Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/827760ae-41c2-3ed2-9864-89ad94ed59f5.roa
File:                     827760ae-41c2-3ed2-9864-89ad94ed59f5.roa (raw, json)
Hash identifier:          bdRc9sKLOot8ieN3KUCq8xyy88ewHZvfJ5b/xZdsj/M=
Subject key identifier:   9C:14:4E:FB:B1:8E:FE:9D:22:AF:7F:B6:14:4F:55:B2:A8:DD:78:28
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F4328584F7BB2E6B37049EFBB069B1440
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/827760ae-41c2-3ed2-9864-89ad94ed59f5.roa
Signing time:             Tue 13 Oct 2026 01:00:14 +0000
ROA not before:           Tue 13 Oct 2026 01:00:14 +0000
ROA not after:            Mon 11 Jan 2027 02:00:14 +0000
asID:                     16904
IP address blocks:        216.129.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7b:b2:e6:b3:70:49:ef:bb:06:9b:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Oct 13 01:00:14 2026 GMT
            Not After : Jan 11 02:00:14 2027 GMT
        Subject: CN=8c3c3b79-517c-4694-8046-7f7de275cb66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b8:2c:5a:76:a0:51:49:f5:a1:c9:c7:f1:02:
                    da:24:29:f4:76:fe:30:fe:d6:41:be:4d:31:05:2f:
                    5a:20:68:f3:4e:36:94:39:89:b9:b7:be:66:47:2b:
                    ff:df:a8:79:39:1c:eb:51:98:28:21:5e:56:ef:55:
                    a8:9d:43:0b:be:fe:3e:2a:a4:93:44:fa:22:39:2f:
                    38:b4:ea:73:c1:e3:8d:dc:04:2a:2c:36:cd:4e:28:
                    c5:0f:c3:94:cd:0a:6f:5a:8d:57:e1:c0:f3:1c:5f:
                    d4:7b:ac:7c:4f:86:5c:5e:52:35:b5:f8:25:ca:cd:
                    38:24:44:b5:7a:82:f3:42:e2:ce:f5:9e:62:b3:6f:
                    fb:7a:74:a9:c6:59:3c:99:7b:69:56:06:e2:b2:d0:
                    e6:15:18:2c:75:9c:13:82:5e:5b:87:cf:67:be:07:
                    3e:90:cb:f1:17:8b:34:58:e7:7c:a5:3e:9f:f3:05:
                    59:dd:69:ed:c2:1b:c6:2f:a7:1d:9a:a0:f1:d1:a6:
                    3a:66:11:68:16:a1:7d:8b:5a:86:b3:35:41:46:84:
                    f1:87:1f:ff:b2:f5:8f:7f:c5:dc:56:63:e4:65:8d:
                    db:6a:33:50:81:01:c9:a4:1d:72:78:f6:49:2c:7a:
                    ac:3e:51:85:38:fd:6c:5b:55:fa:b1:2d:05:ea:7e:
                    e3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:14:4E:FB:B1:8E:FE:9D:22:AF:7F:B6:14:4F:55:B2:A8:DD:78:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/827760ae-41c2-3ed2-9864-89ad94ed59f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.129.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:7a:98:49:e9:29:38:67:19:ae:e0:dc:04:a7:a3:96:79:be:
         58:5f:a2:85:24:e1:68:85:74:9a:b2:4b:39:dc:fb:0b:c8:17:
         38:14:e1:ac:ed:76:d8:fb:ec:9c:58:7b:4b:80:ad:ac:49:b3:
         61:96:f2:38:ea:fc:2f:46:49:ec:9e:08:6b:fe:6e:01:36:64:
         9d:2d:22:5c:98:fa:46:fe:48:c8:99:c1:25:35:34:1d:c8:50:
         82:2d:76:90:61:5a:94:91:c3:bd:b5:e4:51:ee:fa:b3:f7:b5:
         74:6a:89:56:cd:d4:05:33:81:27:ff:38:15:22:8c:55:35:04:
         a2:d1:89:38:18:e0:17:12:64:19:82:48:a0:96:83:ae:cd:4b:
         65:f6:7b:c5:ad:86:5d:6a:2f:31:3d:91:19:62:f2:69:bc:e3:
         8a:8c:3f:48:5e:49:f2:5b:08:9b:48:23:cb:43:34:97:e3:bf:
         7a:09:f9:21:16:b6:55:c8:3d:e5:e1:99:8b:2e:57:29:71:e1:
         3f:08:4a:62:9a:97:5f:27:bc:1e:47:80:05:da:3d:f0:b1:34:
         46:5d:66:f9:31:1e:45:87:b0:87:b5:3b:18:bc:8c:ee:ed:9c:
         d4:cf:69:d2:27:7b:d9:71:d0:36:f4:87:14:23:d9:57:64:ab:
         df:ac:21:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:51:47 2026 by rpki-client