Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c97ab260-a07a-34d3-a721-e56dd562bdec.roa
File:                     c97ab260-a07a-34d3-a721-e56dd562bdec.roa (raw, json)
Hash identifier:          353S3+aQsb/axWVk0rq58eHs5ts//CdA4LXki2BuShM=
Subject key identifier:   DC:A5:61:13:D4:D6:DA:31:38:C9:3F:84:E0:90:59:13:64:B0:02:40
Certificate issuer:       /CN=c727dab7-c852-4d24-82ff-cf171b24f2f9
Certificate serial:       010D0C9F4328584EE4F1FD9A9772C604E4A0FB60
Authority key identifier: 61:1F:5A:5F:17:55:FD:D5:D0:A3:4E:20:8D:D4:8C:CC:1D:AF:69:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c97ab260-a07a-34d3-a721-e56dd562bdec.roa
Signing time:             Thu 20 Aug 2026 01:00:12 +0000
ROA not before:           Thu 20 Aug 2026 01:00:12 +0000
ROA not after:            Wed 18 Nov 2026 02:00:12 +0000
asID:                     137081
IP address blocks:        216.23.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:f1:fd:9a:97:72:c6:04:e4:a0:fb:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c727dab7-c852-4d24-82ff-cf171b24f2f9
        Validity
            Not Before: Aug 20 01:00:12 2026 GMT
            Not After : Nov 18 02:00:12 2026 GMT
        Subject: CN=d255c1b3-94d5-46d6-90f4-0ab500b2f156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:7d:12:d9:8b:96:bc:9d:76:82:59:70:b8:4b:
                    54:fe:c0:09:05:49:47:85:d6:c9:75:33:30:4b:52:
                    7c:7c:9e:64:e3:63:d7:14:74:84:cc:a3:66:7c:b3:
                    d3:c6:b7:a4:81:d1:9f:2b:ce:a6:dd:a8:88:4b:c9:
                    3c:f2:1b:70:82:36:a9:7d:c5:db:2e:1c:2a:fa:49:
                    49:32:1f:14:b4:02:a2:40:e8:b7:67:2b:9a:25:5b:
                    ad:03:e7:fb:ed:03:aa:f8:86:ff:22:97:fe:ce:83:
                    f5:e3:c1:ed:02:9b:7a:72:80:b5:f3:fe:83:cc:5d:
                    c0:1f:64:c1:69:68:21:58:a4:20:ca:5a:0a:c4:ed:
                    53:1e:c2:8d:26:f5:7c:ab:6c:4d:05:4f:08:d1:f5:
                    9f:44:59:0d:d3:fb:6b:37:c1:0f:09:dc:e1:1c:8a:
                    6f:42:13:c2:43:3c:a7:0f:27:61:9b:57:8d:b1:36:
                    bb:c5:56:4c:65:a7:7d:7a:0d:de:8d:67:25:c0:6a:
                    7e:32:bb:90:c1:85:d0:a8:b7:ff:a8:de:82:61:7a:
                    0b:bc:03:19:5f:45:ed:d3:8d:78:0c:66:e2:4e:78:
                    9b:50:ca:68:7b:89:b5:0e:f9:9c:93:ab:d7:96:3d:
                    1d:e4:c0:7e:5c:da:4c:66:7e:a7:73:1e:fd:13:a5:
                    53:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:A5:61:13:D4:D6:DA:31:38:C9:3F:84:E0:90:59:13:64:B0:02:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c97ab260-a07a-34d3-a721-e56dd562bdec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.crl

            X509v3 Authority Key Identifier:
                keyid:61:1F:5A:5F:17:55:FD:D5:D0:A3:4E:20:8D:D4:8C:CC:1D:AF:69:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.23.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:a5:67:90:af:56:59:63:72:b6:a6:2e:15:10:de:97:33:7c:
         bd:0f:dc:ad:75:3b:d4:6c:56:0d:5e:57:b0:c8:62:ef:9c:eb:
         12:66:31:7f:da:9a:17:19:c0:cf:9f:f0:c2:dc:7d:b8:f7:e0:
         08:2d:d2:13:28:c0:d1:14:24:31:1c:6e:71:f9:4c:cf:46:56:
         60:53:0f:25:2c:99:e6:d2:6c:80:50:65:b9:c5:25:8b:1b:65:
         8b:c5:e0:63:21:f1:5d:f3:7f:c9:19:0c:a4:2b:f6:4a:47:5d:
         ed:7e:86:34:c6:23:2c:ba:c0:ad:00:14:6b:56:17:75:84:70:
         93:b2:eb:86:8c:fb:3f:24:6d:c1:74:6f:ae:0b:95:75:4b:65:
         a8:f2:a3:14:9f:a7:65:79:08:0d:79:f9:5b:99:b2:a9:47:78:
         e6:09:aa:33:62:86:bf:7c:ff:76:8c:f0:02:78:8a:f4:86:c3:
         1e:6e:68:5a:ac:5c:9a:f7:f3:49:6d:a0:84:15:75:fa:8f:74:
         94:57:2f:b2:c5:08:f2:5c:86:f6:4f:4d:b2:a8:5d:6e:61:30:
         a5:6b:d5:f5:f1:8f:48:4b:dd:ec:85:92:73:13:9e:09:b0:b9:
         f7:ad:02:ae:76:f8:57:86:f9:67:32:22:3e:77:ed:91:2b:e6:
         03:99:85:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:43:10 2026 by rpki-client