Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9770f749-afca-3491-8a76-1e73a8835ae8.roa
File:                     9770f749-afca-3491-8a76-1e73a8835ae8.roa (raw, json)
Hash identifier:          KAMLHGQ5vf2VMzsNCofidHk7htv1KN+vwfgbTTdYMpM=
Subject key identifier:   F6:2E:4D:40:7F:5F:86:CF:65:66:58:04:90:4D:74:06:18:76:89:A0
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584EB847334FBEBE4FBE285E79B8
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9770f749-afca-3491-8a76-1e73a8835ae8.roa
Signing time:             Tue 04 Aug 2026 01:00:12 +0000
ROA not before:           Tue 04 Aug 2026 01:00:12 +0000
ROA not after:            Mon 02 Nov 2026 02:00:12 +0000
asID:                     20001
IP address blocks:        216.213.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b8:47:33:4f:be:be:4f:be:28:5e:79:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Aug  4 01:00:12 2026 GMT
            Not After : Nov  2 02:00:12 2026 GMT
        Subject: CN=da8076dc-cade-484d-bab1-609f7e074cd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b0:09:6e:fc:ec:82:97:b3:91:62:00:b3:ac:
                    17:b1:c8:92:fc:64:4a:2b:ac:43:d9:5c:f6:d0:8e:
                    10:29:60:1f:37:b2:dc:b0:5d:96:82:79:b7:4c:3b:
                    65:f0:70:69:e0:bf:d1:9d:61:ae:ba:2f:ae:3f:74:
                    26:19:da:de:aa:85:e3:80:bf:d0:09:f3:ac:0c:4c:
                    cb:cb:f1:57:70:ac:97:7d:65:fc:10:ed:5f:f9:77:
                    91:fa:82:f9:ac:12:47:06:78:35:5d:3a:f7:78:e8:
                    16:60:b2:6a:39:50:6f:91:ad:e8:fe:61:d5:10:b9:
                    79:0e:07:56:5a:02:f0:e5:b8:c3:fa:93:9c:a9:a9:
                    ab:b9:52:f0:9f:fa:9e:2c:24:cb:02:b8:0b:ca:cf:
                    8f:94:6c:d3:8c:89:c3:91:82:9a:c5:a2:9d:6b:14:
                    cd:0f:c8:f4:9e:68:21:77:55:19:3a:88:70:af:40:
                    55:5a:d3:0a:6b:dc:b5:e7:30:8a:3a:c2:e4:32:6f:
                    28:c6:6c:5b:f1:13:23:7e:04:a4:21:f1:38:d5:eb:
                    fd:1f:75:44:d1:f1:38:7a:a3:00:b2:b8:41:cb:99:
                    07:05:2c:64:24:11:05:0d:02:0d:42:53:2c:64:aa:
                    1d:ee:d8:20:35:44:59:bc:e8:42:9d:d8:ed:66:5a:
                    e7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:2E:4D:40:7F:5F:86:CF:65:66:58:04:90:4D:74:06:18:76:89:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9770f749-afca-3491-8a76-1e73a8835ae8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.213.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:b9:93:16:ca:fc:ca:83:14:e0:2a:0d:96:1f:53:0f:ce:e2:
         ab:30:42:e8:2f:91:89:b1:17:ae:64:94:b8:8b:91:9f:06:16:
         c8:50:8e:42:cf:ad:5f:5d:68:65:ee:b6:9d:6a:6a:a9:ec:5b:
         32:3f:43:3f:6a:46:98:14:23:03:5f:7e:ae:f5:4a:60:74:40:
         98:52:97:b1:91:cf:df:57:b6:32:e7:86:5a:bc:4d:48:dd:b8:
         8a:b8:fd:86:bf:61:11:97:17:81:c9:1a:61:1e:70:cc:bb:f2:
         e8:c0:1e:55:8c:34:66:6a:94:a9:0e:92:91:2b:b4:9e:5f:c8:
         65:7f:08:3d:0c:04:47:80:e7:77:63:c0:15:28:e0:0a:b6:f4:
         df:c9:e7:8d:e1:c5:4c:51:3a:a5:51:4c:57:83:5f:50:52:6f:
         80:0d:fd:30:17:87:dd:53:54:70:be:be:b6:b7:9c:c8:51:7b:
         0c:cb:de:88:c8:5d:6e:09:e7:ff:83:fd:cd:0d:15:4f:80:8d:
         53:93:67:90:07:4a:15:f7:f7:20:8c:77:a9:73:40:70:ef:1a:
         8f:99:dd:0b:59:34:75:04:2b:75:2d:52:39:85:e3:00:2d:64:
         0d:4d:2b:6d:e0:00:ba:f1:81:39:73:b9:71:2f:e2:d0:b0:80:
         57:f1:07:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 16:42:53 2026 by rpki-client