Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/94f18aa2-c25b-3fa5-bbb8-f44d868bfa3e.roa
File:                     94f18aa2-c25b-3fa5-bbb8-f44d868bfa3e.roa (raw, json)
Hash identifier:          1m7RviShfahCUW9X12Kcb1EAhuRMQfCpN8qh7+a3BIE=
Subject key identifier:   02:80:12:9F:4E:AF:9C:63:66:C8:8D:ED:8D:74:59:5B:DD:0A:93:6F
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EEEB77DD7759EDC6C7F52B200
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/94f18aa2-c25b-3fa5-bbb8-f44d868bfa3e.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     265086
IP address blocks:        216.28.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:7d:d7:75:9e:dc:6c:7f:52:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=7dd63da1-5cf0-4c77-9661-9f869e83f92f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2e:38:66:67:f7:b6:e3:b7:98:8f:de:87:7f:
                    0d:17:05:6b:d5:ec:a7:d6:1b:c8:c9:fd:6c:41:92:
                    21:f6:aa:5f:e4:9e:12:22:96:ae:7c:5a:4e:38:6d:
                    9d:d8:a1:97:5b:a0:2f:67:9b:b1:0e:cc:6e:01:12:
                    d7:7e:4b:11:66:c8:27:df:cc:61:7f:ef:2b:d8:23:
                    71:d0:b5:ed:7c:f7:fa:66:5e:2f:1b:d2:8c:34:6f:
                    60:86:73:72:10:cf:0d:cd:d8:d3:37:8a:37:ec:4e:
                    b4:e6:4c:e0:06:c7:4a:72:dc:f4:38:c9:bd:16:35:
                    e3:b2:92:40:d3:f8:10:7f:58:76:f8:d1:35:d8:76:
                    69:f3:19:a4:5d:6e:25:fe:f0:bf:2d:c2:57:8b:0a:
                    cc:e2:ec:1d:6a:d5:01:6d:9a:9d:db:c0:a4:eb:76:
                    91:b0:c9:47:be:44:79:33:e2:4e:c7:ad:01:ae:74:
                    28:69:d8:25:8b:9e:2a:eb:5d:85:3c:a9:c2:e5:35:
                    cb:af:66:a0:84:6b:30:18:0a:b5:3c:30:4e:9b:c3:
                    9c:18:91:b4:a0:10:50:d7:f0:b9:15:92:85:9e:42:
                    94:cd:f2:4b:88:a2:46:6a:eb:6a:7f:91:01:85:7b:
                    38:2a:f9:d3:8d:f9:6b:86:99:f9:d9:71:e9:60:04:
                    0c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:80:12:9F:4E:AF:9C:63:66:C8:8D:ED:8D:74:59:5B:DD:0A:93:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/94f18aa2-c25b-3fa5-bbb8-f44d868bfa3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.28.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:64:43:2a:55:1c:65:4f:d3:ca:78:1e:69:be:21:4e:36:70:
         8c:50:b7:c8:4f:eb:98:39:bd:8d:4a:98:e5:db:dc:87:3f:e1:
         ad:64:a3:85:91:8c:12:10:ec:61:7a:92:2a:2c:74:5f:fe:eb:
         44:3f:85:be:64:19:d7:73:ba:2a:a4:94:20:82:d0:a1:4b:27:
         24:a0:00:1f:75:97:98:91:b6:8a:52:b1:ac:1d:63:3d:54:80:
         d4:8a:3d:b3:89:8e:20:62:10:d4:0d:e0:f6:c7:1c:1b:e8:f5:
         07:44:34:76:6a:29:b9:c0:b1:02:9c:d5:9b:24:13:e9:a5:6b:
         64:2a:95:87:0a:8c:de:ed:4c:03:1b:8e:0d:30:90:7f:14:c0:
         21:22:35:3d:e6:32:bb:07:05:fd:e7:9a:eb:7b:b0:f1:88:60:
         b4:f0:b5:f4:98:42:9e:c3:09:d2:89:d9:47:0c:90:cc:c2:1a:
         94:04:7e:09:fe:4e:3b:d7:40:65:49:8e:b3:6d:22:7a:17:cd:
         75:f1:bf:5f:b4:b8:a5:8e:0b:a7:fd:a0:fb:c9:20:0f:c2:7a:
         76:d8:1d:b6:93:96:35:de:95:8c:d6:7a:2d:76:cb:06:5d:7f:
         73:58:d3:22:1a:0b:1b:c2:50:3e:66:4f:9a:25:e6:3a:b6:04:
         f9:74:a3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:55:19 2026 by rpki-client