Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/f0a7c79b-b938-3f9d-9e12-7f47c3ee5a46.roa
File:                     f0a7c79b-b938-3f9d-9e12-7f47c3ee5a46.roa (raw, json)
Hash identifier:          CJZj/nN5lZ1OsCZonZ/F67DKKZui49NGJ6qujS05pHk=
Subject key identifier:   8C:C3:68:C3:DF:6A:38:0A:41:2D:12:A5:F9:F1:F7:AD:DF:FD:C5:41
Certificate issuer:       /CN=a3b6948d-3ee1-4153-9c40-1cd7465bea2b
Certificate serial:       010D0C9F4328584F49753926CCE02EC447FF5500
Authority key identifier: 90:8D:6E:3D:A8:3C:E5:E7:6B:D5:3D:68:92:0F:67:5B:A6:D6:3E:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/f0a7c79b-b938-3f9d-9e12-7f47c3ee5a46.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        216.205.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:39:26:cc:e0:2e:c4:47:ff:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3b6948d-3ee1-4153-9c40-1cd7465bea2b
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a1a84453-419b-438e-8903-382a2a4e7c53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f7:a7:1b:1c:62:31:8a:b7:1a:d9:98:62:c0:
                    48:67:ce:5d:62:c4:fa:ed:8d:78:55:3c:df:0e:8e:
                    95:b2:11:97:49:db:df:27:78:4a:02:06:b4:d5:96:
                    b7:9f:2d:2c:3a:08:ec:f2:b1:c0:71:a7:8e:1a:e6:
                    5e:5a:e5:fd:2f:4a:c0:58:5e:fc:f9:8d:0e:05:fc:
                    67:25:67:08:b1:51:65:95:77:98:1d:0f:fb:09:75:
                    3b:eb:50:0d:1a:9e:cc:7f:8a:aa:d1:f4:8d:db:9d:
                    00:e4:61:b2:bc:56:55:33:62:ca:e9:3c:a0:69:a9:
                    66:5f:83:24:fe:9a:f2:35:a1:a3:b5:96:26:79:c6:
                    97:8a:0f:31:69:7f:53:70:49:d1:20:03:1f:a3:85:
                    f8:01:f1:50:ee:1c:ce:78:43:95:b4:10:bb:03:ba:
                    cf:d5:e8:30:82:40:0d:fa:61:92:b3:6e:8c:3b:29:
                    df:16:b4:5c:e4:ff:e0:a7:5d:6b:7e:93:04:ee:98:
                    6a:28:88:0e:b3:63:02:e9:88:fb:45:a7:9d:9f:37:
                    94:c8:76:8b:47:17:79:a8:96:02:41:81:e9:62:df:
                    8a:3f:3f:98:a8:6a:0f:33:be:9f:4b:3c:4d:f4:93:
                    68:f1:17:04:56:f7:92:e5:d1:b6:ab:55:d2:ee:05:
                    55:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C3:68:C3:DF:6A:38:0A:41:2D:12:A5:F9:F1:F7:AD:DF:FD:C5:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/f0a7c79b-b938-3f9d-9e12-7f47c3ee5a46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.crl

            X509v3 Authority Key Identifier:
                keyid:90:8D:6E:3D:A8:3C:E5:E7:6B:D5:3D:68:92:0F:67:5B:A6:D6:3E:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.205.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:ff:b8:c6:6a:3b:ce:ac:47:de:80:11:bc:4b:a4:63:06:73:
         19:c5:e1:b9:fa:df:cd:ed:b0:c0:43:46:66:6f:e9:d2:9a:cc:
         df:7e:b5:16:fa:17:21:73:6c:d3:af:fe:cd:c8:fa:e7:be:db:
         d0:52:6e:7d:95:02:00:c3:f2:29:3c:79:42:b7:1b:ee:f2:4f:
         b8:1b:54:6d:30:3e:0d:df:b6:7e:5a:3b:c2:2c:3f:53:88:b2:
         56:dc:be:0a:d5:26:ea:cb:9c:ef:7c:cc:de:58:9e:11:a5:be:
         56:77:46:ec:ad:d6:5c:6e:8d:99:03:6d:77:dc:0a:cf:ef:e3:
         79:ff:b9:8f:c4:97:12:66:8c:24:3f:ba:87:fa:08:c5:ac:83:
         72:9a:ff:ac:ad:4a:b3:40:55:2c:de:85:d2:09:90:16:a7:45:
         31:6f:cd:7f:6f:95:4e:35:3b:ef:27:29:60:5d:0b:59:36:44:
         1d:c9:39:2b:02:0f:66:93:c1:64:70:e0:88:df:74:1b:9a:c0:
         3c:4e:8f:38:01:dc:cb:9c:d3:d2:8d:98:03:e9:c9:06:c1:33:
         5c:3f:f7:e0:07:a5:a1:d8:cc:b2:f0:89:58:95:2e:b8:00:3d:
         96:b7:52:8e:f3:b2:86:7a:f6:dd:6a:0d:ad:94:be:e0:b6:23:
         1b:8f:d4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 22:45:17 2026 by rpki-client