Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f6676d9c-ad8e-4829-af9f-b27b749d7759/65f587e2-c8b1-37da-aeb6-58b6f18dfff7.roa
File:                     65f587e2-c8b1-37da-aeb6-58b6f18dfff7.roa (raw, json)
Hash identifier:          Doeg2mKKX2CDuPL+0e+L+AQYaIAXe9vsn29eYT15Spk=
Subject key identifier:   39:CD:CE:18:43:0B:D8:F0:8F:96:2A:18:8D:6B:37:A1:6E:86:B1:34
Certificate issuer:       /CN=f6676d9c-ad8e-4829-af9f-b27b749d7759
Certificate serial:       010D0C9F4328584F6292DAC66D5D1C0F9B585500
Authority key identifier: 04:20:31:CD:0E:01:C3:3C:B4:BC:20:32:D9:48:93:A7:96:EE:D8:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f6676d9c-ad8e-4829-af9f-b27b749d7759.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f6676d9c-ad8e-4829-af9f-b27b749d7759/65f587e2-c8b1-37da-aeb6-58b6f18dfff7.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     14380
IP address blocks:        216.151.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f6676d9c-ad8e-4829-af9f-b27b749d7759/f6676d9c-ad8e-4829-af9f-b27b749d7759.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f6676d9c-ad8e-4829-af9f-b27b749d7759/f6676d9c-ad8e-4829-af9f-b27b749d7759.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f6676d9c-ad8e-4829-af9f-b27b749d7759.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:da:c6:6d:5d:1c:0f:9b:58:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6676d9c-ad8e-4829-af9f-b27b749d7759
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=edee879b-1a03-49c8-a11b-663f2e34ffa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7b:f3:d2:35:cd:72:09:30:e5:6b:12:ad:3b:
                    73:d8:d6:25:09:ae:19:1f:63:03:74:f1:09:15:d1:
                    a4:03:a9:e4:c7:7c:0f:0e:68:08:85:cf:b4:2a:4d:
                    bd:7f:7c:4b:c3:e9:91:9c:96:56:96:74:bd:2a:ce:
                    a6:e6:3b:12:dc:1b:eb:0d:97:59:dd:83:a8:7a:e0:
                    05:51:f9:9c:42:da:a0:e1:e1:d5:1b:13:b5:7b:f5:
                    62:f6:3a:b9:08:bf:69:4c:43:26:08:83:0c:24:df:
                    28:45:04:bd:5b:cf:16:f3:c3:20:b1:f1:35:dc:0f:
                    83:9d:57:bb:c6:ec:bb:ed:18:48:24:84:32:b1:bd:
                    85:6c:05:e2:f1:12:2d:8c:93:22:b5:ec:6e:84:f0:
                    05:04:6e:ce:1b:99:ed:eb:d3:6c:82:a3:e7:4b:e6:
                    fb:66:3f:af:dc:9b:5d:e7:77:4e:07:d5:da:15:3d:
                    a4:cc:7f:09:ef:f4:0c:dc:59:d4:3a:ed:a2:0e:f8:
                    33:e6:64:fb:5d:bd:2d:f8:98:ed:41:4a:82:2a:7a:
                    f8:4f:24:35:06:14:be:af:35:2a:fd:89:9b:83:ca:
                    99:82:b1:79:eb:ca:e7:b4:07:b2:22:a8:f5:48:eb:
                    35:f5:c6:06:ad:04:16:8b:93:4e:36:9d:1c:e3:c1:
                    36:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:CD:CE:18:43:0B:D8:F0:8F:96:2A:18:8D:6B:37:A1:6E:86:B1:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f6676d9c-ad8e-4829-af9f-b27b749d7759/65f587e2-c8b1-37da-aeb6-58b6f18dfff7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f6676d9c-ad8e-4829-af9f-b27b749d7759/f6676d9c-ad8e-4829-af9f-b27b749d7759.crl

            X509v3 Authority Key Identifier:
                keyid:04:20:31:CD:0E:01:C3:3C:B4:BC:20:32:D9:48:93:A7:96:EE:D8:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f6676d9c-ad8e-4829-af9f-b27b749d7759.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.151.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:56:50:ed:da:4c:05:2f:5d:ad:f2:d5:da:a7:b6:7b:0c:cc:
         43:1e:6f:29:a3:6a:43:e2:8b:ef:5d:1a:a4:92:51:14:0a:c5:
         e0:6c:b7:50:86:b1:29:77:3b:84:87:ef:bf:db:4a:5b:e9:17:
         9d:0c:b1:b7:fe:a7:cd:70:a3:e6:fc:75:ec:a6:9e:3d:6e:75:
         f4:2f:75:2e:42:d8:ee:cf:33:da:f7:85:83:8a:bf:57:fa:69:
         09:d0:3b:25:00:83:74:63:9e:c9:f0:98:a3:23:d6:bd:9f:35:
         75:7e:a4:7c:9b:2e:16:d5:9b:dd:0f:bc:22:f9:0f:b1:6d:85:
         60:79:f4:b4:3a:1e:7e:d3:5c:c3:af:04:ef:31:fd:66:e3:5e:
         40:8c:02:3a:ee:92:5b:fe:4b:c3:fb:be:39:4f:65:ca:a5:2b:
         b7:74:96:4d:95:aa:4b:87:4b:ea:00:27:94:cd:da:03:01:5c:
         c0:b0:dc:2a:c9:17:20:4d:b0:35:9f:8b:59:70:bd:90:72:d8:
         de:1f:ef:fc:5d:de:10:29:03:32:61:0b:cd:7b:33:b2:ca:08:
         1c:23:1f:e5:49:fa:df:97:59:ec:85:50:0a:22:51:17:7b:ce:
         f0:8f:f4:61:70:4b:2c:2c:39:e1:c7:e8:64:8f:ad:44:4c:ba:
         64:4f:ea:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 11:21:55 2026 by rpki-client