Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/598fa9ab-3af1-34d5-90b5-80b9e74b1f7c.roa
File:                     598fa9ab-3af1-34d5-90b5-80b9e74b1f7c.roa (raw, json)
Hash identifier:          03NZGt8ti0hMKp/Wni8qYSY0k0wrLpOvXzwX6jPwgvg=
Subject key identifier:   DF:DE:E1:30:E3:0B:0C:F6:65:98:79:6A:CE:00:D7:CB:1B:7A:13:58
Certificate issuer:       /CN=16ca81c3-e5bf-48ac-8af9-0d789c35a2ad
Certificate serial:       010D0C9F4328584F698D7F3E19866BBC392EF920
Authority key identifier: 3A:9B:77:59:C4:B4:2B:ED:89:BA:E0:4E:D2:D9:80:D6:B8:56:6B:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/598fa9ab-3af1-34d5-90b5-80b9e74b1f7c.roa
Signing time:             Tue 06 Oct 2026 13:00:13 +0000
ROA not before:           Tue 06 Oct 2026 13:00:13 +0000
ROA not after:            Mon 04 Jan 2027 14:00:13 +0000
asID:                     16509
IP address blocks:        67.221.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:8d:7f:3e:19:86:6b:bc:39:2e:f9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16ca81c3-e5bf-48ac-8af9-0d789c35a2ad
        Validity
            Not Before: Oct  6 13:00:13 2026 GMT
            Not After : Jan  4 14:00:13 2027 GMT
        Subject: CN=39da2417-9d7a-4f4e-97dc-b0c91ab69564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:39:85:e5:8b:18:59:f5:6d:48:44:ab:8d:be:
                    90:89:6f:c6:09:5b:49:b0:3d:14:4a:fa:9b:b6:f2:
                    1b:08:54:01:c4:e2:6f:ed:10:55:39:54:3c:39:e5:
                    56:8c:d8:a4:62:7a:98:3e:59:ef:1f:98:63:4d:cb:
                    b1:36:6c:d3:61:81:80:2c:85:df:3a:0d:3d:9f:ff:
                    9c:0f:e3:30:d0:f2:05:16:d5:3c:e6:6c:49:01:66:
                    78:c3:3e:c1:fa:59:2d:dc:d0:2e:d2:90:3b:94:60:
                    92:11:71:65:79:84:6d:a4:60:7c:d1:9e:b2:01:cc:
                    bd:b4:f5:62:3c:af:69:01:6c:33:dd:ad:49:56:39:
                    5f:fd:b1:e0:e4:5d:a5:da:f1:fb:f0:30:99:ea:29:
                    80:2f:5f:d7:54:e7:a7:f0:6e:c5:85:75:95:7b:aa:
                    57:d5:c6:ef:84:23:ca:df:f3:92:af:8f:94:24:18:
                    d7:8b:af:8c:0e:ce:5a:c7:49:52:ce:e7:ed:05:69:
                    03:f3:94:cc:0e:6c:b4:cc:3b:51:b6:27:19:7f:34:
                    7d:b2:cf:8c:8c:46:1f:86:40:27:b7:e2:1d:78:03:
                    e4:13:44:60:4d:79:a1:7a:8f:67:58:8c:88:22:ee:
                    26:6b:55:12:ef:f2:80:99:96:ba:a2:8a:ec:d5:77:
                    43:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:DE:E1:30:E3:0B:0C:F6:65:98:79:6A:CE:00:D7:CB:1B:7A:13:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/598fa9ab-3af1-34d5-90b5-80b9e74b1f7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.crl

            X509v3 Authority Key Identifier:
                keyid:3A:9B:77:59:C4:B4:2B:ED:89:BA:E0:4E:D2:D9:80:D6:B8:56:6B:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.221.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:85:8a:80:fc:86:a8:10:68:8a:e3:b9:ba:40:cb:8f:f0:0d:
         dd:f5:f5:9f:76:3e:0c:70:c3:e4:80:0d:9b:08:43:d2:67:82:
         eb:bd:bc:ad:69:69:fe:a0:7c:72:15:9a:45:f0:d2:1f:33:33:
         2b:0c:6b:8e:2e:cd:0e:1d:d7:b9:4b:c0:86:27:a8:64:6f:9b:
         ff:2b:b4:12:bc:c1:18:ec:dd:d8:25:21:be:8d:d7:02:de:3e:
         a1:ec:6a:88:48:71:39:56:c9:0e:7e:db:da:1f:ab:04:35:06:
         03:53:47:58:18:2b:5d:92:bb:fb:d4:aa:ad:0b:30:45:28:e4:
         8b:3b:d8:5b:08:b1:ef:05:d6:36:47:1f:94:44:cf:36:66:fc:
         0b:96:49:6c:3a:8c:ab:95:4f:e3:84:a2:65:67:b0:d4:e7:95:
         dd:72:b0:09:62:34:6b:9c:81:a3:0d:f3:f6:c4:10:b3:d0:df:
         2a:ae:33:84:52:9b:6c:a7:c3:9c:4f:3b:80:97:3c:d5:19:e0:
         fe:1d:70:94:e9:a9:38:9d:f4:c8:7a:53:5c:3c:8d:93:0c:88:
         e0:b4:9d:c1:4f:eb:c9:43:3f:1f:88:9c:01:f8:a0:ee:9e:71:
         4a:45:2c:54:a2:30:fc:16:2c:6e:87:02:8d:d6:1f:a1:bb:7d:
         69:f6:1a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 04:03:18 2026 by rpki-client