Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e3f33b55-b1ed-3f4f-bc44-9f847dff294a.roa
File:                     e3f33b55-b1ed-3f4f-bc44-9f847dff294a.roa (raw, json)
Hash identifier:          xIEdnAtHMk9Bi70baxsEspB+9y/McwWCHU1AC+B7Vsk=
Subject key identifier:   51:53:6B:D5:20:C7:4C:54:7F:6E:AF:58:EF:E9:C1:E9:22:1D:34:41
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584EC0A746947C392EB102801100
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e3f33b55-b1ed-3f4f-bc44-9f847dff294a.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     16787
IP address blocks:        209.16.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:46:94:7c:39:2e:b1:02:80:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=0840fdb4-de2e-4a67-b597-75f505c2a610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4f:f3:fe:f1:10:7d:e7:62:e9:64:93:8a:f6:
                    55:ca:b7:c0:d8:1f:40:8a:b8:79:6e:62:79:6a:2c:
                    8f:16:93:be:43:a8:c8:dc:78:56:33:44:2c:2f:05:
                    3d:65:cc:4d:b3:3b:de:c6:bf:4e:50:ce:d5:a3:1c:
                    86:58:bb:de:f2:26:b9:c4:8a:50:db:6b:ca:e1:fa:
                    03:12:ff:48:98:4a:98:c1:cb:9b:f0:5e:f7:31:c2:
                    26:e3:d9:00:83:c6:67:59:58:72:d5:4a:7a:4b:ea:
                    74:e2:70:73:05:5c:19:fe:07:11:28:40:72:d9:aa:
                    5a:43:4d:d9:a1:1c:76:d5:85:1c:88:1f:b3:23:55:
                    74:0b:31:f1:ef:8c:89:da:18:43:56:7e:2a:55:57:
                    3e:fe:05:cf:ab:c2:8e:b4:24:86:69:85:c9:a7:ec:
                    41:0a:9b:37:bf:ec:f3:5a:b9:a9:5c:8b:a9:4d:62:
                    60:3e:2e:7e:37:79:67:d9:27:6a:e8:99:be:e3:d6:
                    2e:be:90:5d:d7:58:37:db:22:ca:c2:11:56:24:ef:
                    e1:40:26:ed:8a:af:0c:3a:92:c8:b4:fc:f5:e5:f8:
                    5b:b1:3a:8e:32:63:6e:a0:89:85:66:44:ce:c7:71:
                    4b:ae:7a:de:06:65:7e:12:ca:6e:16:5c:a9:31:67:
                    39:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:53:6B:D5:20:C7:4C:54:7F:6E:AF:58:EF:E9:C1:E9:22:1D:34:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e3f33b55-b1ed-3f4f-bc44-9f847dff294a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.16.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:d3:20:e2:60:2b:1a:0f:2f:41:d5:54:2b:66:d3:3e:e7:23:
         ae:59:7d:2d:fc:e6:ac:e3:99:c3:c5:d6:fc:e1:0b:8f:8a:91:
         e1:ed:50:62:02:03:41:07:2b:3e:dd:f1:08:aa:fd:7d:37:e8:
         b0:da:99:44:ac:9c:f5:7c:e9:ae:7c:cb:27:0e:86:c7:56:95:
         02:79:7b:98:88:a8:82:3e:85:a0:05:70:dc:03:93:a5:77:3a:
         f1:23:4b:a8:93:33:f3:d1:d7:b8:f1:de:8a:71:8a:ef:6c:a4:
         3a:8d:52:68:05:1d:18:93:c8:25:0a:22:6f:8d:2c:39:aa:b2:
         23:42:a1:7d:84:29:a1:ae:8d:2b:09:b0:60:58:0c:3e:eb:8a:
         b0:00:4b:21:ef:be:43:5a:16:2a:da:d4:3d:41:7c:b6:f8:44:
         0e:df:4e:24:28:bd:33:91:17:75:8d:30:16:9c:2d:69:ac:07:
         0e:a5:71:2c:b6:94:3d:d1:69:82:7a:72:62:a9:bd:cb:d2:4e:
         da:1a:1e:ff:51:2c:3d:b9:d0:f3:ec:5d:c1:9a:9a:65:e4:58:
         9f:45:4d:bb:ae:04:2f:dd:e0:ad:cd:24:2b:6e:2d:a9:fd:d2:
         cf:9b:f6:28:ad:67:30:fa:6b:3e:6c:e2:0e:4d:33:0e:9e:66:
         97:f7:8c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:04:01 2026 by rpki-client