Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/35ad8540-161b-30d8-8dfc-164716cad513.roa
File:                     35ad8540-161b-30d8-8dfc-164716cad513.roa (raw, json)
Hash identifier:          Z2ByjfHMUh/2AW95lLAjmpnglbcbh8xeESRUPRixgfg=
Subject key identifier:   8B:F1:01:F8:5B:D8:99:87:06:04:7E:C2:B8:07:17:E3:7D:F8:A4:57
Certificate issuer:       /CN=4931e717-c1d1-4dd8-863d-5c06fb76f47b
Certificate serial:       010D0C9F4328584F49731DE242464A8081F4E200
Authority key identifier: CE:42:FE:71:11:71:C3:49:1B:8D:B6:7B:74:E4:1F:4F:E2:91:DE:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/35ad8540-161b-30d8-8dfc-164716cad513.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     21713
IP address blocks:        216.14.72.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:1d:e2:42:46:4a:80:81:f4:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4931e717-c1d1-4dd8-863d-5c06fb76f47b
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a3461433-b88f-4b97-9424-6f50e59ad5fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f5:2c:b4:e5:00:50:3a:bd:d3:4f:fc:b3:6a:
                    fe:e5:48:d9:53:ef:3b:81:72:d8:2c:0d:46:5a:44:
                    b6:e2:85:67:04:73:cd:39:42:61:6e:03:c6:15:21:
                    7f:ce:b8:f4:e0:98:e0:08:ae:32:34:c0:a4:65:d5:
                    40:dd:d2:02:34:81:05:60:a6:e0:fa:c9:63:9a:41:
                    db:fc:30:4a:c9:49:7d:02:bd:74:05:e9:ae:29:41:
                    96:1f:e8:49:1a:93:31:09:b8:c6:59:e9:a2:b1:79:
                    16:13:26:a7:88:df:b1:cd:fa:86:43:a9:1c:b2:64:
                    47:6b:c8:e6:74:62:e5:8a:b1:ea:ae:e6:49:73:04:
                    f4:3a:40:5c:b1:e0:ab:f3:c8:c5:cb:3e:e9:f1:d4:
                    d4:56:e3:9a:38:1a:92:31:b4:7b:c3:ca:6a:29:4c:
                    0c:7f:98:f4:8a:26:bf:5c:74:79:7c:94:32:44:2a:
                    77:ec:39:1f:fd:63:67:66:37:18:d0:17:0f:50:89:
                    43:e5:f0:1c:ff:93:05:f5:99:99:b7:b7:53:91:71:
                    6d:16:fa:22:89:24:7c:9b:0a:74:b9:e3:d3:51:10:
                    b2:8f:f1:1d:cc:68:07:7f:98:3e:58:ac:f4:a3:b7:
                    1c:c5:80:f7:f3:67:d8:a2:8b:fe:51:aa:31:72:fe:
                    d2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F1:01:F8:5B:D8:99:87:06:04:7E:C2:B8:07:17:E3:7D:F8:A4:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/35ad8540-161b-30d8-8dfc-164716cad513.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.crl

            X509v3 Authority Key Identifier:
                keyid:CE:42:FE:71:11:71:C3:49:1B:8D:B6:7B:74:E4:1F:4F:E2:91:DE:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.14.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:13:58:26:d8:00:f1:47:f6:49:20:b6:9c:04:3d:1a:7b:70:
         87:96:55:70:42:7f:ec:00:1f:a4:b5:92:90:66:85:db:41:5e:
         c9:1d:e4:1a:1f:7c:46:08:22:62:3b:6f:59:f2:61:17:3a:47:
         ad:cf:5a:2a:fb:96:fb:1d:0f:65:65:28:9f:61:80:8f:6e:48:
         f5:52:03:10:91:6c:37:e4:c6:71:db:d5:3e:32:8b:af:46:7e:
         93:8f:26:41:6e:02:a1:bc:98:87:f9:62:3f:ca:9d:4c:63:cb:
         c4:ba:6e:21:03:9c:0e:b6:21:b0:6a:5c:54:ad:4f:88:5d:d8:
         1e:07:3f:68:e8:2f:bd:10:1f:12:ae:34:6a:27:19:58:b6:6f:
         1a:2c:13:d4:c5:24:7e:74:9a:18:e4:49:78:92:ef:04:42:af:
         86:6c:84:df:19:a1:54:e8:5d:a2:fd:79:b6:68:3b:ea:ff:63:
         5a:6f:35:ed:77:4f:8e:c6:2b:7a:f7:69:4d:f7:a3:ad:60:ba:
         66:64:89:6f:fa:f4:67:5a:fa:37:d1:3f:d2:03:2d:b1:12:25:
         c9:9d:73:37:4b:41:9d:8f:af:97:cd:84:82:83:a1:4f:51:9a:
         91:82:fd:3e:c3:13:b6:a0:6e:5f:c2:ca:b7:69:c0:22:c1:ae:
         12:87:41:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 16:03:07 2026 by rpki-client