Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/9e697ec9-5153-3675-b4e5-c72a8df53b91.roa
File:                     9e697ec9-5153-3675-b4e5-c72a8df53b91.roa (raw, json)
Hash identifier:          NlnLOXOCYh8EvH593gWZRS1KX0Usj429Y7eIT+EXhnA=
Subject key identifier:   53:34:C0:6D:0F:51:50:46:EA:DB:2E:22:E1:5C:DD:8C:9F:AE:3C:9B
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584EB2B1B964A072D0D757284E80
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/9e697ec9-5153-3675-b4e5-c72a8df53b91.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     13692
IP address blocks:        216.110.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:b9:64:a0:72:d0:d7:57:28:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=04f33045-77da-4ea4-845e-0d88c258cf5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2b:02:53:86:9a:48:f8:a8:ff:eb:0e:cf:2c:
                    ff:ef:cf:0b:09:35:10:88:a6:23:6d:86:f0:be:4a:
                    64:60:c2:83:87:ad:72:67:76:8c:5d:0d:4d:5d:18:
                    23:95:7e:b5:6f:8c:4e:1d:f7:10:91:cc:38:1c:c6:
                    c7:2f:d7:59:aa:a5:c6:bc:b8:fb:6f:3a:9b:38:d3:
                    46:a7:8b:ba:c1:05:6b:e7:42:6a:82:a1:f5:69:cb:
                    51:c5:0c:c0:ee:e9:1c:18:4b:c8:59:1f:09:61:9e:
                    c3:27:7e:16:29:8a:3e:32:20:78:39:fb:90:95:d4:
                    8e:b9:46:3a:36:c6:63:26:62:d0:83:b4:2f:7c:bc:
                    ec:bd:3f:6a:46:03:6d:0f:d4:c6:d6:83:76:8d:f6:
                    14:e2:89:c1:36:ba:31:5f:4b:e1:34:49:ad:84:53:
                    ec:4c:19:f5:92:01:23:93:6d:a8:ed:50:57:19:ce:
                    0c:f2:71:08:f6:43:89:e0:2d:af:84:35:59:dc:4c:
                    35:d1:23:f3:98:fc:74:ed:a8:b5:af:3f:30:39:5e:
                    78:71:58:eb:41:02:29:b2:8e:64:c2:f6:44:f9:e1:
                    19:30:37:f1:b1:95:fe:67:49:fe:88:27:ca:08:2d:
                    21:84:77:af:be:e5:a5:78:38:61:65:5f:43:79:86:
                    3c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:34:C0:6D:0F:51:50:46:EA:DB:2E:22:E1:5C:DD:8C:9F:AE:3C:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/9e697ec9-5153-3675-b4e5-c72a8df53b91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.110.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:8f:6b:0d:87:3e:a5:4b:f0:96:35:26:bb:b3:b2:77:b0:42:
         15:94:f9:ac:90:ca:cf:74:69:f8:4d:c3:38:a9:34:a8:3a:f7:
         14:52:ce:45:35:11:c7:8e:aa:b4:3d:1f:50:37:a7:e3:dc:31:
         4b:0c:1f:29:df:bc:25:90:23:81:69:af:9b:49:da:d0:09:b7:
         e0:7a:4f:ed:28:10:29:0d:f9:fa:5b:ed:cf:64:b2:c6:16:3d:
         4f:8f:82:62:ab:b0:27:ac:9e:00:cb:d9:ad:7a:61:b5:5e:82:
         61:9c:fe:a5:2e:6d:65:b8:e8:8b:01:1f:ce:df:6b:00:91:9e:
         44:ea:64:4f:31:2b:a5:cc:e5:60:79:ea:b6:71:1d:e8:b9:42:
         33:d9:60:99:4b:2e:c3:55:2b:08:c9:19:f3:93:d6:ee:48:98:
         c9:68:29:97:bb:c1:e3:b0:b1:00:57:e6:69:65:85:0e:36:61:
         28:4a:ae:a3:7d:e0:a4:98:07:1d:53:df:42:9b:01:6e:a8:b7:
         ca:c7:80:00:fd:2c:2c:5a:3f:2d:48:09:95:0f:fb:7a:1b:63:
         58:5c:d5:a3:36:c2:f2:48:24:62:e7:dd:34:ce:3d:a2:71:69:
         6f:05:77:ad:b3:52:84:e5:7f:d8:4e:1b:29:e1:eb:33:e5:b5:
         33:ab:43:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:23:30 2026 by rpki-client