Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/51ff2d89-6afa-38f7-9d5d-674b5786a162.roa
File:                     51ff2d89-6afa-38f7-9d5d-674b5786a162.roa (raw, json)
Hash identifier:          pd0Xa1mguofAOAUVmnSwUd08OX7hKer4vjngdlRpcXU=
Subject key identifier:   86:3E:20:BE:AB:BD:CC:02:0A:34:C9:F4:4C:BA:CA:5E:D4:5C:98:6E
Certificate issuer:       /CN=4a39e371-6e3b-458b-9b07-c3a075c5aecd
Certificate serial:       010D0C9F4328584F5CFD5BB2BBE7FAB363E42E80
Authority key identifier: 56:D5:8B:45:0B:7A:97:85:04:F5:AD:94:62:26:62:54:ED:E2:B1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/51ff2d89-6afa-38f7-9d5d-674b5786a162.roa
Signing time:             Fri 02 Oct 2026 01:00:12 +0000
ROA not before:           Fri 02 Oct 2026 01:00:12 +0000
ROA not after:            Thu 31 Dec 2026 02:00:12 +0000
asID:                     40933
IP address blocks:        216.129.226.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5c:fd:5b:b2:bb:e7:fa:b3:63:e4:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a39e371-6e3b-458b-9b07-c3a075c5aecd
        Validity
            Not Before: Oct  2 01:00:12 2026 GMT
            Not After : Dec 31 02:00:12 2026 GMT
        Subject: CN=92928816-dbd0-4438-93cf-9d5d683d1282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:39:47:15:83:59:c8:21:c1:7d:2f:2c:24:bd:
                    32:11:b4:4f:33:56:e8:9a:7a:d3:2a:cc:d5:31:04:
                    50:75:3d:c4:9d:6e:5b:77:f3:ca:1b:05:e6:98:52:
                    68:47:fe:98:0b:6c:27:e0:23:50:84:8f:bf:03:9e:
                    8c:84:dc:51:3a:9c:56:43:63:2a:7f:30:91:8c:cf:
                    9a:cd:43:44:84:81:a2:03:0b:4d:9b:c2:9b:ad:72:
                    75:0c:f7:ab:ec:2a:1c:9a:8a:dc:a3:c8:5d:d7:00:
                    07:42:94:fe:ca:b0:36:8d:7f:8b:39:36:f0:5e:29:
                    e2:b6:ee:9e:4e:fe:de:3e:ae:1d:44:3a:24:bc:b8:
                    85:d4:fc:d4:83:01:c6:af:03:a1:70:c4:1b:9b:fd:
                    80:11:2b:26:bb:8d:5e:9a:4a:53:e4:29:4a:fa:d9:
                    9d:09:db:c6:d8:0a:8c:16:12:11:f4:e7:86:7a:e6:
                    07:4e:92:f4:78:c0:34:25:87:8e:6c:4a:b7:e9:92:
                    a5:30:c1:84:bc:4d:0c:eb:92:a0:5b:eb:88:cb:78:
                    8c:12:83:15:91:65:4c:10:eb:12:72:43:b2:51:e7:
                    b8:9e:ba:59:4a:18:fc:c6:ad:13:f0:7e:f9:f8:45:
                    bc:43:08:d7:ce:34:42:53:50:5e:d5:6f:ad:b2:7b:
                    e1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:3E:20:BE:AB:BD:CC:02:0A:34:C9:F4:4C:BA:CA:5E:D4:5C:98:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/51ff2d89-6afa-38f7-9d5d-674b5786a162.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.crl

            X509v3 Authority Key Identifier:
                keyid:56:D5:8B:45:0B:7A:97:85:04:F5:AD:94:62:26:62:54:ED:E2:B1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.129.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:e4:49:7b:78:c2:99:6e:50:a8:ac:5f:55:0f:89:bb:a9:da:
         2b:e4:bd:63:2e:d9:06:eb:d4:49:21:c5:a0:05:0b:bc:12:70:
         9b:b2:ad:da:b0:b7:b1:ec:62:bc:82:45:ca:40:f1:3f:74:66:
         60:f1:29:81:ed:69:4b:93:81:af:86:90:16:e1:c5:9e:b7:f9:
         04:35:d0:a2:cf:00:d4:9a:2a:28:b9:ed:34:26:ab:cb:6e:da:
         15:3e:67:80:e4:d4:49:ba:7a:d1:1a:2e:c2:6a:55:9d:50:76:
         74:23:1f:ea:71:1d:89:50:f3:8b:e1:67:bc:29:30:7f:e4:27:
         f9:7f:df:03:fd:0e:01:da:70:99:58:51:64:b5:13:c3:49:e2:
         47:97:d7:e3:6a:31:ea:2f:5b:d0:d0:22:c5:16:1a:f0:df:4d:
         12:ee:3a:6d:3f:f3:da:d8:4f:42:ef:a5:cc:d1:41:b8:40:4d:
         be:e0:41:08:15:db:81:a6:a9:c6:b4:8c:5b:67:db:0d:1b:12:
         4c:de:e9:31:19:ec:bd:f7:35:9b:4e:94:a2:79:3d:62:c6:5c:
         5e:d9:fe:b6:0e:64:8d:3a:9d:fa:3f:9b:0e:5e:74:88:1b:b9:
         e7:8b:d9:81:ad:11:74:ee:35:2c:67:ee:b8:6e:8d:50:bb:da:
         1c:6b:a9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:42:14 2026 by rpki-client