Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/c2c6f7d3-cba4-3cc7-bff6-77ef5ec8df20.roa
File:                     c2c6f7d3-cba4-3cc7-bff6-77ef5ec8df20.roa (raw, json)
Hash identifier:          Wk2VZhm1WuqIQVoc80UE6qAS0TypFhngad00rS6brUc=
Subject key identifier:   8D:F0:A4:D0:49:8F:B6:47:BD:DE:A6:AC:E7:EF:08:10:93:70:EF:AE
Certificate issuer:       /CN=faf569a5-954e-480e-9904-712ec61652b7
Certificate serial:       010D0C9F4328584F268CFF77170201A5A4E95600
Authority key identifier: 06:32:5E:FB:8B:27:C3:34:23:E2:86:F6:6C:02:1A:A9:B4:81:29:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/c2c6f7d3-cba4-3cc7-bff6-77ef5ec8df20.roa
Signing time:             Sat 12 Sep 2026 13:00:13 +0000
ROA not before:           Sat 12 Sep 2026 13:00:13 +0000
ROA not after:            Fri 11 Dec 2026 14:00:13 +0000
asID:                     32034
IP address blocks:        216.226.64.0/24 maxlen: 24
                          216.226.65.0/24 maxlen: 24
                          216.226.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 15 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:26:8c:ff:77:17:02:01:a5:a4:e9:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faf569a5-954e-480e-9904-712ec61652b7
        Validity
            Not Before: Sep 12 13:00:13 2026 GMT
            Not After : Dec 11 14:00:13 2026 GMT
        Subject: CN=f1c935f5-a4a2-4dcd-ab14-69b6c4308d34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2e:75:fa:1f:4d:f3:27:c2:29:a5:b9:f1:68:
                    87:8e:cf:8f:ea:c4:6f:28:2a:99:60:ff:2d:2b:61:
                    d9:9f:0c:78:39:d7:da:73:75:d9:63:f4:ad:ad:30:
                    cd:5a:3b:c7:b2:51:85:d1:ab:e6:82:14:a3:0c:d7:
                    1f:9c:ff:20:3d:ef:19:66:87:d9:e7:8e:8b:99:10:
                    3d:3c:d0:59:1d:e1:12:0e:25:d6:6a:3e:8e:ea:06:
                    9c:2d:10:4b:e0:d7:d4:ef:0d:fa:47:d5:c0:26:6d:
                    56:56:6c:8e:b5:34:2a:6f:11:a9:9b:46:3e:98:41:
                    a6:51:89:66:6d:e6:c7:c3:21:3c:93:12:26:65:68:
                    d8:a5:be:da:8f:1e:41:82:1d:9b:5b:1b:33:c2:80:
                    8b:c7:90:f9:f8:55:56:0f:52:8b:16:b7:6c:e4:ea:
                    ab:55:41:29:47:12:f6:4e:a6:cd:72:66:72:10:56:
                    81:f4:f3:4d:5f:e4:15:2d:74:4e:d7:e0:d0:41:2e:
                    5d:66:9e:cb:bd:81:b2:23:03:5c:96:3e:b2:c9:4a:
                    f8:22:a6:1e:69:ef:97:0c:b8:12:7c:1a:ae:37:60:
                    3a:9b:0f:c5:6a:c1:2d:d3:e5:d1:91:a2:bd:1d:d3:
                    12:ee:2c:a7:6d:16:f2:cc:fa:70:60:ef:37:c2:3b:
                    ca:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F0:A4:D0:49:8F:B6:47:BD:DE:A6:AC:E7:EF:08:10:93:70:EF:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/c2c6f7d3-cba4-3cc7-bff6-77ef5ec8df20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.crl

            X509v3 Authority Key Identifier:
                keyid:06:32:5E:FB:8B:27:C3:34:23:E2:86:F6:6C:02:1A:A9:B4:81:29:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.226.64.0-216.226.66.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:40:78:d0:17:4c:aa:e0:f5:07:b2:b6:70:ef:31:05:01:d3:
         ea:30:2b:e5:4b:37:b5:7e:d3:e3:94:eb:4e:d1:47:ce:4b:b7:
         e3:fd:89:b3:12:21:f5:7e:47:b5:db:32:c8:47:d5:7f:46:ee:
         d1:60:be:76:e9:15:40:d7:d1:e0:0e:94:ec:a7:67:da:53:09:
         58:73:dc:92:bf:8e:0d:e4:67:7f:7b:c3:13:16:35:83:29:88:
         b3:dc:6f:dd:6f:2b:32:89:89:8f:d1:78:4a:f6:b6:b8:22:fd:
         ae:0e:d0:cd:0c:59:58:ad:93:46:22:22:94:c4:1b:87:ff:95:
         a4:7e:88:41:13:7e:c8:dc:67:cf:34:79:e9:65:66:c6:07:35:
         f4:11:9b:37:be:66:6c:c7:d7:6b:1f:69:6b:b1:89:28:b2:15:
         71:aa:e7:c7:8f:cf:a9:a5:2f:b9:88:74:d5:7c:cb:9e:27:66:
         cb:98:b5:fe:ff:5a:99:a9:5c:c4:ef:05:91:2a:44:a1:aa:37:
         be:e4:4f:e7:24:be:7d:8c:c4:f3:80:5e:7d:a3:a6:ef:17:99:
         be:50:5e:63:98:be:e7:6a:c8:30:29:04:12:f5:cd:d6:e7:21:
         fa:ce:8b:ad:b0:88:a3:62:f4:7e:07:ac:dd:e5:c5:8c:0b:68:
         3f:6d:a2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 16:38:42 2026 by rpki-client