Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/9e2a5d06-968e-38dd-8f8f-ea8db30ead5c.roa
File:                     9e2a5d06-968e-38dd-8f8f-ea8db30ead5c.roa (raw, json)
Hash identifier:          nrftofX/2IVaQZ9enQ91soK/7BuQLvGyOVmotttGZd0=
Subject key identifier:   6F:09:A5:EC:A3:20:8B:73:9D:35:14:4C:FB:1F:B7:15:1B:55:D0:61
Certificate issuer:       /CN=6efa8829-56f5-4ac1-98c6-e4bf119bd882
Certificate serial:       010D0C9F4328584EF7176C771F9ECDC08DBA4B80
Authority key identifier: 21:07:50:8A:64:0D:BD:AF:AB:C5:7F:D7:60:19:6C:50:81:62:51:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/9e2a5d06-968e-38dd-8f8f-ea8db30ead5c.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     1100
IP address blocks:        185.216.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/6efa8829-56f5-4ac1-98c6-e4bf119bd882.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/6efa8829-56f5-4ac1-98c6-e4bf119bd882.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:6c:77:1f:9e:cd:c0:8d:ba:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6efa8829-56f5-4ac1-98c6-e4bf119bd882
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=06fd93df-e4bf-4fa6-ab77-432815e58bdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2e:ee:34:1d:16:28:15:5c:58:0d:d4:5e:ac:
                    a1:2e:c9:7e:45:0b:95:29:cf:87:fe:86:7d:a3:52:
                    02:a6:31:b8:d6:be:6d:71:53:a5:86:af:12:e1:bd:
                    9d:3f:7b:51:9f:01:8c:9f:79:36:28:6d:5b:31:01:
                    dd:18:bd:90:5a:72:00:31:be:33:e1:b7:cc:73:7a:
                    b7:f7:fb:8f:b0:d7:26:c0:c8:16:ae:f5:66:76:ad:
                    07:35:cd:31:aa:6f:74:0c:21:52:d1:c7:db:d6:01:
                    d3:bc:ca:16:e0:a8:05:8d:8b:28:91:bb:92:6c:91:
                    4b:c4:6e:d7:d3:e5:89:99:b3:b2:fc:27:f0:47:67:
                    3a:67:f3:9e:eb:94:ad:44:16:e4:72:a2:74:12:d6:
                    67:8b:41:2d:56:f4:9c:c0:ab:00:48:41:99:12:b0:
                    3e:e9:1b:97:d0:6c:56:7d:a9:4b:3b:bd:47:47:ca:
                    2b:c9:91:24:c4:d7:ad:7e:89:8b:e7:36:66:59:5e:
                    94:9f:d1:31:2f:a8:f7:3b:b5:7a:88:95:58:f9:ec:
                    53:9f:03:09:f6:42:c2:ff:fb:f9:a0:ff:fd:be:2c:
                    14:b7:9d:f5:65:38:a2:51:e9:0f:7c:b4:72:e7:e0:
                    eb:76:1b:b6:ae:0d:31:99:ab:47:c2:db:b8:89:1e:
                    76:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:09:A5:EC:A3:20:8B:73:9D:35:14:4C:FB:1F:B7:15:1B:55:D0:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/9e2a5d06-968e-38dd-8f8f-ea8db30ead5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/6efa8829-56f5-4ac1-98c6-e4bf119bd882.crl

            X509v3 Authority Key Identifier:
                keyid:21:07:50:8A:64:0D:BD:AF:AB:C5:7F:D7:60:19:6C:50:81:62:51:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.216.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:f4:e2:bd:ca:54:f3:c3:3a:79:8d:d4:e5:d5:f7:d5:d3:8b:
         c2:6f:c9:4b:e6:71:f9:fb:fe:70:d6:0b:ab:e4:cf:58:fa:2b:
         c8:c8:67:9f:40:8e:9a:23:e7:d9:af:ae:60:10:d3:2f:4f:61:
         f7:4c:92:a1:26:a3:82:aa:48:91:7e:d3:ee:6a:43:d9:f3:7e:
         ad:6b:c8:ce:aa:7c:8b:35:0f:c1:fb:5d:d6:10:1d:21:39:9c:
         8c:89:42:82:7d:4f:c1:6f:5e:8a:ff:ee:64:a9:14:22:43:eb:
         ce:43:42:19:56:0f:33:da:6d:d8:9d:04:08:0a:f4:31:2c:fc:
         48:fd:ef:c6:14:3d:e7:76:f3:af:13:eb:96:5f:df:5a:85:86:
         f3:bb:56:2f:72:2a:9d:cb:b5:2d:66:e8:68:11:38:df:7e:aa:
         8a:9a:07:61:74:e4:d2:1c:4d:66:62:dc:7e:de:a8:84:13:90:
         e2:5c:5d:b9:ae:6e:09:59:84:46:c4:94:23:4b:c3:15:15:e5:
         9b:5e:48:ce:28:7b:c5:c4:9a:74:3c:ee:ea:ba:6f:84:ca:8f:
         67:ff:13:5b:18:1e:15:a4:29:c8:36:d6:8c:10:be:11:50:f0:
         98:66:85:46:bb:eb:54:e3:98:57:d6:70:36:49:73:99:4b:af:
         fc:57:8c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:54:46 2026 by rpki-client