Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d59c36c-1718-4a42-a5c1-e3e6274d943a/8670e913-153f-34b3-8952-ef8ee3706f75.roa
File:                     8670e913-153f-34b3-8952-ef8ee3706f75.roa (raw, json)
Hash identifier:          t6UtpRtomG74dzVScEw24VzRbaKnz4+dfjHd5bT1kVo=
Subject key identifier:   B8:80:9E:50:3D:E3:20:2A:B4:E7:66:24:4D:48:B8:8F:C6:1B:39:8A
Certificate issuer:       /CN=8d59c36c-1718-4a42-a5c1-e3e6274d943a
Certificate serial:       010D0C9F4328584F35E7BFBA8E8013DB44994DC0
Authority key identifier: 0D:E2:9E:64:27:D2:B0:67:38:D1:20:0D:79:A5:67:9E:AD:D0:A2:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d59c36c-1718-4a42-a5c1-e3e6274d943a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d59c36c-1718-4a42-a5c1-e3e6274d943a/8670e913-153f-34b3-8952-ef8ee3706f75.roa
Signing time:             Fri 18 Sep 2026 01:00:12 +0000
ROA not before:           Fri 18 Sep 2026 01:00:12 +0000
ROA not after:            Thu 17 Dec 2026 02:00:12 +0000
asID:                     25653
IP address blocks:        216.67.224.0/22 maxlen: 22
                          216.67.228.0/23 maxlen: 23
                          216.67.231.0/24 maxlen: 24
                          216.67.232.0/21 maxlen: 21
                          216.67.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d59c36c-1718-4a42-a5c1-e3e6274d943a/8d59c36c-1718-4a42-a5c1-e3e6274d943a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d59c36c-1718-4a42-a5c1-e3e6274d943a/8d59c36c-1718-4a42-a5c1-e3e6274d943a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d59c36c-1718-4a42-a5c1-e3e6274d943a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:35:e7:bf:ba:8e:80:13:db:44:99:4d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d59c36c-1718-4a42-a5c1-e3e6274d943a
        Validity
            Not Before: Sep 18 01:00:12 2026 GMT
            Not After : Dec 17 02:00:12 2026 GMT
        Subject: CN=725d9297-c010-4f6e-8a81-1ccac25c0754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:55:5d:ea:d2:13:4c:1f:e9:23:a9:43:c6:1e:
                    b4:44:0c:c3:76:db:00:9c:b9:e7:32:f7:0a:06:00:
                    38:d3:e7:4a:2e:e2:23:c7:f1:82:57:78:15:12:bc:
                    4c:ef:a2:9f:df:5d:29:e5:ed:77:66:38:3b:ed:cf:
                    cd:bd:2f:93:b2:bc:f4:d3:05:20:fb:2d:50:a5:2e:
                    ee:e9:80:6e:51:42:77:42:77:7f:dc:9d:a7:61:3f:
                    ee:32:de:71:78:06:47:76:fb:cf:53:4f:70:65:6b:
                    47:94:02:a9:8e:87:2a:e3:e3:a6:57:ab:32:88:15:
                    c4:85:50:98:a3:60:c3:f2:d9:a6:60:43:75:76:54:
                    7b:83:3e:7f:d8:49:4d:7c:d2:de:f2:de:94:de:44:
                    ba:d8:55:94:6f:e7:4d:78:8e:bb:ea:87:ab:93:14:
                    66:7f:3d:87:34:ba:b4:9f:d3:93:01:20:4c:97:ce:
                    b6:c1:f0:b7:c2:a0:33:4a:e3:ab:b8:4f:17:6d:23:
                    e0:a5:26:28:b3:e9:7b:45:bc:e1:dd:71:3e:68:7a:
                    fb:60:70:e3:24:1f:af:b6:5e:11:13:6b:c5:b9:64:
                    f5:75:33:a6:6f:40:4f:89:4d:b3:97:24:9f:5a:1f:
                    f2:ae:00:b5:e6:91:22:b2:14:84:0d:6a:02:12:fd:
                    2d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:80:9E:50:3D:E3:20:2A:B4:E7:66:24:4D:48:B8:8F:C6:1B:39:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d59c36c-1718-4a42-a5c1-e3e6274d943a/8670e913-153f-34b3-8952-ef8ee3706f75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d59c36c-1718-4a42-a5c1-e3e6274d943a/8d59c36c-1718-4a42-a5c1-e3e6274d943a.crl

            X509v3 Authority Key Identifier:
                keyid:0D:E2:9E:64:27:D2:B0:67:38:D1:20:0D:79:A5:67:9E:AD:D0:A2:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d59c36c-1718-4a42-a5c1-e3e6274d943a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.67.224.0-216.67.229.255
                  216.67.231.0-216.67.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:fa:bb:d9:f5:12:82:5e:8e:62:06:1a:50:9e:58:6e:b5:07:
         57:0a:60:c6:5a:d8:c0:30:f5:72:e4:46:da:f8:29:cd:21:7f:
         6a:28:87:70:a6:72:c7:8b:3e:4c:dd:3e:5c:6c:9b:4c:45:77:
         92:9c:38:e4:cd:c6:47:92:4d:32:de:ea:60:22:f2:67:24:ad:
         ba:3c:38:dc:be:c6:74:fe:49:c0:13:86:13:35:3d:c8:2c:b7:
         c7:ab:93:41:4b:6e:ab:52:3a:70:36:55:a9:05:af:9f:36:3c:
         27:5e:9d:d2:b4:d4:17:f1:d0:f2:36:e3:a1:1f:10:14:3c:0c:
         41:f6:c9:ed:f3:a4:1b:9e:cc:9a:4f:3e:35:85:e8:8b:11:3b:
         9c:0f:df:76:c0:09:7d:09:e9:d1:cc:e2:a5:00:bc:08:5e:00:
         f0:c5:ef:60:d9:5e:ba:46:c1:7b:3f:9f:58:7f:26:fa:9f:27:
         40:70:86:19:30:3f:c0:b2:a8:1b:36:cc:07:c6:49:ee:cf:71:
         d0:1a:89:0a:02:cc:90:24:e3:a2:63:32:43:ed:1d:b1:98:dd:
         83:a8:1d:18:86:71:74:4f:74:b3:0e:b8:1c:9b:5b:f9:29:22:
         b4:19:bf:79:49:a3:f9:70:8c:f6:54:22:63:98:5e:06:51:f0:
         62:db:b3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:43:20 2026 by rpki-client