Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a7efd87b-e805-3566-9129-053eadf2ca59.roa
File:                     a7efd87b-e805-3566-9129-053eadf2ca59.roa (raw, json)
Hash identifier:          Zc/milauG33DJ0BHaqz5aw14RLZ1qTxydpPFNuIy8jM=
Subject key identifier:   39:09:3A:32:B2:33:82:F4:29:DC:AD:4E:B3:84:C9:54:48:62:E0:07
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F4328584EE7BCBAE31B29729F1AF5FE80
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a7efd87b-e805-3566-9129-053eadf2ca59.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     21949
IP address blocks:        216.120.194.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:ba:e3:1b:29:72:9f:1a:f5:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=e4a1bcd3-76f8-4782-8a1f-7dbcbc4d5b89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:88:75:a8:cc:1f:25:2f:fe:70:82:0d:b6:d6:
                    83:d9:c6:9b:12:68:cd:5c:2d:8f:d4:98:e6:17:0f:
                    5b:06:10:c3:14:6d:36:2d:4c:60:31:c3:77:8a:cf:
                    84:ba:07:d4:e5:fc:f4:b7:0b:12:b7:ec:3c:2d:14:
                    45:fe:7a:bf:b7:0f:b9:30:ef:4f:78:5a:fa:99:0d:
                    d9:c5:21:85:da:bd:9d:d5:02:ad:c5:60:20:73:83:
                    b4:ec:6e:c8:fd:16:4d:89:66:d4:0e:91:14:cd:8b:
                    64:0c:01:3c:28:96:4a:c1:ac:f6:58:01:6c:d6:12:
                    9c:3c:3d:d3:2c:c3:ba:ee:e6:00:8a:cb:79:fb:57:
                    11:5d:f8:ce:37:7d:a0:c5:dd:71:61:ef:8b:45:e9:
                    33:e5:8d:cc:c9:47:f5:37:91:27:25:ee:ad:22:e1:
                    96:2b:08:b7:f3:7f:61:c9:80:e6:b2:bf:20:eb:83:
                    f1:38:51:06:71:f9:da:b9:f1:13:35:fa:70:18:77:
                    39:09:e7:93:04:fb:a8:39:e3:ee:1d:71:d7:74:b6:
                    c6:72:dc:7c:80:c6:7b:e8:f7:d5:f0:ea:df:4f:82:
                    f3:37:f2:44:18:7e:d9:47:fa:8f:5b:a6:ce:4f:6b:
                    b5:47:7c:af:a2:6a:74:6b:c3:c0:74:2a:63:79:c7:
                    85:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:09:3A:32:B2:33:82:F4:29:DC:AD:4E:B3:84:C9:54:48:62:E0:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a7efd87b-e805-3566-9129-053eadf2ca59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.120.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:53:23:57:5c:f3:52:98:b7:76:5b:f0:bd:69:a5:5d:b5:92:
         5f:51:26:8f:83:70:b1:91:29:15:4e:80:c7:6f:f6:63:6f:3c:
         06:cc:29:f0:77:94:3e:c6:eb:63:9f:02:39:ad:56:c7:93:77:
         bd:51:d7:d9:3d:61:ed:2c:3a:2b:b7:66:ff:af:df:01:66:cb:
         b4:38:e6:a3:8b:b0:50:be:33:11:3b:20:02:14:51:3b:d1:0f:
         e2:62:9e:d0:ff:3a:a6:81:a8:35:81:08:e0:ce:9b:56:cf:5b:
         02:9f:99:18:7f:47:3a:32:0f:d0:1a:3a:9b:70:9c:21:ca:5a:
         50:d2:26:e5:f1:65:07:a3:c2:71:00:99:14:ac:a7:e4:34:28:
         26:46:80:57:e0:8c:d8:7c:7c:0d:c1:a4:27:9d:d3:79:a8:7f:
         7d:6d:b2:4d:8e:32:84:d9:50:43:4f:f4:17:0d:34:f9:1b:19:
         fe:0f:1c:76:14:0e:13:75:6a:6b:67:9e:37:60:a9:05:16:b3:
         a6:d5:f4:bc:8f:d3:68:39:d0:3b:c2:03:1c:54:68:17:cd:7a:
         a1:41:6e:41:91:56:83:77:f6:e2:0f:1a:36:02:6d:ef:e5:b0:
         bf:f5:00:68:6f:af:96:0c:3c:8d:ff:db:0f:75:9f:b9:9f:70:
         41:c6:af:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:13:22 2026 by rpki-client