Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/5a9046dc-7b17-3fa0-94c3-3970d27d9709.roa
File:                     5a9046dc-7b17-3fa0-94c3-3970d27d9709.roa (raw, json)
Hash identifier:          ARyLQJ83ahexk81gZySt+1/Lt+JrJhvGvBni1Jr7ZXs=
Subject key identifier:   C0:32:4A:63:E7:28:A6:C3:04:3A:57:4C:7E:EA:A2:A1:D1:D4:7F:2F
Certificate issuer:       /CN=c3fbdc8c-2f4c-4dea-b420-52e582992086
Certificate serial:       010D0C9F4328584F5E62CD0E9A3C4366EFFCDF00
Authority key identifier: 88:EC:1B:EE:A2:0C:53:B3:99:38:A4:26:8C:5E:B1:EE:56:2C:E4:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/5a9046dc-7b17-3fa0-94c3-3970d27d9709.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     398700
IP address blocks:        216.98.224.0/23 maxlen: 23
                          216.98.236.0/22 maxlen: 22
                          216.98.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/c3fbdc8c-2f4c-4dea-b420-52e582992086.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/c3fbdc8c-2f4c-4dea-b420-52e582992086.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:cd:0e:9a:3c:43:66:ef:fc:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3fbdc8c-2f4c-4dea-b420-52e582992086
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=d111bc21-7a34-4418-9f0e-3a0664421074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:14:78:87:6e:5e:81:ec:4f:c9:e6:f7:13:6b:
                    b2:a9:e1:ab:0a:c0:28:8c:c9:d3:62:87:51:76:02:
                    1c:d2:bc:b4:04:6a:67:c8:36:f1:a4:47:31:61:01:
                    40:f9:28:14:cd:3b:8a:03:92:8a:9d:1c:1a:01:ae:
                    f5:fd:ba:9a:38:bb:77:0f:44:67:73:21:1e:a9:ac:
                    cc:8c:82:b4:e0:64:3c:bc:b3:c1:a6:64:af:de:11:
                    f9:78:46:7c:7a:12:26:94:9a:43:8c:98:7c:2c:5b:
                    9f:33:32:71:f1:33:03:15:bc:43:52:40:92:5a:e4:
                    fc:36:31:21:b6:00:0f:34:65:d6:69:03:35:f6:be:
                    10:b7:dd:3e:11:7a:15:d0:a0:c1:69:c3:52:d7:40:
                    4d:07:0e:88:40:98:89:97:1d:8f:a5:a3:66:fd:f3:
                    be:05:ab:bb:c1:9f:22:40:b7:bc:70:c3:ad:71:79:
                    a6:f9:38:c9:b4:ca:4a:ea:46:ff:74:27:6e:49:66:
                    af:2b:ab:aa:43:86:e8:b1:07:c1:45:0d:af:37:49:
                    f7:65:3a:b5:0b:3c:c2:fb:b3:c7:cc:01:ff:1a:37:
                    87:e1:51:a8:ac:a7:bf:24:62:ce:44:64:5d:b3:a0:
                    87:2c:3f:8c:d4:49:90:d9:1e:b5:97:c8:95:e1:46:
                    a3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:32:4A:63:E7:28:A6:C3:04:3A:57:4C:7E:EA:A2:A1:D1:D4:7F:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/5a9046dc-7b17-3fa0-94c3-3970d27d9709.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/c3fbdc8c-2f4c-4dea-b420-52e582992086.crl

            X509v3 Authority Key Identifier:
                keyid:88:EC:1B:EE:A2:0C:53:B3:99:38:A4:26:8C:5E:B1:EE:56:2C:E4:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.98.224.0/23
                  216.98.236.0-216.98.241.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:6c:b7:39:ee:7c:c6:c6:1d:6e:7a:b6:35:28:bd:8b:36:fe:
         d0:fe:6d:90:15:c4:13:63:dc:9a:82:08:43:51:6c:53:1d:f6:
         86:d3:c3:53:d3:d7:c0:d3:21:1b:60:dd:a3:9e:97:5e:ca:a4:
         5a:6c:24:ba:a4:f0:86:97:45:14:0b:71:38:a1:03:9e:e8:ff:
         5a:8e:c3:da:bb:ca:5d:9a:6d:b4:25:e9:2e:5e:63:af:96:0a:
         d1:8b:36:fe:78:ac:27:9e:95:89:46:4d:6e:31:ff:2f:0f:4b:
         dc:f5:34:73:ed:ed:4e:43:4b:e2:a4:00:85:24:e4:ef:a3:11:
         01:0d:3b:76:fe:88:e0:c3:da:fc:63:bb:0f:27:a2:d9:6e:d3:
         90:f1:2e:04:8e:68:5b:46:52:7a:d9:07:c7:ff:80:47:1b:5a:
         e8:0c:bf:8d:63:55:8a:19:84:3a:e9:a2:59:52:b0:27:28:de:
         10:a8:a1:ec:7a:6d:c0:0a:03:66:d4:ad:25:b1:35:2e:3d:89:
         df:5a:dc:2f:a0:ef:ad:c9:e4:e6:72:de:78:93:15:a8:92:5c:
         5d:4b:07:f6:b5:18:74:77:39:fd:3d:07:aa:56:e4:11:77:50:
         06:8f:3a:ef:06:36:a2:ce:2e:27:12:81:23:c0:17:b2:07:ba:
         53:4f:6d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:40:05 2026 by rpki-client