Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9d7ccc94-6047-3025-9d7a-5e5c929f4ce0.roa
File:                     9d7ccc94-6047-3025-9d7a-5e5c929f4ce0.roa (raw, json)
Hash identifier:          q39XS1W1vNYFYhyC5cD5+a7ZKOukU2+bzngumZJrMuE=
Subject key identifier:   20:94:ED:85:F6:49:E8:C1:33:80:AC:4C:B6:0A:AF:13:D1:D4:CB:FE
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F1F924899A28E577120466980
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9d7ccc94-6047-3025-9d7a-5e5c929f4ce0.roa
Signing time:             Thu 10 Sep 2026 01:00:12 +0000
ROA not before:           Thu 10 Sep 2026 01:00:12 +0000
ROA not after:            Wed 09 Dec 2026 02:00:12 +0000
asID:                     46864
IP address blocks:        216.36.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1f:92:48:99:a2:8e:57:71:20:46:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 10 01:00:12 2026 GMT
            Not After : Dec  9 02:00:12 2026 GMT
        Subject: CN=2887cb66-7af6-44cf-8562-ea77c182763a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:44:61:f1:03:c6:8d:bd:20:49:06:a1:34:31:
                    32:59:a0:1b:c2:06:fa:51:66:74:bb:d9:26:cc:45:
                    74:a8:5a:55:11:12:25:72:37:77:ef:79:80:c7:e7:
                    ba:39:0d:02:8f:b6:15:2e:56:a8:bb:8b:5e:46:b5:
                    f5:63:7d:5c:d1:ed:6e:89:6c:65:77:0c:85:c9:77:
                    63:03:c2:21:de:ab:69:85:d2:77:b6:91:9c:25:d4:
                    62:70:75:3e:65:77:c3:41:a2:5b:90:0c:c1:9b:b3:
                    2d:da:3d:68:12:92:9c:f0:21:4e:f1:79:bb:9b:ff:
                    5a:2a:7b:40:94:d0:b2:85:b4:93:80:6a:bf:94:25:
                    8a:e4:a8:5b:b8:89:e0:1f:ae:68:a6:95:e1:60:c5:
                    2f:17:67:c9:cf:9a:c6:d2:21:00:0a:8b:a8:7f:60:
                    28:3c:88:1f:ff:19:32:f8:48:66:9c:2a:b4:71:d2:
                    2d:7e:23:ad:8b:11:32:0e:5b:1e:52:d8:b3:22:d6:
                    4d:6d:70:84:31:ac:bd:ad:13:1e:8b:36:39:13:84:
                    d7:20:e8:4f:6b:b0:d8:b1:65:fc:d2:33:29:0a:6b:
                    e2:df:af:c4:2c:8f:f9:e2:d1:ed:ad:d0:ef:0d:6f:
                    6e:f2:35:f4:90:c4:02:eb:25:c0:d6:47:5b:47:50:
                    a5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:94:ED:85:F6:49:E8:C1:33:80:AC:4C:B6:0A:AF:13:D1:D4:CB:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9d7ccc94-6047-3025-9d7a-5e5c929f4ce0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.36.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:5e:49:a0:6e:2e:9c:7b:53:47:86:0a:e2:8b:1d:c7:8c:15:
         4b:0c:10:3c:2b:45:6c:9c:71:91:5e:9d:c5:96:f4:79:80:15:
         d8:4b:77:65:02:5a:84:c4:f0:5f:42:cf:8d:75:72:9e:6e:6f:
         e9:37:a1:50:ad:fc:50:46:c9:86:30:b4:59:3e:91:05:df:87:
         bb:fc:40:90:7d:04:00:19:80:1e:87:a4:1d:c6:42:75:bc:04:
         64:17:cf:34:96:2a:31:7c:7a:08:14:0b:6f:34:6e:24:0e:3c:
         9d:21:bd:44:80:4d:e2:27:db:da:8c:48:4a:3e:d6:23:5f:41:
         4f:d5:bb:b3:fe:b9:a4:57:4d:19:08:72:da:5e:44:62:1e:35:
         f4:e6:ac:82:53:ca:cf:e9:2c:7f:62:0d:98:b5:04:8b:7e:1e:
         7e:5b:f7:0f:89:29:98:09:bd:28:2c:c1:7e:1c:5f:f6:79:ea:
         5f:6a:79:79:c9:c1:47:a2:78:16:8c:66:50:77:30:22:37:01:
         84:fa:9f:bd:3d:06:f8:9c:19:c9:38:3f:50:05:76:1f:7e:14:
         c8:78:b5:78:16:79:52:9b:be:fb:bb:61:a0:84:d1:5a:fc:22:
         58:57:d9:97:61:64:20:dc:d1:a7:e1:6e:c0:47:83:94:e9:8b:
         0e:3e:7a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:46:27 2026 by rpki-client