Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9d616af8-d920-4b32-ad51-8ec342dd32a3/f457ae6b-02bf-34fd-903c-5fbdab177bb6.roa
File:                     f457ae6b-02bf-34fd-903c-5fbdab177bb6.roa (raw, json)
Hash identifier:          u4rD3UX4wwdZHyYqT3UzUDea9MFvddUbRZHuCnXElFw=
Subject key identifier:   1E:05:6A:E0:A2:D1:F5:A4:FD:27:EF:94:E8:C7:ED:C2:9A:20:B1:5A
Certificate issuer:       /CN=9d616af8-d920-4b32-ad51-8ec342dd32a3
Certificate serial:       010D0C9F4328584F78E82D0732E473A7CFEBE860
Authority key identifier: 15:86:78:46:8A:11:05:19:43:45:2B:8E:7A:87:42:37:83:CC:E9:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9d616af8-d920-4b32-ad51-8ec342dd32a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9d616af8-d920-4b32-ad51-8ec342dd32a3/f457ae6b-02bf-34fd-903c-5fbdab177bb6.roa
Signing time:             Mon 12 Oct 2026 01:00:13 +0000
ROA not before:           Mon 12 Oct 2026 01:00:13 +0000
ROA not after:            Sun 10 Jan 2027 02:00:13 +0000
asID:                     53986
IP address blocks:        216.119.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9d616af8-d920-4b32-ad51-8ec342dd32a3/9d616af8-d920-4b32-ad51-8ec342dd32a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9d616af8-d920-4b32-ad51-8ec342dd32a3/9d616af8-d920-4b32-ad51-8ec342dd32a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9d616af8-d920-4b32-ad51-8ec342dd32a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:78:e8:2d:07:32:e4:73:a7:cf:eb:e8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d616af8-d920-4b32-ad51-8ec342dd32a3
        Validity
            Not Before: Oct 12 01:00:13 2026 GMT
            Not After : Jan 10 02:00:13 2027 GMT
        Subject: CN=251f1c62-3414-4e26-8690-bb37153d5fc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:37:f9:b3:fe:fa:7c:e7:74:ad:12:b0:99:58:
                    3a:c6:5c:e0:af:1e:77:2a:93:f1:37:aa:36:9d:d8:
                    bc:ee:75:b0:64:55:73:5e:9b:12:0a:42:26:18:46:
                    a6:63:74:b8:08:4c:74:ad:e8:ce:56:0e:64:f8:b1:
                    b5:a8:3a:20:94:89:a3:cb:ab:bf:26:4a:b4:e0:f3:
                    51:9f:c9:9d:34:a5:2a:89:2d:d5:6d:d6:f9:a1:52:
                    2e:76:e9:f8:40:b7:78:38:dc:1b:72:1b:4f:e5:67:
                    c0:ad:c1:b5:4a:50:55:81:50:b5:4e:9b:9d:79:b3:
                    b7:d3:e5:da:45:9b:4e:71:c9:6c:56:51:2e:bf:2c:
                    7c:e0:e1:a0:46:0e:c2:fc:f3:fa:14:8c:a5:37:42:
                    a5:cb:fb:f6:ab:85:d2:44:77:aa:4b:7c:db:da:14:
                    2c:d9:f9:98:9d:85:01:8c:0b:7f:31:f4:2c:62:5c:
                    0e:f7:2b:8f:47:02:e2:a5:ed:13:ca:53:62:91:ff:
                    09:39:f9:94:ec:a4:77:6d:4d:d1:d6:00:18:cc:09:
                    0a:db:f3:8a:c3:16:55:d8:70:e2:be:15:b8:9d:87:
                    c7:70:68:3b:a2:d0:35:93:ec:3c:43:3d:1a:14:46:
                    a7:84:f0:66:c7:89:00:76:46:62:2f:b5:a9:81:d3:
                    92:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:05:6A:E0:A2:D1:F5:A4:FD:27:EF:94:E8:C7:ED:C2:9A:20:B1:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9d616af8-d920-4b32-ad51-8ec342dd32a3/f457ae6b-02bf-34fd-903c-5fbdab177bb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9d616af8-d920-4b32-ad51-8ec342dd32a3/9d616af8-d920-4b32-ad51-8ec342dd32a3.crl

            X509v3 Authority Key Identifier:
                keyid:15:86:78:46:8A:11:05:19:43:45:2B:8E:7A:87:42:37:83:CC:E9:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9d616af8-d920-4b32-ad51-8ec342dd32a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.119.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:bd:e1:de:b6:2c:62:cb:9a:af:e1:6f:4f:4d:66:ff:a8:d7:
         0c:ba:a4:2d:89:cf:f7:ef:4d:42:67:00:0c:2c:d7:39:b6:a8:
         76:39:c7:0e:20:b3:56:f3:ff:c2:9c:41:87:b1:8e:4e:9b:99:
         90:7c:35:8f:0c:98:8d:f7:da:b7:89:ca:72:a1:97:df:15:ad:
         35:bb:63:a1:c7:bf:8c:48:71:73:1b:0e:fa:5c:bb:96:c3:15:
         5c:06:51:be:5e:61:c9:03:06:2d:f2:6f:70:36:24:9a:9f:18:
         b9:1b:c6:36:15:d5:77:10:7a:c3:96:73:74:40:77:69:40:5b:
         a3:24:e0:2b:75:02:36:22:d8:12:70:08:60:f1:13:7b:30:0f:
         2f:79:c3:51:e2:53:22:61:1c:99:91:9c:94:37:7d:da:66:c0:
         3c:d3:69:23:98:b3:34:ff:ed:42:13:b6:d3:7b:c9:cc:80:6b:
         c0:99:aa:08:fc:2a:c2:8d:87:70:1d:2c:11:b0:e8:80:23:ff:
         95:a6:67:01:5a:c3:a1:5e:fe:0d:53:65:ef:03:fc:95:ab:7a:
         3f:ed:ff:f4:35:42:3f:c5:ae:a8:54:26:fa:26:91:9d:ca:9b:
         10:9b:e2:99:28:e9:ed:b4:91:b2:f5:59:40:e1:f7:ae:ab:25:
         65:fd:c7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 16:31:39 2026 by rpki-client