Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b16b5048-e966-3593-be5d-11f20f4bb17a.roa
File:                     b16b5048-e966-3593-be5d-11f20f4bb17a.roa (raw, json)
Hash identifier:          NVlzaAOQq7KIxa6YqAcqLUlElm9ZZKwKvXhG2FL5orU=
Subject key identifier:   A6:4E:AC:E4:F3:74:E7:9F:00:EA:30:5A:19:39:1D:10:31:98:C7:1F
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584ED8648D674B43E8F74E8EB3C0
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b16b5048-e966-3593-be5d-11f20f4bb17a.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     174
IP address blocks:        173.232.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:64:8d:67:4b:43:e8:f7:4e:8e:b3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=0a6d9c4d-4b89-4dce-8dd3-425dc6ca1c88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0a:2c:2f:40:15:c5:25:92:b6:cd:51:21:da:
                    90:4a:f4:80:7c:cf:05:86:20:45:b1:ec:a6:ff:a8:
                    85:fc:a0:c0:31:d5:bb:0f:c4:57:c7:5e:a7:42:01:
                    70:89:4f:9c:7a:86:fe:41:67:29:84:c3:ad:1e:b2:
                    00:ad:a1:0b:0a:c1:d5:f9:2a:68:f0:21:f6:2a:39:
                    39:dd:a2:f8:30:c2:42:6c:77:df:d2:fd:04:c3:07:
                    9c:d0:5b:ee:3d:a4:06:1c:ff:31:e4:0c:3b:89:d9:
                    1c:ff:bc:ed:df:2c:c6:1b:37:f3:50:69:d6:3a:66:
                    7b:75:d5:20:fb:28:96:2d:76:bf:f4:a0:b4:64:96:
                    c1:53:9c:80:7a:ec:a3:40:04:14:75:8e:63:15:a5:
                    fb:ae:47:1b:97:cc:47:df:ea:a3:e9:b6:bc:03:5c:
                    ac:8b:6b:a4:32:43:bc:3e:26:09:e4:d7:e9:d5:89:
                    02:6f:be:7f:1d:68:b6:3d:20:f3:0b:ec:c5:3a:5d:
                    45:40:7a:8f:18:04:10:fd:f7:1c:df:f3:45:67:3d:
                    41:80:2d:b5:55:92:6e:54:98:68:26:44:4a:e6:4c:
                    d4:a0:7c:6f:19:6c:1c:37:35:19:e2:f3:33:06:3e:
                    90:d9:79:a7:59:4d:ab:43:2d:9b:7c:f1:93:5a:c0:
                    e6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:4E:AC:E4:F3:74:E7:9F:00:EA:30:5A:19:39:1D:10:31:98:C7:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b16b5048-e966-3593-be5d-11f20f4bb17a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.232.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:a9:46:3a:05:00:bc:24:03:6b:2f:69:c5:de:b8:58:85:78:
         b7:38:37:fc:96:00:ce:e8:86:96:dc:89:e5:7a:7b:c7:64:76:
         1f:56:fb:2f:be:eb:30:5b:95:1e:3c:b4:a3:41:50:49:36:7b:
         a1:2b:21:32:53:e8:de:08:b1:77:2f:08:47:aa:5f:9c:fe:86:
         02:8f:fa:4a:9f:bb:83:46:ee:aa:07:a2:0a:7d:12:fd:d6:7e:
         d0:f0:5b:3c:72:66:85:0c:eb:29:be:93:15:01:02:19:bd:c5:
         49:33:0f:ef:f1:a5:f3:79:de:8a:c8:bd:b5:c5:73:2d:d1:02:
         d9:ba:92:ef:e5:94:eb:f4:67:ba:95:3a:a4:3d:86:e5:7d:26:
         b9:a7:db:c9:b5:bb:28:50:1d:40:75:60:d5:5c:d0:4d:5f:5e:
         21:e2:de:74:e1:5f:75:cd:46:9d:99:59:7c:63:a8:d2:e3:16:
         9c:e3:49:cc:24:46:27:06:0d:a8:8f:34:b5:d7:6e:4f:5c:a2:
         4f:bc:84:fc:d1:f1:a4:13:5a:a7:d1:0d:a0:cd:eb:55:c8:dc:
         6f:6b:cc:c6:41:04:1f:6a:f1:b2:ac:70:8c:97:9e:af:e4:26:
         cd:b3:91:72:47:f8:7a:b7:72:cf:21:18:91:5b:ed:54:42:a8:
         39:5d:51:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 05:53:35 2026 by rpki-client