Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747/9e138f3a-6269-3985-ba91-1ef3e6a7e4ac.roa
File:                     9e138f3a-6269-3985-ba91-1ef3e6a7e4ac.roa (raw, json)
Hash identifier:          IhB0EDpqjHBUMEEUZX6ax8+SUxgLY9vNcjfJOXRBwwk=
Subject key identifier:   74:CF:FD:1F:58:C8:9F:D6:9A:35:46:95:43:C9:76:86:63:57:D1:46
Certificate issuer:       /CN=3905609c-39ed-4063-a3a8-68871c079747
Certificate serial:       010D0C9F4328584F2EED1166512C4054E3504600
Authority key identifier: BA:BC:F1:0A:4F:A5:AA:08:87:E1:FE:1D:E1:F4:24:F3:3E:86:35:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747/9e138f3a-6269-3985-ba91-1ef3e6a7e4ac.roa
Signing time:             Tue 15 Sep 2026 13:00:12 +0000
ROA not before:           Tue 15 Sep 2026 13:00:12 +0000
ROA not after:            Mon 14 Dec 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        216.245.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747/3905609c-39ed-4063-a3a8-68871c079747.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747/3905609c-39ed-4063-a3a8-68871c079747.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2e:ed:11:66:51:2c:40:54:e3:50:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3905609c-39ed-4063-a3a8-68871c079747
        Validity
            Not Before: Sep 15 13:00:12 2026 GMT
            Not After : Dec 14 14:00:12 2026 GMT
        Subject: CN=fe6b3ba1-75ec-4f8a-8b22-5f99372ee0a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8e:fc:d0:50:a4:4d:1d:c9:38:b1:ac:61:d2:
                    65:85:4c:11:0f:8e:fb:2b:19:d5:8c:a1:75:59:a1:
                    99:fd:87:29:61:59:1e:c4:82:2a:d5:1b:2e:00:18:
                    6a:e5:23:22:31:45:d7:25:47:36:56:83:d6:c7:94:
                    24:57:91:8b:13:b0:f1:3d:69:98:a5:74:5c:dd:68:
                    d4:11:8f:c3:be:c9:a1:13:f2:7f:4c:56:ec:2c:d9:
                    93:b1:56:04:b0:35:4a:2c:1f:4a:01:40:69:4f:31:
                    81:fd:75:56:ae:53:09:48:f9:bf:b1:35:bf:23:46:
                    d9:c5:c4:b7:3a:e6:6f:8f:da:6c:2f:8d:59:85:15:
                    d4:0f:9e:1f:98:e3:6a:a6:15:69:03:bb:c2:50:36:
                    f8:fe:69:aa:9b:76:a5:f5:46:ba:fb:85:4a:9b:87:
                    45:98:be:e1:6c:fb:b1:31:6b:3d:32:c7:1e:bb:0e:
                    8e:ed:d1:63:fd:6e:f7:e6:28:02:c5:cc:2b:c2:85:
                    66:8f:b5:b7:79:29:81:80:74:4e:47:1f:68:dd:a1:
                    a3:2f:d6:d5:e8:cb:09:98:fa:da:28:1b:17:f9:8a:
                    c7:8a:ff:73:72:aa:e8:bd:2e:f7:93:fb:35:f8:e4:
                    8f:97:0f:4c:0e:f1:03:06:f2:4b:2b:6f:c6:27:8d:
                    65:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:CF:FD:1F:58:C8:9F:D6:9A:35:46:95:43:C9:76:86:63:57:D1:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747/9e138f3a-6269-3985-ba91-1ef3e6a7e4ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747/3905609c-39ed-4063-a3a8-68871c079747.crl

            X509v3 Authority Key Identifier:
                keyid:BA:BC:F1:0A:4F:A5:AA:08:87:E1:FE:1D:E1:F4:24:F3:3E:86:35:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.245.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:f6:cd:24:30:1e:ae:24:c2:be:af:09:db:56:0a:7c:4e:96:
         c2:b3:c7:8f:d4:92:a4:7b:09:8b:5f:5a:e2:2f:20:98:d8:46:
         29:4e:5d:2d:e6:d0:97:d4:97:50:08:0c:f0:ce:b7:b5:4f:9d:
         dd:c8:20:a2:a7:cf:f9:34:d7:0f:df:11:e1:42:c0:a4:ef:e9:
         28:9c:88:27:4f:63:ab:28:b0:7e:1a:5d:17:e3:48:5e:24:a0:
         af:2b:d4:71:e3:07:81:ab:dc:6f:ce:ab:d5:5e:f1:1c:6b:18:
         2e:c3:0d:0a:a1:a7:48:31:6b:51:58:7f:d9:40:96:f1:77:24:
         54:36:f0:2d:4b:ad:08:52:04:cf:74:97:20:37:15:12:96:f7:
         0c:2c:82:df:fc:94:c4:9a:87:c3:15:6f:f7:84:c5:cb:68:14:
         54:e8:4c:0f:b0:b5:84:98:dc:3e:8c:94:e3:0a:11:56:08:4f:
         90:98:ed:05:b3:68:27:81:4a:1e:0d:53:b5:80:48:3b:0b:03:
         c6:ff:6a:0f:cd:03:90:99:8f:44:9c:01:7e:d4:85:bd:dd:84:
         af:13:ef:8c:d0:88:5f:26:be:52:45:a5:4c:b0:b0:81:b2:3b:
         48:00:ce:55:34:5d:59:bd:11:6d:d7:a6:2c:b6:52:d5:cd:ea:
         99:fb:ed:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 14:51:13 2026 by rpki-client