Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/a1e68bbb-553c-3456-9cb1-105008ad29db.roa
File:                     a1e68bbb-553c-3456-9cb1-105008ad29db.roa (raw, json)
Hash identifier:          lGv2tgYJF9mGEyf+YnRyDKOzdpnwtz+X2v6jan1cZEw=
Subject key identifier:   15:E9:CD:0E:B2:61:8D:7F:58:68:20:F2:5D:AB:63:A6:DE:82:E3:E6
Certificate issuer:       /CN=70212b19-99d4-4532-a7e0-a5bdbef20170
Certificate serial:       010D0C9F4328584EED5208336AFD024F2470C480
Authority key identifier: 10:3A:37:8A:5C:7E:F2:98:FB:74:3D:2C:6D:62:04:89:CA:64:A2:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/a1e68bbb-553c-3456-9cb1-105008ad29db.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        216.147.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/70212b19-99d4-4532-a7e0-a5bdbef20170.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/70212b19-99d4-4532-a7e0-a5bdbef20170.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:08:33:6a:fd:02:4f:24:70:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70212b19-99d4-4532-a7e0-a5bdbef20170
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=adde9aa7-67c0-4de6-ac72-9d305add469f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f7:3f:4e:02:e0:73:d5:cb:ce:f3:7e:ba:b3:
                    a6:9a:b3:d5:43:13:21:f0:bd:dd:aa:e3:39:fa:07:
                    6f:e4:c0:7a:e3:e0:c1:8b:45:b4:d0:0a:e7:5f:f6:
                    ad:b7:67:fd:e3:07:da:82:41:d5:ae:ae:20:56:cc:
                    b8:54:f4:31:ca:4b:6b:a2:1d:11:4f:e8:f0:2b:da:
                    c2:bf:13:0e:f2:37:32:e6:55:74:47:cf:03:30:27:
                    d4:24:94:8b:5b:89:02:3e:08:49:6a:83:16:50:88:
                    bb:af:1d:8e:d3:9e:3f:57:01:29:7b:01:3c:33:e1:
                    0b:0c:96:9f:c2:1a:d0:26:7e:7d:06:59:57:64:92:
                    75:9d:a1:cc:4f:76:d0:51:f1:a7:2c:b1:38:4b:7c:
                    c4:22:c3:ac:d4:10:0e:96:09:bb:52:e8:6c:bc:d1:
                    eb:1b:f3:1a:6a:aa:45:e1:db:2e:5f:2a:c9:79:7e:
                    12:52:d2:98:28:07:52:5c:27:a0:ab:1c:ab:53:6e:
                    8c:a7:29:a5:0d:4a:b1:1a:c1:fc:02:31:6e:42:10:
                    cf:50:e5:33:fa:eb:1f:72:00:16:b6:94:ea:09:5b:
                    4c:f7:90:e7:de:77:ed:e5:b6:ff:9d:cd:92:34:37:
                    3b:fc:2c:ad:5c:c4:51:4c:3e:6b:d3:5c:80:bf:05:
                    b8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E9:CD:0E:B2:61:8D:7F:58:68:20:F2:5D:AB:63:A6:DE:82:E3:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/a1e68bbb-553c-3456-9cb1-105008ad29db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/70212b19-99d4-4532-a7e0-a5bdbef20170.crl

            X509v3 Authority Key Identifier:
                keyid:10:3A:37:8A:5C:7E:F2:98:FB:74:3D:2C:6D:62:04:89:CA:64:A2:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.147.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:c7:87:e2:a5:df:ff:9a:bb:3e:9b:59:7b:71:c9:0b:68:ff:
         b0:bc:3e:f8:1b:df:03:9c:b2:b1:1c:ee:da:f9:bb:86:08:c9:
         25:64:1b:b3:84:59:a8:13:ab:dc:0f:dd:89:f5:9a:9e:86:09:
         c1:e4:26:ec:31:69:11:c2:ca:2f:b9:a7:58:10:0c:ec:8d:06:
         b3:4d:29:1f:03:d1:30:7e:8a:bd:ed:4f:fb:2d:c3:13:90:d0:
         df:30:34:1a:2d:cd:10:db:cc:f9:fd:16:0f:b9:49:9e:6e:8c:
         46:59:07:dd:c8:00:6c:ea:39:1d:d0:3b:51:78:be:cf:b4:11:
         42:c3:ed:d9:05:1c:b7:9b:56:14:95:4b:72:dd:01:43:20:3f:
         8d:a7:37:6b:7d:d3:8b:67:01:57:14:6d:d7:03:65:61:b0:2d:
         15:9d:bd:c6:5f:1c:cf:6d:22:60:bb:47:54:54:a9:d7:2e:f6:
         0e:90:5e:87:f4:ff:fe:92:8d:7b:f7:55:bc:48:50:9d:67:73:
         e4:13:07:fe:27:04:cb:a6:ac:9b:ec:cf:48:86:29:e5:a4:a6:
         ab:23:01:e4:3e:ff:32:ad:90:ea:b1:62:a9:61:4d:30:80:4f:
         39:6a:87:b1:fd:3e:2f:5e:91:5f:25:13:cc:69:9c:5f:70:38:
         1b:6c:fb:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:06:35 2026 by rpki-client