Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/79e9ef63-4b2d-3a3f-919a-a9630a168b3e.roa
File:                     79e9ef63-4b2d-3a3f-919a-a9630a168b3e.roa (raw, json)
Hash identifier:          kchhkdMr/auFs52HebsP5HF59Lsf9APyrr6BChgq6V0=
Subject key identifier:   BD:C1:33:E8:9E:A1:ED:A5:FF:DA:6E:24:B5:08:DF:13:BF:51:B6:FA
Certificate issuer:       /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
Certificate serial:       010D0C9F4328584EA794703232EA2AADA4E007C0
Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/79e9ef63-4b2d-3a3f-919a-a9630a168b3e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14618
IP address blocks:        216.185.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:70:32:32:ea:2a:ad:a4:e0:07:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f88e0039-de94-40e3-86f1-262dded6cfea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e3:4d:7c:29:aa:d9:f1:24:a5:6b:77:e9:12:
                    21:2d:41:18:79:69:60:cd:76:b6:85:c3:a1:f8:a1:
                    d4:eb:1c:42:9a:93:4f:1b:3e:46:23:65:fa:a2:86:
                    92:a1:4b:84:8a:52:3b:41:f1:70:16:79:fe:76:cf:
                    61:9f:5b:47:a3:91:38:7b:cf:51:c2:e3:94:25:07:
                    68:1e:4b:80:b5:14:f0:32:74:00:3d:e4:5f:13:62:
                    ae:6f:24:b2:00:fc:97:9b:5e:dc:ae:2a:77:08:b3:
                    8a:c3:bb:45:54:60:c0:21:32:cd:92:89:99:4a:cf:
                    5f:f6:24:20:db:13:d1:00:b4:ca:20:56:7e:99:f4:
                    e0:31:e4:25:8f:af:00:f6:b2:34:85:d6:f8:2e:98:
                    fc:cd:48:4b:ab:e9:2e:55:19:8d:26:d8:ee:12:4d:
                    4a:99:08:1a:57:f7:7b:d8:4c:b8:43:d3:7a:7b:f8:
                    46:02:df:69:2d:7e:a9:aa:f7:ae:9e:3b:bb:3a:dc:
                    32:a1:30:75:2a:f3:f0:df:a7:3e:02:ff:17:a9:9e:
                    2a:8d:71:f1:aa:e3:13:1f:c6:61:a6:ca:e8:02:de:
                    5e:09:0c:b0:a4:92:60:5b:7a:85:b0:28:27:ba:4f:
                    ac:0b:61:10:27:78:c3:b9:81:5e:80:99:cc:44:0b:
                    97:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C1:33:E8:9E:A1:ED:A5:FF:DA:6E:24:B5:08:DF:13:BF:51:B6:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/79e9ef63-4b2d-3a3f-919a-a9630a168b3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl

            X509v3 Authority Key Identifier:
                keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:e1:0b:9d:27:d7:ce:4b:e0:bd:7a:34:5f:6d:be:33:9c:e2:
         f0:ae:60:af:a4:84:d0:5d:3a:d0:58:1e:a2:15:cb:02:61:d4:
         43:b5:a0:e9:5b:97:c0:7a:3b:cc:4f:37:ab:c3:88:dc:41:96:
         04:2e:2d:22:e8:04:3d:12:97:25:31:69:5a:a3:a4:61:f7:53:
         43:0d:14:ed:21:c3:f3:6a:5e:84:e6:01:dc:82:47:cc:b6:44:
         e0:5f:1c:d9:f9:d9:ec:cf:f8:f6:fe:97:5c:4b:39:9f:af:0f:
         d7:ca:3b:7b:7a:d8:8f:62:45:c1:1e:f5:24:2a:3f:29:80:7d:
         a9:40:60:5d:7d:9f:f6:35:43:56:b0:dc:d5:42:fb:00:bd:5e:
         c8:5c:89:43:7c:c6:54:80:f9:b6:cd:3b:6e:6a:c0:bd:61:4a:
         2b:25:57:31:4b:7b:f6:b1:03:93:a1:ec:b0:c9:e9:79:29:e4:
         07:1a:f0:98:a9:68:d5:39:91:c9:01:3f:5a:d8:49:dc:ca:a2:
         d4:9e:be:3f:73:91:81:c7:84:84:31:b2:09:99:f2:6d:9d:ce:
         c0:97:0b:c4:b3:d3:b1:04:b1:3a:b0:04:6f:bb:c3:2c:ba:5c:
         0b:4a:75:ac:bc:fa:15:e3:b1:26:98:cb:a0:af:e3:bc:6d:23:
         49:9e:05:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:56:50 2026 by rpki-client