Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1b0c57fc-3b0c-4f55-b2c6-3ba46f20209a/21e3fec4-d83b-3e24-a841-a9662236b329.roa
File:                     21e3fec4-d83b-3e24-a841-a9662236b329.roa (raw, json)
Hash identifier:          XzGd4H9Ouqt6UoFo92r365EbnPZRd2HDkm+TDn1gywU=
Subject key identifier:   A3:52:2B:CE:5E:28:0C:CA:5A:95:3D:93:51:52:3D:01:26:BB:93:C2
Certificate issuer:       /CN=1b0c57fc-3b0c-4f55-b2c6-3ba46f20209a
Certificate serial:       010D0C9F4328584F4AD7DD887B9A3066F754CC80
Authority key identifier: A0:3C:52:F8:7A:47:6F:05:18:B5:4F:CD:DC:BD:1B:04:B3:84:C5:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1b0c57fc-3b0c-4f55-b2c6-3ba46f20209a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1b0c57fc-3b0c-4f55-b2c6-3ba46f20209a/21e3fec4-d83b-3e24-a841-a9662236b329.roa
Signing time:             Fri 25 Sep 2026 13:00:11 +0000
ROA not before:           Fri 25 Sep 2026 13:00:11 +0000
ROA not after:            Thu 24 Dec 2026 14:00:11 +0000
asID:                     32613
IP address blocks:        184.107.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1b0c57fc-3b0c-4f55-b2c6-3ba46f20209a/1b0c57fc-3b0c-4f55-b2c6-3ba46f20209a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1b0c57fc-3b0c-4f55-b2c6-3ba46f20209a/1b0c57fc-3b0c-4f55-b2c6-3ba46f20209a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1b0c57fc-3b0c-4f55-b2c6-3ba46f20209a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4a:d7:dd:88:7b:9a:30:66:f7:54:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0c57fc-3b0c-4f55-b2c6-3ba46f20209a
        Validity
            Not Before: Sep 25 13:00:11 2026 GMT
            Not After : Dec 24 14:00:11 2026 GMT
        Subject: CN=db261d80-16cc-42eb-bf5a-8d0d0258db77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:78:8d:a8:58:38:88:30:b4:a7:3a:51:71:57:
                    8a:6a:20:bf:a3:b3:7b:b8:04:79:3c:c0:9d:12:da:
                    ef:88:26:58:94:9c:94:61:85:74:81:01:f3:a9:95:
                    7c:26:2d:08:ee:51:d3:53:db:1e:f6:9c:dc:0c:cb:
                    f0:15:e9:fc:00:84:88:11:d7:22:a2:1e:2b:fb:6e:
                    0c:81:a7:71:ff:e8:e0:ea:49:4f:14:39:c7:72:22:
                    66:18:96:00:d0:4f:44:03:ae:e1:46:0e:6e:56:f6:
                    32:53:c4:34:9f:43:90:78:e2:3e:01:f5:05:07:f3:
                    5e:42:5b:a8:58:6c:54:4e:da:53:98:20:18:f3:2c:
                    1b:a3:a3:1d:6b:b5:48:f1:b6:00:aa:86:aa:41:92:
                    07:cb:8d:9c:22:bc:89:30:02:40:16:e5:67:40:30:
                    ee:f8:6b:75:68:31:57:d8:b1:21:94:90:7b:a1:b8:
                    dc:70:0d:93:9c:cb:db:f6:0c:c8:63:4f:77:42:4f:
                    46:c0:99:aa:15:5d:cd:6a:a3:3a:9b:5c:37:3a:7d:
                    db:a7:cb:0d:9a:c0:09:e7:5e:e7:bf:56:d0:36:ab:
                    e4:74:68:80:35:27:1b:bd:3e:82:b8:95:23:68:32:
                    f7:54:7c:23:c7:19:60:6c:d1:3b:e3:a6:97:3f:ba:
                    ae:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:52:2B:CE:5E:28:0C:CA:5A:95:3D:93:51:52:3D:01:26:BB:93:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1b0c57fc-3b0c-4f55-b2c6-3ba46f20209a/21e3fec4-d83b-3e24-a841-a9662236b329.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1b0c57fc-3b0c-4f55-b2c6-3ba46f20209a/1b0c57fc-3b0c-4f55-b2c6-3ba46f20209a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:3C:52:F8:7A:47:6F:05:18:B5:4F:CD:DC:BD:1B:04:B3:84:C5:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1b0c57fc-3b0c-4f55-b2c6-3ba46f20209a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.107.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:72:4b:f1:42:53:f0:1c:1c:97:25:23:bc:b1:c5:51:86:a2:
         3f:ac:85:d4:3b:ff:0f:e8:7c:3f:03:5e:59:68:a9:d8:8c:4c:
         83:42:87:ff:dd:43:08:39:1a:b7:54:15:48:0d:ce:ee:b2:82:
         44:75:ee:bb:5e:33:47:50:b7:e8:1f:2f:2a:e5:eb:12:f7:03:
         bf:3a:78:a3:4b:ff:c7:bf:e6:52:e3:9c:02:c2:6e:28:b3:20:
         91:45:61:f6:b2:2c:19:69:f9:c4:71:27:3f:4b:c5:66:19:b8:
         23:87:6a:cf:1e:b8:16:9e:34:ec:bc:90:45:42:e4:c5:aa:73:
         17:ca:a0:e8:e3:c0:49:bb:b5:36:0e:8b:43:0f:6b:87:9d:de:
         3e:71:7e:49:ad:07:2f:2e:e7:dd:34:67:fd:1a:af:5d:d0:75:
         b9:23:c3:4a:ef:95:72:26:f2:0d:8b:a2:33:3f:fe:5c:b2:7b:
         0e:56:b7:87:c1:fe:56:8e:9e:df:b6:ae:ac:38:2b:e1:24:38:
         8f:10:9c:6b:6c:90:c5:a2:85:ca:a6:f8:5c:cc:af:be:56:24:
         17:9e:54:f7:ee:63:95:cc:88:80:4a:7a:8c:c7:99:80:1b:99:
         a7:15:2b:92:df:f8:20:30:78:00:17:48:6a:a2:b2:b7:38:81:
         3f:9c:cc:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 12:54:45 2026 by rpki-client