Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a143f8bd-d0f8-462d-b90f-e89253313894/73f67946-527c-3528-b0e1-cf375135a358.roa
File:                     73f67946-527c-3528-b0e1-cf375135a358.roa (raw, json)
Hash identifier:          hFxWnqM5zphcgPgfOiloQ06Io+gkpZjf5KvR6iZgwsA=
Subject key identifier:   49:CC:0B:7F:A3:00:15:96:98:E8:57:86:79:BE:BF:4B:3C:04:61:48
Certificate issuer:       /CN=a143f8bd-d0f8-462d-b90f-e89253313894
Certificate serial:       010D0C9F4328584ED9C73AF109D624A6A6848580
Authority key identifier: D8:32:F3:94:FB:32:37:29:0A:08:62:DE:5E:84:29:AC:45:FE:9E:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a143f8bd-d0f8-462d-b90f-e89253313894.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a143f8bd-d0f8-462d-b90f-e89253313894/73f67946-527c-3528-b0e1-cf375135a358.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     54751
IP address blocks:        216.150.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a143f8bd-d0f8-462d-b90f-e89253313894/a143f8bd-d0f8-462d-b90f-e89253313894.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a143f8bd-d0f8-462d-b90f-e89253313894/a143f8bd-d0f8-462d-b90f-e89253313894.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a143f8bd-d0f8-462d-b90f-e89253313894.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:3a:f1:09:d6:24:a6:a6:84:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a143f8bd-d0f8-462d-b90f-e89253313894
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=b105a507-33a9-41bd-8645-beecd92ed45e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2e:52:be:90:99:23:e3:26:11:ab:f7:6c:b8:
                    16:e3:17:3d:13:34:26:3e:72:28:12:b8:41:c0:be:
                    fe:9e:ea:2a:ab:03:8d:58:2d:b3:e8:ad:f4:34:1a:
                    7e:e7:f8:a7:a0:7a:c2:d5:1a:55:dd:68:9c:e8:eb:
                    2e:65:2d:f6:bf:5b:6f:b8:1f:51:45:cd:23:be:73:
                    ca:ae:67:22:01:61:89:50:f2:83:ca:97:09:e8:e7:
                    8b:2e:70:07:e8:1a:96:7a:39:fd:14:84:c0:0f:19:
                    fa:e4:0a:98:9c:d8:59:84:89:26:e0:19:c5:82:0d:
                    fe:ed:32:82:cd:90:d6:15:7c:13:c7:ce:fc:0b:82:
                    d7:4a:f5:ee:ef:05:a1:40:70:f2:9c:3d:04:ab:42:
                    42:74:57:8b:ce:5f:e6:c8:3e:e7:01:b7:3e:09:1d:
                    d8:1c:eb:e4:9a:bf:cf:1e:d4:b7:8d:e5:5a:86:b0:
                    1b:da:34:0a:02:ad:bb:6f:dd:fb:6e:7c:a2:a7:7b:
                    92:03:8a:57:76:b6:4e:d2:f3:a2:90:9f:75:40:9e:
                    49:fa:d5:56:a3:b6:7a:f5:9c:1b:1f:d9:a9:be:66:
                    cf:81:64:f6:cd:f1:53:0d:59:94:28:eb:24:df:92:
                    a1:c5:6c:4c:4b:02:74:5a:5b:b2:ca:17:42:5e:89:
                    39:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:CC:0B:7F:A3:00:15:96:98:E8:57:86:79:BE:BF:4B:3C:04:61:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a143f8bd-d0f8-462d-b90f-e89253313894/73f67946-527c-3528-b0e1-cf375135a358.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a143f8bd-d0f8-462d-b90f-e89253313894/a143f8bd-d0f8-462d-b90f-e89253313894.crl

            X509v3 Authority Key Identifier:
                keyid:D8:32:F3:94:FB:32:37:29:0A:08:62:DE:5E:84:29:AC:45:FE:9E:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a143f8bd-d0f8-462d-b90f-e89253313894.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.150.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:48:04:59:e6:cf:e6:d8:19:ae:b5:8b:7c:40:0d:0f:c4:c8:
         d9:05:16:90:5c:d0:fb:08:23:38:34:eb:3f:94:6f:40:62:22:
         81:d4:7d:20:1e:c5:31:86:04:93:a5:5a:b3:00:2c:83:d6:d4:
         7a:c6:62:d0:2f:07:91:f3:f7:9a:d6:55:fa:fb:fb:d7:86:d9:
         b9:4d:2c:95:41:c1:10:0b:90:2e:7b:ec:ec:12:35:d4:4a:99:
         3f:18:34:47:e3:4c:e4:4c:0c:8a:4f:87:5e:77:ba:e7:f1:5d:
         3d:55:1a:2a:65:c9:bd:22:eb:d6:0d:c6:14:2c:44:14:bf:c7:
         fa:f4:b8:ee:87:e6:6b:fa:fe:31:8e:d7:80:61:69:fb:a7:a0:
         ac:2c:ee:66:01:ac:5b:94:4a:ab:ad:b5:2d:e5:58:42:c8:f9:
         d5:bd:11:fd:1f:b4:52:d0:15:50:c0:33:ac:9c:34:4a:d7:fd:
         b6:21:a2:0a:ad:e4:ab:9b:72:7c:a7:fe:a2:77:e2:19:30:b2:
         f0:73:48:f3:d0:6b:58:f4:72:0c:67:89:82:33:47:8a:8b:a9:
         fe:b5:59:14:a8:ef:f9:86:ad:bb:49:5d:43:b6:0b:77:c0:b7:
         96:1b:e6:4a:9f:1e:3f:ea:6c:18:98:a1:41:bb:c7:50:f6:72:
         39:44:cf:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:53:01 2026 by rpki-client