Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/acad36f8-a799-356b-9595-5b1bb0a7d1c9.roa
File:                     acad36f8-a799-356b-9595-5b1bb0a7d1c9.roa (raw, json)
Hash identifier:          bpTcYVJpuozF8utXMPzq1FYP90YzYCsZgESkteIUFHc=
Subject key identifier:   C9:D5:2F:4C:54:F2:5E:CC:1F:91:21:62:9C:B6:1D:DC:1A:21:08:E5
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584EB2B1B940DC98923A42D01700
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/acad36f8-a799-356b-9595-5b1bb0a7d1c9.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     13692
IP address blocks:        216.110.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:b9:40:dc:98:92:3a:42:d0:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=d00c04e2-caa1-4f86-9c9f-51e013b15599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:14:db:a6:97:76:44:a7:dd:b6:31:b5:cb:ce:
                    27:66:78:b2:c8:4e:09:67:83:60:92:a8:e6:35:30:
                    62:b5:24:7e:01:44:0b:dc:a1:78:9f:c8:93:a7:3c:
                    a7:b8:44:b4:ff:8e:b8:43:80:df:b8:cb:55:c7:9d:
                    00:e6:2f:5d:f2:b3:71:25:19:50:f8:ed:04:35:0b:
                    37:2c:33:a4:1d:e5:cc:12:77:2f:d7:9c:8e:6b:83:
                    c5:e9:8d:94:2d:3a:42:4c:73:c9:75:6b:4b:7d:18:
                    df:26:b5:75:19:5a:14:80:10:00:a2:56:88:de:80:
                    88:be:d4:bf:41:a0:cf:34:5b:74:d9:36:20:00:82:
                    38:dd:e4:f0:ee:ff:ca:6a:1c:48:73:42:f4:b4:1d:
                    26:5b:89:e5:61:a1:87:85:f9:ec:e9:44:fa:c7:40:
                    ca:2f:cc:ff:22:31:ea:0c:05:3f:97:cd:19:40:d4:
                    25:7c:83:ec:80:48:a4:0b:26:87:5c:d5:9e:d6:45:
                    c4:17:05:d3:2a:a8:e6:d7:20:e9:dd:7c:d4:cf:e9:
                    29:9e:33:0c:b5:cd:b3:ba:d5:03:84:3f:f9:43:6c:
                    71:02:ea:66:0d:1f:55:24:03:b2:06:b1:9e:3d:2d:
                    b2:fa:24:5a:d6:e9:02:99:d3:63:f4:e9:69:bf:11:
                    47:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:D5:2F:4C:54:F2:5E:CC:1F:91:21:62:9C:B6:1D:DC:1A:21:08:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/acad36f8-a799-356b-9595-5b1bb0a7d1c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.110.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:a1:03:f6:45:01:5d:4c:28:fb:11:17:e5:1c:e9:f0:45:b4:
         ce:09:a8:b9:7f:bc:ee:a1:84:b2:2d:f6:94:d1:d0:56:5d:58:
         06:c9:08:f7:89:2a:f5:f6:da:35:31:90:e5:83:f8:00:36:c1:
         74:5d:ab:18:86:8c:c2:b7:ae:74:e9:01:c5:6e:cf:1a:35:df:
         d4:bd:12:58:36:53:50:99:01:c0:ae:2f:31:76:55:82:37:32:
         75:9c:54:84:37:ac:2b:97:a7:48:04:a9:96:f0:39:3c:5c:e0:
         e0:0a:7b:1d:47:a9:bf:7f:35:6b:8d:fd:fc:f9:48:a1:35:0e:
         17:13:1c:bb:fd:16:a7:7f:de:89:3e:68:0b:c9:df:27:3e:5d:
         4e:9a:10:e2:26:0f:05:82:0f:64:d6:46:f9:45:2e:df:03:4e:
         31:d2:6b:42:58:68:39:8c:c9:89:bd:6c:42:ca:e3:e2:e2:4a:
         a5:c7:fb:8f:f4:a7:2d:73:23:08:d5:65:04:bc:4a:64:75:5f:
         7c:62:7c:ed:99:6b:34:83:a6:e1:67:d9:6e:09:05:3e:05:20:
         17:9d:71:48:37:7e:ac:e3:6e:cc:07:70:26:fc:06:38:e0:9d:
         6c:33:fa:ed:63:a3:c5:5d:ff:5a:9f:95:58:8e:4a:63:ec:b8:
         9d:ae:61:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:23:47 2026 by rpki-client