Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/0fd8c82c-3db0-3fb0-8cf2-3522ad4acd9c.roa
File:                     0fd8c82c-3db0-3fb0-8cf2-3522ad4acd9c.roa (raw, json)
Hash identifier:          D7lm8E7g6gw7C7f/sZDyEnm5FTvWBaeK3UHsJiQ+qBk=
Subject key identifier:   BB:75:EE:FA:20:75:3F:21:B5:6B:51:F4:2E:58:08:3B:3C:E5:BC:92
Certificate issuer:       /CN=8b355aa3-cf28-4a53-96c5-ddf3bb800418
Certificate serial:       010D0C9F4328584EA79B8B52FE9BD292CEF50010
Authority key identifier: CB:52:A8:91:CC:74:8F:8E:32:A5:73:ED:0F:1A:83:CF:41:F5:24:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/0fd8c82c-3db0-3fb0-8cf2-3522ad4acd9c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396982
IP address blocks:        216.71.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/8b355aa3-cf28-4a53-96c5-ddf3bb800418.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/8b355aa3-cf28-4a53-96c5-ddf3bb800418.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:8b:52:fe:9b:d2:92:ce:f5:00:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b355aa3-cf28-4a53-96c5-ddf3bb800418
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=85a0e1eb-10d1-42e0-81b6-9bf5cf12bcfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b7:08:4b:5a:4a:8a:18:8b:d7:41:72:3e:4b:
                    2c:78:53:fe:f1:c3:9f:2d:66:f0:98:06:41:2c:eb:
                    b8:c0:42:c6:b0:69:01:2d:55:7c:f8:25:0b:ba:ed:
                    a6:48:42:a2:71:a1:2e:e0:bc:bc:e0:65:fa:da:a0:
                    a2:77:2e:bd:ea:f9:f0:f6:c1:e8:07:ec:ad:c4:a1:
                    50:a8:f0:04:73:9a:1e:99:05:c6:2c:0d:83:2d:1b:
                    95:47:b3:2f:20:76:44:44:6c:50:43:1f:c3:47:17:
                    f2:d3:5a:2d:40:5d:4f:9d:ab:49:ca:12:94:3b:14:
                    8a:03:4a:fe:18:58:9b:06:4c:93:58:18:ab:c3:46:
                    22:af:9c:9f:d6:cb:45:7f:63:2f:54:9b:08:a8:2f:
                    01:52:a7:5b:41:6a:23:15:8c:ac:cc:79:4f:52:1d:
                    e1:7c:27:4e:41:0d:63:fa:c9:f2:98:da:bb:70:ed:
                    91:21:19:c3:20:43:6a:3e:27:3c:4f:78:39:55:a8:
                    5e:f5:bc:01:3e:17:fd:b1:b6:0e:4b:b5:b9:34:71:
                    d3:fb:9d:3f:4f:05:26:b8:6d:5b:7d:02:b8:12:a4:
                    ac:3b:72:68:fe:11:23:5a:c8:f5:ec:77:5f:a9:c1:
                    f3:28:41:34:fd:d8:6b:3b:7a:da:46:82:68:7c:d9:
                    81:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:75:EE:FA:20:75:3F:21:B5:6B:51:F4:2E:58:08:3B:3C:E5:BC:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/0fd8c82c-3db0-3fb0-8cf2-3522ad4acd9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/8b355aa3-cf28-4a53-96c5-ddf3bb800418.crl

            X509v3 Authority Key Identifier:
                keyid:CB:52:A8:91:CC:74:8F:8E:32:A5:73:ED:0F:1A:83:CF:41:F5:24:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.71.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:d3:ea:01:1d:0a:41:7d:69:69:37:17:77:26:51:42:9a:31:
         2f:a8:f5:91:a6:5c:65:a6:23:48:95:95:64:5d:eb:85:fd:9e:
         e8:22:93:f7:a9:2f:0b:fe:83:db:38:9f:77:ac:92:bd:72:9a:
         1e:8a:20:8e:28:dc:e4:5b:db:1d:e8:7b:40:d1:e4:9e:fa:a0:
         e6:0f:71:dd:59:6b:75:57:77:69:31:ba:97:c2:41:91:b5:97:
         1c:9a:b9:9f:79:4e:25:33:b8:69:e6:11:fd:2b:47:ee:ba:c8:
         26:d5:d0:dd:ee:a7:6b:96:cf:67:44:a5:cf:f2:e1:ca:c8:b6:
         61:3a:da:35:6c:1f:88:8f:cf:8e:a2:6d:c3:a2:77:8d:ef:97:
         8d:d0:c6:5c:89:95:0a:1b:fe:53:13:00:a9:e5:99:94:72:8f:
         9a:fb:bc:70:8e:6c:13:5a:45:10:e7:0f:80:8e:68:c0:12:82:
         40:06:81:87:26:21:e0:c3:7c:65:e4:50:a3:86:7d:de:28:0d:
         2d:df:b8:10:bd:dc:00:42:87:31:19:43:dc:49:ff:ca:08:61:
         4a:af:08:db:5e:58:fb:4f:b1:e7:29:57:8e:1e:54:b2:bc:cd:
         15:51:ae:b1:6c:58:42:c1:ef:a1:2f:b8:77:ad:2f:61:2e:33:
         95:2f:a6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:18:35 2026 by rpki-client