Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/ed48460c-1363-3835-80c5-bd7014890af7.roa
File:                     ed48460c-1363-3835-80c5-bd7014890af7.roa (raw, json)
Hash identifier:          BYLeN367sW3wr/H6Dj+gMug3HAeRP687NAM1gITGQxE=
Subject key identifier:   BD:D7:B8:95:37:BB:76:BA:60:E6:18:C2:70:8E:90:1E:D4:9B:E9:C2
Certificate issuer:       /CN=c3fbdc8c-2f4c-4dea-b420-52e582992086
Certificate serial:       010D0C9F4328584F53C636F4A61E15BDDBBB2D00
Authority key identifier: 88:EC:1B:EE:A2:0C:53:B3:99:38:A4:26:8C:5E:B1:EE:56:2C:E4:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/ed48460c-1363-3835-80c5-bd7014890af7.roa
Signing time:             Mon 28 Sep 2026 17:46:55 +0000
ROA not before:           Mon 28 Sep 2026 17:46:55 +0000
ROA not after:            Sun 27 Dec 2026 18:46:55 +0000
asID:                     0
IP address blocks:        216.98.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/c3fbdc8c-2f4c-4dea-b420-52e582992086.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/c3fbdc8c-2f4c-4dea-b420-52e582992086.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:53:c6:36:f4:a6:1e:15:bd:db:bb:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3fbdc8c-2f4c-4dea-b420-52e582992086
        Validity
            Not Before: Sep 28 17:46:55 2026 GMT
            Not After : Dec 27 18:46:55 2026 GMT
        Subject: CN=f4f7642a-6531-4f46-9d3e-68a316c777d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a0:82:43:2c:3e:cf:11:7b:ee:7c:ee:42:91:
                    84:ab:64:b1:cc:14:32:85:26:05:05:1d:67:52:ac:
                    b3:08:db:f1:a5:a3:11:bc:03:d0:64:f5:3e:84:3d:
                    db:cb:fd:b7:04:55:83:36:ba:dd:9d:02:76:3c:5a:
                    e1:c5:1b:d8:9f:2b:ed:17:e6:9d:5c:d9:c1:b1:00:
                    73:08:8f:e7:78:db:f6:b5:0f:72:cc:40:c9:f2:75:
                    09:86:dd:1a:d1:ee:c3:8b:8d:35:42:04:f3:3a:7b:
                    b3:c4:62:3e:bc:10:05:8b:65:fd:a6:ca:e1:cc:94:
                    ff:5b:42:fe:5a:c0:41:05:ce:44:e0:51:f6:db:31:
                    28:3e:53:6c:f9:e3:a5:40:01:3b:ad:26:bd:42:9d:
                    c6:bc:26:c5:c2:b7:40:07:07:2c:55:90:5c:4c:eb:
                    9e:8e:de:9a:0b:79:bb:94:4e:be:76:79:c2:ba:38:
                    ad:0d:69:c2:34:01:cc:91:73:a2:b7:b6:cc:0b:cb:
                    b0:cc:cb:7b:b0:6b:75:cb:be:6a:16:53:fc:fa:21:
                    d3:c1:b2:f6:f5:2b:5b:25:ee:7d:0b:e0:b9:b9:72:
                    46:52:0a:2f:6a:d9:db:34:81:95:48:35:f4:77:c3:
                    29:2b:fb:ad:79:4f:d7:31:ea:fd:ec:b7:ea:cd:2e:
                    85:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D7:B8:95:37:BB:76:BA:60:E6:18:C2:70:8E:90:1E:D4:9B:E9:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/ed48460c-1363-3835-80c5-bd7014890af7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/c3fbdc8c-2f4c-4dea-b420-52e582992086.crl

            X509v3 Authority Key Identifier:
                keyid:88:EC:1B:EE:A2:0C:53:B3:99:38:A4:26:8C:5E:B1:EE:56:2C:E4:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.98.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:16:a9:85:07:b9:6c:1e:3d:0b:62:c2:6d:da:c3:bf:a2:59:
         26:e0:7b:db:fd:ea:37:ac:ac:96:7d:ab:89:2c:04:40:96:18:
         10:ce:71:16:55:4a:a5:0d:b0:1d:e3:7a:8b:57:03:54:cf:93:
         07:06:56:36:1e:7f:df:cb:af:c4:7c:82:c3:d7:9e:48:70:b7:
         3c:ea:a8:50:7c:f3:f5:b5:f5:47:26:53:ed:32:4b:1c:e6:85:
         22:05:0f:c8:9e:30:b0:b4:05:75:2e:0e:c0:89:5b:58:14:ca:
         ac:87:02:fd:c3:d0:6d:95:65:5a:22:e8:dd:d5:ed:a2:5a:3f:
         4c:75:c4:d4:f1:2e:f0:e1:90:16:4c:73:2e:f5:fa:a9:e4:08:
         d6:ff:df:04:8f:40:b9:57:13:db:f5:9a:91:f1:c1:7c:37:55:
         b4:e3:08:a4:b4:3a:93:07:80:cb:5a:10:69:a1:2f:79:73:e5:
         5c:9c:d6:4d:d5:e0:41:c1:08:59:48:53:53:cd:27:b3:94:bb:
         ce:4c:bf:03:27:7c:61:75:43:2c:c5:a0:40:6f:67:f8:0b:c7:
         65:af:fa:21:81:4c:1f:8d:0b:8d:c8:4d:88:07:31:c1:90:5d:
         55:d7:b1:e9:bf:75:1d:17:38:f2:42:3b:ea:db:73:bd:34:39:
         34:c5:fe:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 05:46:18 2026 by rpki-client