Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/d3f7cab6-2432-3d76-b034-d13583f80f22.roa
File:                     d3f7cab6-2432-3d76-b034-d13583f80f22.roa (raw, json)
Hash identifier:          LlDkKiBFKF8vsa4uLyyIE8SAu7Aw8bXB6yzEV54ZNrM=
Subject key identifier:   AF:A8:D3:5D:89:7F:88:29:27:84:43:F8:0A:34:F0:15:0F:01:F1:48
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584F49771165448D29B1FED80FB0
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/d3f7cab6-2432-3d76-b034-d13583f80f22.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     11233
IP address blocks:        216.110.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:77:11:65:44:8d:29:b1:fe:d8:0f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=4d5a7cd7-a1c6-4832-964e-309ae04f09eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:86:9e:a8:4a:bc:31:34:bf:5c:75:7b:06:e7:
                    be:0b:6c:58:17:9c:d2:00:d4:35:76:e0:79:66:45:
                    4b:9c:65:54:d1:8b:35:5e:74:a3:bd:ac:66:d3:36:
                    3e:c4:a5:71:4b:15:91:05:ea:24:25:37:96:d8:da:
                    d6:d5:aa:65:7a:e0:2a:fb:72:bb:53:e7:1c:ae:d4:
                    22:8d:0b:37:75:a0:9d:28:ea:75:16:43:18:14:94:
                    ca:2b:63:b9:ae:77:f5:b7:69:fc:06:5b:2a:89:4d:
                    a3:63:6a:7f:85:8e:51:b7:7c:f1:2a:c9:ce:d9:62:
                    93:ad:95:87:31:7a:0c:15:76:8b:48:1f:e3:f4:c2:
                    33:ba:20:16:a0:a6:c5:f3:28:c9:90:6d:4d:e4:c7:
                    2e:b1:ef:95:e4:69:80:df:e8:7c:f4:b4:7a:36:d5:
                    1e:13:b1:42:fc:75:13:fd:83:83:fd:ed:20:1e:5c:
                    ea:cd:8b:5a:7f:28:54:c5:29:2d:58:98:f5:0d:ab:
                    4d:95:78:0d:7d:e7:fe:dd:1f:76:a6:e4:d3:ec:43:
                    45:70:6f:ea:93:03:7c:b7:07:03:8a:8c:26:0f:3c:
                    4b:3f:34:33:bc:d0:2c:01:8b:65:90:35:00:63:62:
                    e4:e1:4a:72:88:9d:c9:d9:a2:78:08:86:db:84:d2:
                    75:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A8:D3:5D:89:7F:88:29:27:84:43:F8:0A:34:F0:15:0F:01:F1:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/d3f7cab6-2432-3d76-b034-d13583f80f22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.110.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:55:8c:29:66:a8:bf:fc:80:ed:97:08:76:c7:4d:f1:37:49:
         4a:ea:cf:98:5a:c2:4b:48:81:3d:5b:79:71:3c:55:36:e2:a4:
         38:20:10:a2:c9:1a:40:f5:84:ee:38:bf:71:0e:5b:ed:43:a0:
         ae:6d:5f:96:ee:0b:e3:1f:36:76:79:7b:ea:7f:5d:35:f9:00:
         96:ab:c1:ed:11:6a:5c:d3:67:ce:37:b7:32:13:02:48:c7:0f:
         fd:10:b5:68:44:af:22:e1:4e:a6:e1:a0:b8:88:78:18:82:b8:
         b1:c6:1a:de:80:ae:ef:c8:a9:a1:ed:55:0d:08:1e:a6:28:72:
         91:3c:e6:e3:29:ce:b0:60:ad:9e:9d:ed:a7:5a:2d:cc:50:8f:
         d0:0c:25:46:86:cb:b4:22:2a:f8:cc:18:ec:c8:50:a3:71:96:
         1f:02:d4:0b:2f:9d:96:5e:7f:d4:18:84:a8:62:a8:30:4d:6e:
         3e:d9:5c:3a:27:bc:a0:c7:e8:52:64:ea:52:8a:f4:94:1e:22:
         9d:7f:ce:18:be:8a:49:82:bb:f8:79:53:8f:75:b4:6e:cf:db:
         61:4d:0a:f6:bb:91:68:54:fc:d0:25:01:1b:5f:a5:28:36:92:
         c0:3c:79:35:fa:51:c1:a1:40:56:e3:d1:1a:91:1f:87:e8:4a:
         1d:4b:d9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 23:57:43 2026 by rpki-client