:83:ec:c0:
         83:f3:cc:7c:2f:e7:41:56:d0:f9:f9:1c:26:ae:19:e5:c9:08:
         7f:bd:b5:d3:f0:f0:bb:bd:3e:f6:2c:e3:51:49:7f:5a:25:d0:
         04:05:0a:21:48:4b:ee:a9:b8:87:82:c8:43:da:11:df:3c:f2:
         01:46:39:3f:59:12:ef:2f:f5:3c:2a:42:33:4b:19:a9:33:2a:
         9f:a4:f4:47:89:76:fa:82:23:43:f2:ac:bf:68:7f:28:42:fd:
         95:ca:2e:7a:6c:9f:06:12:cf:4f:36:c7:0f:db:4b:69:c5:fa:
         62:eb:b7:c2:52:0c:bb:c6:07:6f:ea:0a:9f:2e:de:38:96:1c:
         23:93:a3:38:fe:56:47:2a:15:f5:5c:9d:78:74:b6:ae:ed:35:
         dd:b2:74:c7:c7:d4:88:64:bd:5c:e6:75:f0:d1:18:4e:e9:de:
         80:07:48:26:ab:6b:07:ca:ac:6c:85:4e:87:ff:23:8d:c4:a6:
         5d:64:4f:ad:4f:fc:67:38:e9:02:77:40:96:c5:84:cf:b6:04:
         1e:56:c2:54:61:66:35:7b:f1:97:11:41:e8:0d:b9:07:1f:bb:
         a0:d1:54:9a:bc:53:8a:50:26:8c:fc:f4:a6:24:90:06:7b:05:
         ef:fe:a1:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:52:19 2026 by rpki-client