Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/a630cce2-93d9-3356-bc79-894d2e85733e.roa
File:                     a630cce2-93d9-3356-bc79-894d2e85733e.roa (raw, json)
Hash identifier:          vC18ZRkdD4NLsjK/RzUa77aDKv/8VRj63qGLGVe+9ys=
Subject key identifier:   2B:43:60:DB:58:21:A5:C1:22:DE:E7:D2:C7:3E:D3:2F:B1:71:E2:30
Certificate issuer:       /CN=3d9df9b4-6f73-43c8-aacc-4d068a82c5d8
Certificate serial:       010D0C9F4328584F96387E093F9C75D5D3F73160
Authority key identifier: 0D:52:33:12:BE:B4:61:AB:88:D5:F1:48:CF:BC:01:2C:2D:B6:5F:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/a630cce2-93d9-3356-bc79-894d2e85733e.roa
Signing time:             Thu 22 Oct 2026 13:00:13 +0000
ROA not before:           Thu 22 Oct 2026 13:00:13 +0000
ROA not after:            Wed 20 Jan 2027 14:00:13 +0000
asID:                     401224
IP address blocks:        216.109.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:96:38:7e:09:3f:9c:75:d5:d3:f7:31:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d9df9b4-6f73-43c8-aacc-4d068a82c5d8
        Validity
            Not Before: Oct 22 13:00:13 2026 GMT
            Not After : Jan 20 14:00:13 2027 GMT
        Subject: CN=0e0be64c-5bfb-4ff7-8902-6781c3276ee9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:15:b9:2f:1b:27:92:d4:00:37:73:f1:ae:98:
                    50:5e:77:0f:af:c3:ec:bb:f6:3b:df:1a:ae:7c:12:
                    55:9f:05:b8:80:1f:4c:37:58:83:39:b8:62:e6:0f:
                    da:61:48:29:30:c1:ce:96:d6:8b:02:71:ec:a3:80:
                    71:25:ab:46:9c:8a:dc:fe:70:78:f7:be:ce:3c:70:
                    fb:12:ef:f0:e6:71:11:5b:da:fc:ed:71:71:9f:1e:
                    94:ae:6f:ad:d2:a8:74:99:72:ed:74:49:18:b4:ca:
                    18:c9:8a:b6:68:d2:26:6c:95:e5:1f:bb:26:66:00:
                    60:7e:68:82:11:b9:90:9d:1b:2d:b5:27:25:bc:8c:
                    9b:67:50:17:28:ef:a4:81:9e:bc:ce:e1:bb:75:f3:
                    94:ef:ba:26:cc:9d:2c:e0:2d:8b:b4:b4:ad:ba:18:
                    d1:16:e7:39:35:a8:85:80:c4:d9:a6:51:17:3f:f1:
                    e6:c5:fb:04:26:68:07:6d:e4:9b:58:de:4b:9f:a4:
                    88:f8:50:bc:f9:84:5b:b7:13:64:46:4d:b3:b8:25:
                    77:4b:50:81:04:82:5a:b0:07:c2:c4:72:58:1b:8d:
                    a1:af:4b:e4:1d:83:90:46:24:65:63:f2:d3:d5:c9:
                    fb:5a:aa:07:7c:2f:39:07:10:a2:3b:b4:58:a5:3f:
                    6c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:43:60:DB:58:21:A5:C1:22:DE:E7:D2:C7:3E:D3:2F:B1:71:E2:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/a630cce2-93d9-3356-bc79-894d2e85733e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.crl

            X509v3 Authority Key Identifier:
                keyid:0D:52:33:12:BE:B4:61:AB:88:D5:F1:48:CF:BC:01:2C:2D:B6:5F:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.109.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:39:03:22:71:0d:dc:a5:9a:d8:45:be:03:2b:c7:b2:22:7a:
         6e:dc:ee:06:96:c7:46:c9:ba:8f:62:ed:c8:b1:99:f3:ac:38:
         56:19:9f:bc:0c:4f:be:a2:cb:f6:1b:b9:80:a9:86:10:cd:90:
         90:ee:89:af:ef:0c:b2:0f:61:8a:78:ed:3b:2e:44:ac:b3:c1:
         87:ae:22:2f:b2:77:07:5a:36:6c:69:5f:8a:05:4c:e3:52:4f:
         6c:02:4b:31:8a:47:f1:23:29:f6:1f:30:7a:b6:e7:70:e6:80:
         ee:b9:df:90:05:ae:78:9c:2c:38:96:0e:03:83:3e:b4:96:c0:
         48:bd:86:c7:d2:79:21:41:f6:b2:70:34:63:00:32:16:58:7d:
         37:71:a5:b1:f9:a8:21:1a:e3:02:22:30:05:14:da:b5:7a:db:
         96:ef:3f:cd:d6:f7:67:26:c0:17:b7:9c:71:91:fa:14:81:c2:
         28:b7:1d:d3:51:0b:ff:9f:3c:f1:73:22:94:59:58:ff:51:4f:
         f3:f5:c2:2c:e1:1c:d9:f0:3a:31:b2:1f:42:f7:06:e8:50:14:
         44:29:b1:ab:e4:ae:63:d3:e5:8f:f0:2b:d9:cc:43:a1:43:16:
         e5:53:81:c7:bf:0a:bf:f9:65:ee:9b:83:f3:49:20:2a:3f:6e:
         15:d0:8e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 19:54:28 2026 by rpki-client