Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202/9e7d2dcc-6e4a-3aec-8b0f-14d0a72835ed.roa
File:                     9e7d2dcc-6e4a-3aec-8b0f-14d0a72835ed.roa (raw, json)
Hash identifier:          zXH9V17Lpnrn0b4vr4rFKHjB+CR+9XV/OCpx6A7nRmQ=
Subject key identifier:   81:A9:43:71:1A:63:88:19:6E:15:A2:3D:34:92:95:5B:7E:85:DB:96
Certificate issuer:       /CN=d91f505a-0b78-4bc4-a857-f86d34163202
Certificate serial:       010D0C9F4328584F4976750CE3334DB28ABD4340
Authority key identifier: B4:AB:B9:C6:85:42:EB:2D:83:E8:01:5B:2F:4A:89:ED:EB:A7:19:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202/9e7d2dcc-6e4a-3aec-8b0f-14d0a72835ed.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        216.211.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202/d91f505a-0b78-4bc4-a857-f86d34163202.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202/d91f505a-0b78-4bc4-a857-f86d34163202.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:75:0c:e3:33:4d:b2:8a:bd:43:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d91f505a-0b78-4bc4-a857-f86d34163202
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=1360eb9d-572e-43cf-9460-65e088bf0415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a4:90:2b:62:f2:40:d3:6d:73:69:7b:80:6b:
                    ac:bd:c0:4c:99:46:8f:0d:fa:24:96:33:2a:20:3f:
                    d3:5a:58:27:bc:67:99:cb:ac:0c:7d:20:f1:fa:17:
                    f6:4c:67:fd:1c:1c:2f:33:18:51:f1:52:de:82:d6:
                    e9:27:ea:2c:a4:90:72:56:a7:67:17:8b:32:97:09:
                    e2:17:54:13:b8:78:94:74:0f:96:c1:d0:b7:19:83:
                    d8:51:c6:de:7b:75:d4:4b:7a:44:97:61:f1:5c:87:
                    ac:61:a2:43:d0:6b:e9:eb:86:d7:b2:c3:f2:6c:a6:
                    04:f9:6f:6d:5e:7f:cd:53:44:f0:3e:d7:19:31:57:
                    d7:d6:33:16:57:c4:14:fc:7b:5c:3a:b8:19:b8:fa:
                    7f:74:2e:9d:b7:32:1d:c1:a8:7a:64:4d:5e:75:cd:
                    d8:1f:70:8b:56:14:0a:ec:db:0b:ca:89:17:14:f7:
                    42:ca:3d:84:63:02:48:1d:af:e4:ba:21:ba:b8:c6:
                    74:40:14:30:a5:af:8a:df:9b:3c:41:c9:75:40:ab:
                    ca:c6:7e:99:68:d3:a8:e9:ba:81:61:3d:d4:09:4c:
                    00:d4:28:e3:da:63:d9:6e:3f:dc:f0:32:36:90:b2:
                    7c:2c:6c:bd:f1:00:16:f1:e0:d3:79:c5:2c:b4:43:
                    5a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A9:43:71:1A:63:88:19:6E:15:A2:3D:34:92:95:5B:7E:85:DB:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202/9e7d2dcc-6e4a-3aec-8b0f-14d0a72835ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202/d91f505a-0b78-4bc4-a857-f86d34163202.crl

            X509v3 Authority Key Identifier:
                keyid:B4:AB:B9:C6:85:42:EB:2D:83:E8:01:5B:2F:4A:89:ED:EB:A7:19:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.211.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:30:b9:88:ee:c6:73:71:fc:bb:ea:2e:c3:d2:81:8d:57:73:
         c8:0f:28:4a:56:71:0f:b5:af:59:0c:12:1b:88:14:f1:e9:82:
         cc:85:32:46:ea:98:1c:b5:d2:e0:1e:69:e0:37:7b:ec:f9:04:
         5e:8b:56:a3:3e:d0:11:f0:85:18:37:44:c0:fd:61:2e:05:e3:
         d8:bc:f5:a5:b3:fd:96:eb:44:88:a7:bb:80:7f:29:37:b8:fe:
         25:ab:f3:c9:62:46:00:84:7c:c1:74:dc:9f:cf:67:3f:63:05:
         7c:b3:6c:f2:20:09:89:3e:d5:8b:f3:e1:a6:72:c9:ff:af:b3:
         71:3b:71:ca:cf:ec:5e:17:e5:68:86:19:75:4e:c8:f8:aa:43:
         c5:7e:59:04:e8:d2:5d:9c:48:3c:0a:24:49:d9:72:d3:06:8e:
         31:1b:59:ed:92:e9:28:53:aa:24:36:3c:11:8a:10:8d:e4:83:
         24:b0:9b:5f:4a:23:ec:ac:97:bb:56:81:6c:25:8b:d8:35:0b:
         8c:32:7b:54:75:be:c1:ec:b9:8a:c5:01:e9:a3:0c:4e:03:50:
         22:de:fd:b7:19:5a:a7:d7:73:6f:af:f1:88:95:88:12:a6:b5:
         6d:75:1f:2f:52:24:ff:f9:24:77:32:1c:b5:2f:e3:c0:4b:d4:
         af:aa:e5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 06:08:48 2026 by rpki-client