Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/25f36808-02cf-3615-96ee-5386657bb617.roa
File:                     25f36808-02cf-3615-96ee-5386657bb617.roa (raw, json)
Hash identifier:          EGwc6ERnR7inMz1k5CT45vzszZ2Wmpmp7B3+YY2Bjms=
Subject key identifier:   C5:62:6F:21:F6:D0:23:92:ED:60:E0:33:33:C0:99:69:E5:2A:C7:7F
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584F49741ABC5B4DEDE3CC3B7B80
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/25f36808-02cf-3615-96ee-5386657bb617.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     23473
IP address blocks:        216.171.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:1a:bc:5b:4d:ed:e3:cc:3b:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=755a71fa-4fd5-4f0b-9752-3e54b3c67816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:58:49:1c:c4:bf:5a:e5:cd:cc:6c:b2:7c:c6:
                    8a:20:a4:11:dd:ab:9b:3c:e2:58:bd:90:db:d3:03:
                    da:d3:76:6d:b2:22:0c:aa:99:53:2c:28:f9:68:b8:
                    db:c9:15:8f:90:90:53:c4:c3:86:e4:11:3e:69:47:
                    c7:6e:2b:f8:37:85:d4:82:8f:19:63:38:4d:7c:5b:
                    d7:12:28:0d:ab:32:e5:c8:30:1e:98:37:c4:17:95:
                    cf:01:d6:a8:c8:c7:22:fe:12:da:9a:9a:4b:c6:b3:
                    23:c6:25:66:08:d0:ec:c3:c9:ba:17:54:b0:c9:cb:
                    09:6a:6d:0a:c5:6e:d8:3b:87:0c:de:7b:eb:30:20:
                    53:e7:f4:1e:f0:ba:d5:10:ca:f9:21:03:77:cb:23:
                    7a:a9:d3:e7:aa:78:02:44:b4:84:95:fc:34:82:90:
                    bc:81:96:74:71:fe:cd:73:e3:9e:5f:8e:42:65:1e:
                    de:dc:84:18:cb:67:c5:39:15:8d:c9:50:59:48:b6:
                    49:8c:90:85:06:8e:62:30:8f:9f:93:ff:7b:a6:5e:
                    e7:3c:5c:56:27:00:69:18:eb:d7:cf:56:83:db:34:
                    a4:21:be:23:02:ab:a0:c5:79:82:c6:e5:af:69:7a:
                    2c:38:81:55:e3:ed:e9:1a:a9:23:c3:2c:fd:0a:a6:
                    6b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:62:6F:21:F6:D0:23:92:ED:60:E0:33:33:C0:99:69:E5:2A:C7:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/25f36808-02cf-3615-96ee-5386657bb617.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.171.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:42:8a:fe:53:2b:bd:d9:05:55:8f:fe:88:7e:36:e9:49:3c:
         d5:04:ef:8c:71:e1:36:b1:cc:f0:b2:fb:c1:18:6e:aa:e3:16:
         ef:15:73:10:5f:bf:27:e0:34:6c:c5:96:35:3a:27:ce:50:40:
         ef:eb:f7:40:86:e5:94:77:e5:1a:5e:67:a5:82:92:15:98:01:
         49:70:f1:f6:d3:2a:22:ed:7a:d4:f0:9e:c4:e7:29:f8:ba:45:
         54:13:ca:fa:40:cb:f9:43:6f:f1:64:6d:df:e7:37:32:4f:99:
         43:64:6d:99:6b:59:58:b5:01:1d:22:b5:2a:cc:b2:01:db:8c:
         57:9f:1e:01:e4:90:3e:3d:53:c2:91:67:26:49:a7:ca:86:fc:
         87:ac:26:ec:a7:ba:10:31:73:ab:dc:da:c5:a2:bd:23:b6:3f:
         be:b9:89:50:89:3c:21:9a:15:e6:b3:a0:13:ce:7d:5e:99:99:
         8e:48:76:c5:72:2b:93:91:3b:f4:af:aa:78:64:b3:45:48:f4:
         1f:da:6c:8f:e6:a3:8b:9f:80:ea:c3:c8:ba:fe:cb:68:03:db:
         f2:86:6c:f6:3b:ef:66:89:df:54:6b:62:54:03:33:ad:14:35:
         1e:d1:41:bd:92:9c:d3:48:7d:cc:b2:4c:f5:a1:96:b0:ee:75:
         13:a2:76:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:44:49 2026 by rpki-client