Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/9228f6c4-4ffe-351a-8221-7c6fa51c7969.roa
File:                     9228f6c4-4ffe-351a-8221-7c6fa51c7969.roa (raw, json)
Hash identifier:          WGbLffG3abF7Lz6oq8Cru/Brx/4Zhs82H3xsFK96TjA=
Subject key identifier:   6C:AC:57:AA:2D:C6:5C:FF:FD:1D:20:08:62:C4:62:07:1E:A7:B1:9F
Certificate issuer:       /CN=fd691680-2c46-4e86-8545-3e0e0c0e305a
Certificate serial:       010D0C9F4328584F861CD013E441A1CFD69CD780
Authority key identifier: A4:E2:CB:32:4A:F2:A0:87:FE:BF:8F:42:40:F8:AD:90:5E:2C:AC:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/9228f6c4-4ffe-351a-8221-7c6fa51c7969.roa
Signing time:             Fri 16 Oct 2026 18:31:49 +0000
ROA not before:           Fri 16 Oct 2026 18:31:49 +0000
ROA not after:            Thu 03 Dec 2026 17:53:27 +0000
asID:                     23028
IP address blocks:        216.31.0.0/24 maxlen: 24
                          216.31.1.0/24 maxlen: 24
                          216.31.2.0/24 maxlen: 24
                          216.31.3.0/24 maxlen: 24
                          216.31.4.0/24 maxlen: 24
                          216.31.6.0/24 maxlen: 24
                          216.31.7.0/24 maxlen: 24
                          216.31.8.0/24 maxlen: 24
                          216.31.9.0/24 maxlen: 24
                          216.31.10.0/24 maxlen: 24
                          216.31.11.0/24 maxlen: 24
                          216.31.12.0/24 maxlen: 24
                          216.31.13.0/24 maxlen: 24
                          216.31.14.0/24 maxlen: 24
                          216.31.15.0/24 maxlen: 24
                          216.31.17.0/24 maxlen: 24
                          216.31.18.0/24 maxlen: 24
                          216.31.19.0/24 maxlen: 24
                          216.31.20.0/24 maxlen: 24
                          216.31.37.0/24 maxlen: 24
                          216.31.38.0/24 maxlen: 24
                          216.31.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/fd691680-2c46-4e86-8545-3e0e0c0e305a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/fd691680-2c46-4e86-8545-3e0e0c0e305a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:86:1c:d0:13:e4:41:a1:cf:d6:9c:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd691680-2c46-4e86-8545-3e0e0c0e305a
        Validity
            Not Before: Oct 16 18:31:49 2026 GMT
            Not After : Dec  3 17:53:27 2026 GMT
        Subject: CN=6afea739-c51e-49f9-9d2e-c1ec3fc8f9b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0a:3c:94:92:53:a3:4d:3e:ea:58:7e:1c:9b:
                    3f:48:91:10:82:c3:03:fe:2c:b0:6f:e0:c0:07:ec:
                    43:ee:48:d5:32:f5:84:6c:48:be:05:e4:cc:ee:23:
                    5e:21:40:29:ee:30:ae:60:e4:75:6e:d9:d2:bc:f5:
                    28:22:03:f3:ac:0c:56:12:fb:2b:51:c8:7d:0f:e8:
                    5c:5c:a6:45:70:c4:88:0b:33:11:e1:96:95:f0:b9:
                    b1:f9:90:b7:48:be:2f:79:d5:73:36:fc:e3:99:e6:
                    a2:f7:74:e3:0d:0a:42:7a:28:69:d4:36:82:14:30:
                    44:c2:5b:f0:c9:b7:0a:1e:0b:80:52:83:64:e7:86:
                    b8:c6:a0:9d:c0:14:a6:dd:4a:7b:de:0a:c4:97:83:
                    3c:f2:45:de:cd:02:69:6b:6c:7b:71:fb:f3:f7:78:
                    3b:65:2e:64:56:4a:d3:11:63:53:e7:9a:8c:49:ac:
                    58:0c:d3:6e:aa:d2:a8:d6:ec:c9:be:40:09:5c:a4:
                    61:6b:a3:22:38:8f:d2:d5:6e:bb:87:aa:6f:98:c9:
                    e4:03:9b:bd:ba:8e:0c:82:65:bc:46:60:dc:e9:df:
                    64:7f:59:ec:31:05:45:a0:2e:ff:a4:49:01:71:8c:
                    99:09:37:5c:95:be:dc:37:29:0f:37:c0:36:1f:96:
                    ff:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:AC:57:AA:2D:C6:5C:FF:FD:1D:20:08:62:C4:62:07:1E:A7:B1:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/9228f6c4-4ffe-351a-8221-7c6fa51c7969.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/fd691680-2c46-4e86-8545-3e0e0c0e305a.crl

            X509v3 Authority Key Identifier:
                keyid:A4:E2:CB:32:4A:F2:A0:87:FE:BF:8F:42:40:F8:AD:90:5E:2C:AC:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.31.0.0-216.31.4.255
                  216.31.6.0-216.31.15.255
                  216.31.17.0-216.31.20.255
                  216.31.37.0-216.31.39.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:aa:ac:8c:8e:fa:e2:76:5e:16:88:62:ec:32:c2:b7:01:59:
         38:2e:0e:f5:49:c6:60:65:57:53:c5:3d:23:f0:bc:f1:54:32:
         6f:78:28:76:a3:be:da:62:84:d0:8c:af:6f:6e:9e:1c:40:68:
         c3:71:00:68:4b:38:6d:70:81:0c:4a:4f:40:3d:e8:59:e2:6b:
         76:a3:11:f3:2b:ab:7d:07:59:f4:a2:19:94:e2:8c:24:a2:9c:
         3e:15:6f:48:9d:c6:58:c4:b6:60:3b:b1:e6:80:74:6e:c8:d8:
         8c:30:e7:86:2b:06:db:40:4b:ec:f1:cd:b5:8b:24:af:c4:7a:
         61:b6:27:d7:a7:d4:9e:eb:a5:77:d0:45:82:84:c2:84:00:b8:
         03:fd:1f:e7:7a:2d:f9:b1:a5:88:ef:51:77:56:2b:46:0d:d3:
         c2:47:5f:98:bf:a4:3e:3c:1a:7c:17:18:d6:2e:95:c3:24:a9:
         31:f5:1a:d7:10:f6:57:37:5f:d8:35:f3:04:12:c7:dd:7a:c1:
         46:38:7a:f0:57:f7:42:85:3d:d6:59:b2:0c:66:b6:05:60:6c:
         e1:d3:6b:60:09:2c:ab:b2:84:e0:ee:b7:41:3f:d2:d1:4c:eb:
         7a:09:d0:c3:08:78:14:97:54:37:93:78:80:15:f2:ba:b0:02:
         ff:3c:9a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:46:19 2026 by rpki-client