Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/dd4f39de-aebe-3140-828e-01c6a7c2d9c2.roa
File:                     dd4f39de-aebe-3140-828e-01c6a7c2d9c2.roa (raw, json)
Hash identifier:          xWdFj6X4tNm98gpsZZ0vDHp/bueVCvlS3mIa2kdDExA=
Subject key identifier:   0F:71:E6:03:21:06:81:3A:99:A7:7B:8A:23:90:F7:91:94:41:AC:94
Certificate issuer:       /CN=b2fad91b-4146-4274-9411-fc471c444156
Certificate serial:       010D0C9F4328584F97E09F7BDDE88352511E42B0
Authority key identifier: ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/dd4f39de-aebe-3140-828e-01c6a7c2d9c2.roa
Signing time:             Fri 23 Oct 2026 03:15:06 +0000
ROA not before:           Fri 23 Oct 2026 03:15:06 +0000
ROA not after:            Thu 21 Jan 2027 04:15:06 +0000
asID:                     11696
IP address blocks:        216.198.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:97:e0:9f:7b:dd:e8:83:52:51:1e:42:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2fad91b-4146-4274-9411-fc471c444156
        Validity
            Not Before: Oct 23 03:15:06 2026 GMT
            Not After : Jan 21 04:15:06 2027 GMT
        Subject: CN=bf5d2fe4-9a95-459a-a815-95d7a4cdc520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f4:fe:86:da:61:81:bd:30:91:58:0a:90:35:
                    f5:c6:b4:bc:17:6c:1d:22:8e:8d:18:3e:3f:4e:90:
                    26:77:e6:75:e5:26:ef:37:f3:b9:c5:23:4d:ed:eb:
                    17:74:9b:ec:11:59:ed:5b:f7:aa:60:da:de:46:ee:
                    71:ea:cb:58:2c:cb:cf:ff:98:bc:06:fd:be:bb:ac:
                    ff:39:b4:0f:d2:b6:0b:6c:78:ff:70:bc:dc:8c:6e:
                    4a:3c:06:03:34:ad:1c:4b:72:0a:cb:87:13:d9:97:
                    a1:26:ee:72:70:d2:46:54:0a:ae:da:63:88:75:d2:
                    99:29:f0:0b:01:ee:e8:4c:68:c3:97:a2:d4:9a:1a:
                    7a:3d:f7:96:2a:58:62:12:d3:6c:b9:99:cb:be:b7:
                    1b:b1:fc:e1:47:e0:5a:0b:59:0a:3c:a8:2a:03:ae:
                    b9:5d:de:c2:de:23:2d:b6:b4:35:70:4a:6f:af:b4:
                    4c:2c:c7:44:93:8a:d0:4d:66:6e:bc:a8:43:81:98:
                    1f:28:81:c6:f9:76:b7:b3:01:30:43:a6:a1:c2:be:
                    10:af:e5:94:33:5c:49:38:ed:6f:b9:5c:72:4e:b4:
                    6a:4c:a1:45:5d:cd:97:50:88:3b:4a:7a:e1:75:c3:
                    9a:0c:a5:6b:61:ce:47:b3:6f:e4:83:e4:10:33:05:
                    e9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:71:E6:03:21:06:81:3A:99:A7:7B:8A:23:90:F7:91:94:41:AC:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/dd4f39de-aebe-3140-828e-01c6a7c2d9c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl

            X509v3 Authority Key Identifier:
                keyid:ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.198.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:c4:29:5e:da:ed:d5:10:af:b1:dd:37:bf:77:bd:df:b6:d0:
         d2:e8:89:c2:25:f7:c8:54:0b:eb:30:ce:1a:1d:d9:82:a5:b4:
         8c:99:cc:02:25:b4:be:23:b9:40:5c:08:7c:ea:25:94:7e:9e:
         06:8b:59:71:cb:fb:87:38:b0:a0:45:2b:a4:28:3d:c6:f1:e4:
         60:ce:fd:64:a2:40:1c:51:4b:f9:d0:bd:15:54:8d:c8:db:ae:
         23:f5:8a:13:19:87:2e:47:81:ce:04:03:e5:b0:2e:9e:8f:6b:
         2a:8e:39:31:d8:63:fa:31:20:ad:56:72:ac:e9:18:d0:2a:dc:
         a6:55:41:d7:87:86:05:d9:b4:70:7b:0d:01:a8:79:bc:2a:f5:
         59:52:70:24:c9:8a:d3:15:cf:1a:0a:ae:1b:4c:12:3f:32:93:
         5b:c7:89:5e:ee:68:fc:dc:54:c1:15:1a:93:54:7f:ff:ad:92:
         8a:ca:bf:be:1f:47:8e:7c:ac:61:d5:92:04:93:e9:11:6a:68:
         99:47:9b:60:5b:0f:ca:11:38:31:4e:aa:e0:dd:6f:5a:a2:4a:
         6c:9f:b5:6a:6e:79:2b:17:5c:bd:b6:4d:9e:2b:fc:c9:12:d3:
         9f:78:ba:ca:13:2d:fe:0c:92:29:a5:dc:3f:4a:d0:54:56:b5:
         3c:07:dd:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 00:41:10 2026 by rpki-client