Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/09f0ba6f-e56c-3743-a7a3-1c4bb59e494a.roa
File:                     09f0ba6f-e56c-3743-a7a3-1c4bb59e494a.roa (raw, json)
Hash identifier:          MF5WuZEU/W4+xuAhqIPoeTlf6d9Y/Awzfmhax3jXG9E=
Subject key identifier:   F1:37:A3:3C:2A:19:F2:85:A4:11:F7:4B:05:C3:23:16:9F:EC:8C:DF
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F6C5836CEF3B8F17AE1BD8B40
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/09f0ba6f-e56c-3743-a7a3-1c4bb59e494a.roa
Signing time:             Wed 07 Oct 2026 13:00:13 +0000
ROA not before:           Wed 07 Oct 2026 13:00:13 +0000
ROA not after:            Tue 05 Jan 2027 14:00:13 +0000
asID:                     5065
IP address blocks:        216.132.8.0/24 maxlen: 24
                          216.132.9.0/24 maxlen: 24
                          216.132.10.0/24 maxlen: 24
                          216.132.11.0/24 maxlen: 24
                          216.132.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:58:36:ce:f3:b8:f1:7a:e1:bd:8b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct  7 13:00:13 2026 GMT
            Not After : Jan  5 14:00:13 2027 GMT
        Subject: CN=66d0dd84-3e21-47c7-9c31-a94497b9b33f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a3:c7:f9:80:6d:95:63:a2:b6:bd:b6:ef:7a:
                    c8:b0:51:b8:f3:1f:18:41:47:dc:20:32:6f:b1:bc:
                    2b:1c:65:5c:48:17:39:b2:97:2b:d0:54:1e:b6:82:
                    36:a4:a2:9a:9d:7b:94:0b:b5:1f:eb:c4:f1:8b:c8:
                    3a:50:3f:c9:19:9c:66:0f:ce:4a:fb:e0:e6:7c:82:
                    a7:7f:a4:6c:87:fa:15:2e:91:7b:e1:93:d1:59:b4:
                    ac:6c:77:86:d0:43:4a:54:ff:c6:bd:aa:17:78:12:
                    8a:50:fc:3f:85:e3:4e:8f:0a:d8:f1:8a:ed:f0:8c:
                    21:0b:65:53:dc:82:8d:e3:76:31:b1:d1:a3:a7:88:
                    87:0e:13:0f:c1:e8:8c:46:af:55:66:27:14:ea:90:
                    c3:ae:ee:17:5c:da:8a:bd:b8:49:a9:4c:e9:ef:e9:
                    5c:a9:bf:d4:49:90:89:c1:52:5f:91:58:60:bb:31:
                    db:61:c8:d9:53:99:fb:2e:21:6e:ef:69:07:3e:e4:
                    92:72:dc:0d:22:0b:89:cb:00:8c:30:2f:d0:7c:d0:
                    ab:81:97:a4:20:67:ab:6d:f7:f4:dc:d7:83:3d:d4:
                    54:70:87:b7:76:d1:1d:d9:eb:20:cb:dc:dc:11:f3:
                    a3:3d:ef:29:39:8d:c0:16:89:5e:3b:77:8e:5e:8e:
                    62:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:37:A3:3C:2A:19:F2:85:A4:11:F7:4B:05:C3:23:16:9F:EC:8C:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/09f0ba6f-e56c-3743-a7a3-1c4bb59e494a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.132.8.0/22
                  216.132.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:6f:c7:b9:7b:cb:fd:f6:c0:37:28:e6:61:7b:f5:5d:53:81:
         6b:de:5c:c7:a7:55:9f:90:89:72:61:5f:d9:55:0c:20:56:40:
         d1:2d:b8:ec:c7:cc:b3:bf:44:8a:49:65:48:87:f2:f8:0f:7b:
         ce:a9:cf:8f:c9:c9:6f:99:7f:df:43:07:c1:88:4b:15:ab:32:
         93:d8:46:6e:9e:21:ea:c0:18:38:21:05:8f:72:1b:09:96:d1:
         d8:00:02:f4:13:30:e1:fe:6b:50:8d:dc:51:73:06:71:dd:a9:
         39:74:1f:49:4f:7c:dd:be:ec:df:84:56:33:3a:ca:c8:f8:fa:
         c7:3d:c1:cc:fe:a4:57:76:98:28:19:9f:3c:6f:39:00:4d:08:
         f3:75:60:a1:49:d2:03:19:0a:78:1e:36:31:a0:05:82:38:c6:
         45:94:79:d8:82:0c:14:c9:a7:13:3e:38:cc:a5:01:f8:e0:c9:
         a0:1d:68:04:98:1e:5d:97:14:91:3a:4b:98:c9:9f:2e:bc:71:
         4d:6a:60:99:bd:6a:ff:17:44:ce:ad:e1:b6:fb:19:60:db:ed:
         fc:42:ed:6b:b1:5c:6d:20:25:ba:13:fa:71:e3:fe:a7:b4:bf:
         c1:cf:c4:db:5f:55:dc:cf:48:31:5a:f4:e7:44:5b:49:61:b9:
         bb:d8:98:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:24:06 2026 by rpki-client