Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/33106994-11f2-4d3f-93ae-3ad23ee83ca1/226fa5df-7432-38ca-9319-bb84b7924a12.roa
File:                     226fa5df-7432-38ca-9319-bb84b7924a12.roa (raw, json)
Hash identifier:          iTgEaLPd+de6YC3rmGIMM7DlpaLSlbUDJ3fJqQ13OgM=
Subject key identifier:   4A:62:62:D0:F5:4E:E7:86:F9:9E:24:96:D3:8B:42:3D:E5:54:2D:52
Certificate issuer:       /CN=33106994-11f2-4d3f-93ae-3ad23ee83ca1
Certificate serial:       010D0C9F4328584F484B96B623037155DEDB9000
Authority key identifier: F2:8F:AF:70:EB:A2:CD:68:3C:5F:89:FB:F1:87:EA:E2:BD:25:F2:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/33106994-11f2-4d3f-93ae-3ad23ee83ca1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/33106994-11f2-4d3f-93ae-3ad23ee83ca1/226fa5df-7432-38ca-9319-bb84b7924a12.roa
Signing time:             Thu 24 Sep 2026 15:05:57 +0000
ROA not before:           Thu 24 Sep 2026 15:05:57 +0000
ROA not after:            Wed 23 Dec 2026 16:05:57 +0000
asID:                     14618
IP address blocks:        216.52.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/33106994-11f2-4d3f-93ae-3ad23ee83ca1/33106994-11f2-4d3f-93ae-3ad23ee83ca1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/33106994-11f2-4d3f-93ae-3ad23ee83ca1/33106994-11f2-4d3f-93ae-3ad23ee83ca1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/33106994-11f2-4d3f-93ae-3ad23ee83ca1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:4b:96:b6:23:03:71:55:de:db:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33106994-11f2-4d3f-93ae-3ad23ee83ca1
        Validity
            Not Before: Sep 24 15:05:57 2026 GMT
            Not After : Dec 23 16:05:57 2026 GMT
        Subject: CN=cb40350b-e78e-4915-9512-98a85c0e395d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:82:83:43:ce:dd:24:9d:ea:85:7e:e9:25:ca:
                    e0:45:a7:78:e9:ab:bd:5a:ac:db:84:41:69:aa:6a:
                    0a:50:af:81:a1:34:b0:5f:09:8a:9c:c4:f4:45:eb:
                    b8:24:03:33:6e:c1:06:da:b1:97:b7:8a:96:d5:82:
                    62:18:b7:6c:93:e4:cf:53:a7:e1:44:38:13:d5:77:
                    fc:87:36:f4:37:76:d9:d0:9b:15:7b:84:85:b4:95:
                    f0:24:ff:bf:7a:cc:8b:f8:43:3b:1f:4b:4b:46:29:
                    e0:5d:46:f2:3b:f0:c9:c4:be:0a:10:a3:35:eb:4a:
                    88:ca:ac:43:5e:2d:eb:cb:4d:0f:0c:15:42:dc:c1:
                    1d:4c:a8:1a:ab:cd:99:73:60:f2:fe:b5:41:ba:fd:
                    2b:e3:31:8d:07:2a:67:b5:bb:4f:50:72:13:18:d5:
                    11:56:29:51:75:a4:03:2f:ae:b2:d5:3b:4e:ab:0b:
                    2a:34:1c:d0:42:33:bf:e1:2f:76:a6:d6:52:5a:4f:
                    e5:7c:8a:8b:36:87:0d:d3:74:0c:46:07:8f:f2:56:
                    6a:44:97:b8:88:0d:f4:07:7a:05:e9:27:b8:72:87:
                    3b:b6:0d:2f:0d:44:04:a1:43:e8:19:26:37:aa:4d:
                    e7:72:f4:fc:e2:7e:3d:fd:62:e5:55:5c:dd:b4:1e:
                    1c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:62:62:D0:F5:4E:E7:86:F9:9E:24:96:D3:8B:42:3D:E5:54:2D:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/33106994-11f2-4d3f-93ae-3ad23ee83ca1/226fa5df-7432-38ca-9319-bb84b7924a12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/33106994-11f2-4d3f-93ae-3ad23ee83ca1/33106994-11f2-4d3f-93ae-3ad23ee83ca1.crl

            X509v3 Authority Key Identifier:
                keyid:F2:8F:AF:70:EB:A2:CD:68:3C:5F:89:FB:F1:87:EA:E2:BD:25:F2:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/33106994-11f2-4d3f-93ae-3ad23ee83ca1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.52.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:0e:9b:57:72:7f:9b:ba:6d:40:d8:3a:82:ff:d3:d8:d9:a6:
         a6:27:f9:99:9b:2d:a0:28:a1:60:3d:6c:8f:ba:36:78:47:01:
         8d:c2:07:9d:cf:03:17:a7:4b:53:c7:69:12:22:d9:82:e5:4f:
         5d:16:f7:a5:5b:ee:76:c0:51:9b:6f:ed:76:65:55:f7:5e:62:
         0b:5b:a7:76:40:7d:74:b1:10:5f:57:be:ed:8a:32:f9:b5:7d:
         a7:7b:de:b5:61:cb:a4:05:34:ea:cc:9b:f7:e1:56:be:d8:24:
         02:fe:6f:e1:b6:3f:04:8b:62:80:2c:a0:a1:8b:cd:65:9b:71:
         e1:b4:2e:5e:de:d5:75:f8:24:2a:af:bc:fb:cc:64:7e:5d:48:
         d5:e0:5b:84:79:af:de:6a:b0:36:1a:f8:30:86:a9:00:9f:e1:
         79:f7:90:7c:9e:31:cc:fa:98:f9:7f:59:7c:69:2c:e8:72:54:
         d1:7a:03:de:17:35:94:f4:bb:4e:85:48:9f:49:5b:fd:ca:51:
         77:e1:8a:1c:ea:99:62:aa:18:83:16:5b:90:ec:34:f7:8b:d5:
         b8:67:5f:55:a8:df:be:d9:dc:96:9c:41:25:aa:f3:b8:2b:94:
         70:c2:47:98:c3:4a:27:06:c0:81:fc:39:e9:65:80:eb:75:bb:
         65:2a:56:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 08:49:58 2026 by rpki-client