Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/bfb4c488-1485-3699-b808-4549f6547da6.roa
File:                     bfb4c488-1485-3699-b808-4549f6547da6.roa (raw, json)
Hash identifier:          csobH4cuMPmdJtZ8CTSc48e0ILdG3i51UelZwabMV9M=
Subject key identifier:   82:55:3C:4E:00:B0:48:F3:30:01:21:F6:64:A8:64:4F:32:24:14:C3
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584EA787FF8AF4364AF8A7EB6280
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/bfb4c488-1485-3699-b808-4549f6547da6.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     10753
IP address blocks:        216.24.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:ff:8a:f4:36:4a:f8:a7:eb:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=5a55879c-e3bb-49e8-88c6-ffa4f7c1e002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:43:89:db:9a:cc:62:14:f1:a1:40:81:89:bf:
                    5a:d4:e0:eb:22:ab:29:51:93:3a:81:96:27:ca:31:
                    0f:cd:35:2a:f8:0a:65:1e:9f:33:02:85:e6:f6:78:
                    9c:3b:47:4f:76:81:4d:c5:b6:7c:eb:45:50:7c:95:
                    5d:c5:7f:f0:19:44:48:6e:5a:71:69:1c:95:8a:71:
                    ce:8f:b8:de:17:67:99:ef:2f:cc:af:ad:28:e6:47:
                    26:f0:dd:48:d1:e0:ba:85:51:a9:5b:63:0e:6b:12:
                    b9:85:1c:a5:3f:2f:8c:cc:9b:18:01:2b:1c:83:c5:
                    bb:54:07:59:fd:1f:ee:53:84:38:73:c1:d1:35:a5:
                    41:2c:e5:67:f0:34:01:ac:a9:02:fb:f1:60:71:5d:
                    36:6d:83:3f:0e:31:90:e6:87:4c:6b:05:78:7b:70:
                    f4:7c:75:af:42:33:0b:7f:cf:37:0f:39:eb:b6:ef:
                    c6:ec:d9:40:90:1e:5b:68:e9:10:8b:90:db:8c:d3:
                    f0:b9:7c:c5:79:80:a7:87:11:50:84:2b:c5:c2:ce:
                    47:3d:e2:73:b4:27:7f:3c:b4:e7:7a:47:8e:2a:c1:
                    38:be:b8:16:35:74:15:52:a8:2c:e1:2d:d1:2b:ed:
                    9a:66:81:bb:88:d6:36:55:4c:7a:65:01:92:57:9a:
                    b2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:55:3C:4E:00:B0:48:F3:30:01:21:F6:64:A8:64:4F:32:24:14:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/bfb4c488-1485-3699-b808-4549f6547da6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.24.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:99:5f:9d:2d:26:be:5a:17:6e:34:64:04:c5:e9:c4:63:d4:
         1b:73:f1:3f:ad:15:48:13:07:54:ca:4e:f1:8d:2a:e0:d6:10:
         11:fd:52:45:fb:ac:b5:39:83:06:d6:a4:67:44:59:93:d3:92:
         38:a3:ac:3c:19:6a:76:b7:ae:45:20:c3:26:82:1d:6e:35:32:
         42:0d:f2:03:ed:35:a0:be:31:5c:86:5d:6d:48:f5:42:d9:fb:
         45:16:72:ec:bd:91:2c:fe:da:a4:ad:d3:97:91:83:cb:8f:f4:
         1b:f0:6c:ba:d6:78:e3:80:cf:ac:c8:ee:da:e5:67:ef:7f:d3:
         86:7b:66:0d:4b:55:ab:17:3d:50:aa:57:e9:a6:9b:29:ac:99:
         36:65:4a:9a:22:71:5e:8e:83:db:a6:34:13:32:c6:4a:df:fd:
         34:c2:7f:ac:9b:d0:49:f0:9d:bb:dd:7d:79:82:98:72:d6:13:
         9a:5c:72:43:42:48:bf:aa:54:dc:96:be:15:01:33:cc:c2:fa:
         2e:48:af:96:ae:87:7e:43:6e:18:51:6f:ab:26:c5:33:1d:be:
         4f:e6:45:5a:fb:ae:fa:07:d8:f4:0c:3a:0d:60:2c:60:3a:9c:
         bd:2b:4f:18:04:bb:81:d5:00:61:2b:b3:13:19:25:b7:97:43:
         10:09:8c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:19:07 2026 by rpki-client