Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/1c148e3b-c042-3d99-a928-27463431e304.roa
File:                     1c148e3b-c042-3d99-a928-27463431e304.roa (raw, json)
Hash identifier:          0JJQxVja7f97u597/6R+UGUwz4Ht1ZYceCrbEA/XWfY=
Subject key identifier:   60:C5:EE:91:C7:46:A3:C0:7E:CB:48:A8:C6:47:F0:E7:40:11:81:99
Certificate issuer:       /CN=0f950b17-8345-41e7-bf75-5481729a0012
Certificate serial:       010D0C9F4328584EF01CE58FAF87B0DBAF9B80C0
Authority key identifier: 56:3C:2B:FC:3E:FC:B4:79:C4:82:D7:6A:DE:DE:73:30:B0:B3:B6:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/1c148e3b-c042-3d99-a928-27463431e304.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     32723
IP address blocks:        216.6.168.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:e5:8f:af:87:b0:db:af:9b:80:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f950b17-8345-41e7-bf75-5481729a0012
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=fafcab22-3a3a-4fd4-b8d7-2e91269ca45a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:af:71:cd:af:22:ab:36:ad:30:20:3c:cc:df:
                    dc:8b:bb:2e:bb:82:8e:f0:d2:2f:da:1d:bc:6c:c9:
                    0b:cf:de:e0:d5:47:c5:0f:d1:e7:cd:dd:be:eb:70:
                    66:51:33:be:b3:24:11:11:b6:7f:e1:bb:41:e3:91:
                    a3:e7:db:97:bc:65:da:18:fb:8e:73:c4:95:97:d5:
                    8b:6e:c5:73:5e:fd:40:4f:58:d5:ef:b0:40:d9:8b:
                    cc:39:8e:d4:d5:85:07:b0:78:cb:55:3b:c2:89:e2:
                    90:81:cd:c5:f6:ee:1e:b7:ef:d2:db:ee:fc:74:5c:
                    fd:51:f8:21:0a:58:32:18:7f:e8:96:c7:e8:b9:80:
                    41:c5:8d:cb:b3:d6:41:92:f4:94:7b:b5:b8:d0:6b:
                    03:c3:60:63:12:a9:12:dd:8d:49:f5:ac:8b:9d:6c:
                    cf:b3:3f:92:d6:9e:ca:d3:9a:6d:53:1c:99:97:8a:
                    8a:f4:d7:a4:7f:d2:26:68:af:07:ad:c8:31:cf:3a:
                    6c:e1:7c:0d:1e:52:b0:a5:8e:3a:80:05:c0:bc:0c:
                    94:b7:1a:78:1a:89:1b:89:83:ab:7e:4d:38:89:f3:
                    c8:3f:31:b2:64:4e:59:a3:59:13:14:04:a7:79:9a:
                    3e:fc:3c:3b:94:02:9d:c2:6a:79:85:53:69:e7:68:
                    00:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C5:EE:91:C7:46:A3:C0:7E:CB:48:A8:C6:47:F0:E7:40:11:81:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/1c148e3b-c042-3d99-a928-27463431e304.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.crl

            X509v3 Authority Key Identifier:
                keyid:56:3C:2B:FC:3E:FC:B4:79:C4:82:D7:6A:DE:DE:73:30:B0:B3:B6:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.6.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:20:5d:c4:2b:57:d6:5f:39:78:df:9c:f3:84:eb:09:a2:78:
         b9:d4:54:e0:e1:0d:d6:cc:55:58:65:71:bc:33:e8:1c:5e:6b:
         04:59:e6:2c:72:09:20:42:7e:6e:c7:6a:9c:2c:cd:ea:5d:d6:
         3a:e3:e3:63:80:9e:fd:18:f8:f1:d3:f6:de:c0:81:5e:3b:d6:
         4b:3f:2b:43:41:07:a7:e3:5a:35:ef:8e:62:c9:23:19:22:3e:
         90:79:dd:33:81:98:d1:e2:0e:fe:16:23:4c:13:4e:61:b4:93:
         70:a9:2b:24:41:25:4a:ed:8a:89:fd:e9:92:1b:90:d4:a6:9f:
         b5:b3:bf:a1:9c:a7:15:df:91:d3:60:53:76:4e:2e:53:c6:dd:
         3d:88:35:f1:24:e4:b2:4f:a8:c7:6e:d5:f8:db:6a:63:53:8c:
         6b:92:c2:40:82:3a:35:b9:eb:73:06:a0:f2:84:29:b7:34:7e:
         5a:7a:25:a3:37:2a:3a:34:f3:b7:dc:c5:b0:45:63:3d:d3:3f:
         e0:c5:2a:c0:76:62:01:cc:22:cd:b7:3f:96:da:c2:71:27:32:
         7e:12:1c:0a:ac:a8:4c:aa:1b:30:90:a6:ae:bd:bc:23:13:ae:
         95:06:e4:36:3f:f3:31:1a:de:e8:02:b5:2b:e5:2a:79:16:41:
         8f:c0:88:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:46:57 2026 by rpki-client