Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425/ce5331b6-f6d2-391c-aba6-2d079e20150c.roa
File:                     ce5331b6-f6d2-391c-aba6-2d079e20150c.roa (raw, json)
Hash identifier:          jbp9P9t8XC5DrLg+nr5qBhlrGyVYv8El65qogMjD3uw=
Subject key identifier:   D4:7B:C1:EF:0D:D9:50:A1:41:95:99:EB:FD:0D:D1:EC:10:F6:5B:B3
Certificate issuer:       /CN=58da445d-8c6c-4299-9e2c-45c75e8a6425
Certificate serial:       010D0C9F4328584F4C3D57EFAC0E41BB4C038600
Authority key identifier: 9F:07:EB:7C:BE:E3:94:25:F3:04:B9:BB:42:B0:79:31:3E:63:D4:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425/ce5331b6-f6d2-391c-aba6-2d079e20150c.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     14312
IP address blocks:        204.16.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425/58da445d-8c6c-4299-9e2c-45c75e8a6425.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425/58da445d-8c6c-4299-9e2c-45c75e8a6425.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:57:ef:ac:0e:41:bb:4c:03:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58da445d-8c6c-4299-9e2c-45c75e8a6425
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=a6a73394-fc64-486d-b092-6ac0b2491fab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:13:d2:2b:fa:f9:01:02:2f:43:5e:17:ee:5b:
                    ed:d5:bd:89:6c:1c:3e:28:8f:10:f7:77:f2:5d:5c:
                    ef:ac:6e:35:b0:00:a3:79:c2:d4:b6:8a:d1:f0:80:
                    2e:0d:04:9b:bc:e8:99:39:c3:74:01:f9:33:43:ea:
                    9c:08:82:d4:55:3d:3b:a3:bc:40:07:46:c1:d7:62:
                    9c:00:2e:6a:dd:ce:34:28:2e:7c:b4:da:f9:c6:5c:
                    0b:0d:68:69:46:53:e1:3f:aa:0e:1f:bb:c1:d0:67:
                    cb:88:25:73:fe:cd:e6:65:24:5c:96:e1:ec:91:96:
                    03:3d:dd:d1:7b:6d:d5:16:9c:b7:9d:7e:ff:3d:c4:
                    01:98:f0:89:d0:65:f9:bd:47:04:b6:e2:1a:41:9d:
                    54:08:69:fa:8e:6d:03:77:ee:94:b5:85:53:a9:a7:
                    91:ff:28:26:af:da:5a:3a:4a:59:6c:6d:f3:b6:08:
                    d6:4e:57:45:4a:74:11:47:97:78:b7:5a:c6:b3:2a:
                    bb:d5:5b:76:6e:d9:99:d1:25:e0:1e:b5:3a:d5:06:
                    35:0a:0e:90:e0:2b:ac:89:8a:32:a0:79:02:b2:e8:
                    67:a8:58:4b:20:fc:f9:e1:9f:76:3e:0a:be:ae:d1:
                    fa:c1:50:e1:02:3b:e8:c5:b3:04:a7:35:14:57:87:
                    07:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:7B:C1:EF:0D:D9:50:A1:41:95:99:EB:FD:0D:D1:EC:10:F6:5B:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425/ce5331b6-f6d2-391c-aba6-2d079e20150c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425/58da445d-8c6c-4299-9e2c-45c75e8a6425.crl

            X509v3 Authority Key Identifier:
                keyid:9F:07:EB:7C:BE:E3:94:25:F3:04:B9:BB:42:B0:79:31:3E:63:D4:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.16.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:d6:9d:1f:c0:fa:9a:a8:48:5b:0d:bc:8d:0f:48:a9:96:f2:
         d5:b9:03:a2:ea:3e:c9:5b:9b:ec:7a:87:6a:9b:91:10:7f:01:
         bd:6e:ca:84:9e:53:59:e6:2a:2d:f6:3f:93:c4:c2:aa:9f:a0:
         03:0a:19:b7:b5:2e:09:c2:4d:3a:a6:5e:c9:8c:27:70:33:73:
         cc:34:9d:70:a6:26:36:0a:33:fb:30:d6:45:c9:82:7f:76:25:
         0c:ed:b8:ab:80:7b:56:5d:44:29:dd:0b:44:be:ef:bd:3d:ff:
         bf:a6:55:5d:59:a6:86:d8:19:ce:a0:be:48:74:ab:32:9c:e2:
         26:2b:65:7e:d3:37:7b:e7:47:cb:be:4e:9d:df:5d:8b:e2:a5:
         d7:38:76:71:7a:9b:52:c7:10:40:8d:c0:88:47:f5:e9:c8:0c:
         32:8b:64:80:16:d6:8e:e3:31:bb:5e:c4:a7:b4:ca:fa:e1:96:
         64:e1:46:b6:f5:41:ee:59:26:a0:32:2a:f7:fb:13:87:d8:54:
         8c:b7:dd:1c:f1:9d:03:5b:3a:01:92:f1:9c:26:a3:68:7f:2d:
         75:f7:9b:8f:1f:f1:a5:c2:16:19:da:cb:89:02:fa:96:5b:57:
         15:42:a3:97:76:5b:bb:b8:0c:71:d8:98:25:96:5e:2d:5c:c6:
         4f:a4:0b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 19:09:32 2026 by rpki-client