Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/d5f3af52-2ff8-3fa2-b9af-c71610a93b71.roa
File:                     d5f3af52-2ff8-3fa2-b9af-c71610a93b71.roa (raw, json)
Hash identifier:          L7jNEYyb5XzBuBx6H1Ywabw4IKFcP5FbywEA0fWCRkM=
Subject key identifier:   7B:0C:E5:88:63:E3:0A:C8:3E:34:C7:E2:B9:9F:07:85:AB:25:2C:83
Certificate issuer:       /CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
Certificate serial:       010D0C9F4328584F49766B2EAC2BF5DEE82E89B0
Authority key identifier: 3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/d5f3af52-2ff8-3fa2-b9af-c71610a93b71.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        216.52.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:6b:2e:ac:2b:f5:de:e8:2e:89:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f3116745-9978-44ae-b50d-980b1e100ea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4d:e4:1a:7b:bd:0f:db:d1:11:05:a2:59:20:
                    88:d6:d6:7e:43:28:86:23:a8:2a:e2:53:95:f8:80:
                    99:fb:15:f6:7f:a3:c9:ba:71:1e:77:76:75:e2:66:
                    32:e6:7c:5d:6f:fb:f6:08:0a:8f:f2:07:a1:fb:2c:
                    2f:9f:7d:af:b9:b6:18:b0:2b:68:aa:ae:69:4b:3e:
                    52:7b:26:9c:a3:3b:bd:24:fc:93:e6:05:90:13:bd:
                    e1:2c:2c:f9:50:e5:f0:9f:76:e8:14:66:37:1e:34:
                    e3:44:38:c6:06:c7:58:c3:43:33:35:36:f1:d2:a3:
                    fc:5b:89:88:b4:6d:df:be:a5:ea:32:3a:a8:6b:fa:
                    16:1d:66:ea:1d:1c:a5:54:69:ec:72:12:8d:de:ac:
                    b9:2d:d0:62:3b:86:7b:c7:b9:e7:f6:ab:15:70:94:
                    0b:fa:b9:ef:90:38:53:c6:98:dd:dc:9e:be:c2:be:
                    99:55:3d:ef:b0:4c:e6:ab:d1:e0:df:ca:7a:06:e1:
                    99:71:91:29:5b:f5:f3:60:32:b8:a4:59:2e:14:a5:
                    b7:01:90:de:cd:67:f8:1b:1a:05:e3:79:a7:31:9f:
                    be:ae:9f:7c:da:ab:6a:26:4e:fb:b7:30:7d:45:0d:
                    9e:d9:c9:d7:e3:ff:a6:36:56:ee:1b:4a:cc:5f:93:
                    d9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:0C:E5:88:63:E3:0A:C8:3E:34:C7:E2:B9:9F:07:85:AB:25:2C:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/d5f3af52-2ff8-3fa2-b9af-c71610a93b71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl

            X509v3 Authority Key Identifier:
                keyid:3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.52.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:f0:a0:81:a2:a2:9a:de:be:4a:b1:66:e3:28:d9:76:61:ce:
         b5:d4:bc:0d:35:03:e7:6f:5e:62:ad:53:77:42:0f:e7:2b:80:
         0c:92:28:0a:07:73:57:27:c3:24:8e:59:c3:cc:51:3d:24:36:
         23:ed:c2:8d:cf:1b:c4:98:16:f2:ff:af:d2:f0:d1:bb:06:9d:
         06:fc:72:ef:57:c8:a5:44:a9:80:c8:9a:6f:ff:6d:b4:95:f0:
         f2:5e:a1:54:cb:5a:a5:17:46:86:7a:f2:95:94:31:10:91:b7:
         fb:8f:e2:24:a5:0e:3a:a6:c4:ec:a8:ce:12:fe:76:08:b3:f8:
         78:3a:34:8a:4e:ca:37:9f:90:ad:d8:44:48:44:06:11:0d:2a:
         1f:4f:ff:25:7b:e3:8f:fb:cd:78:09:7e:32:f1:3d:97:2e:6a:
         49:96:f6:0a:c0:1d:27:f5:06:c9:ab:4b:63:9d:ce:70:dc:3c:
         30:eb:63:fc:7b:3d:b8:c9:53:0b:79:8a:09:13:ca:8c:a0:cf:
         ee:ca:61:3a:1c:d6:b8:2c:0f:4d:b0:31:6d:4b:52:fe:a6:ba:
         16:89:05:7d:d2:7e:0c:cf:4f:03:3f:24:c4:50:d3:2a:74:9c:
         a9:bc:46:f6:e4:2a:22:49:2f:48:85:ca:11:3f:a5:cb:72:e7:
         fe:7e:d6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 01:57:46 2026 by rpki-client