Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/d428c59e-2516-3824-8041-36df18452c2d.roa
File:                     d428c59e-2516-3824-8041-36df18452c2d.roa (raw, json)
Hash identifier:          X7bkDwYFLzM2DqfO3mBY45IV0dJ5+jJ7d5zQ4LWCDDQ=
Subject key identifier:   CA:3D:54:E3:E1:31:98:F9:8B:0B:20:CC:71:8C:9C:DF:B3:53:9D:A3
Certificate issuer:       /CN=17321389-82c8-40ad-969d-f355a789f579
Certificate serial:       010D0C9F4328584F4973D80465B3ACC387F15180
Authority key identifier: F2:07:B2:81:1D:EE:20:A3:1B:D2:87:04:DA:9C:1D:80:CE:FA:B4:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/d428c59e-2516-3824-8041-36df18452c2d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        170.39.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/17321389-82c8-40ad-969d-f355a789f579.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/17321389-82c8-40ad-969d-f355a789f579.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 17 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:d8:04:65:b3:ac:c3:87:f1:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17321389-82c8-40ad-969d-f355a789f579
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=96949e12-c06a-4361-be9a-6aee4bee195d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:82:f9:f8:8c:c5:3d:fd:21:ee:40:be:27:8f:
                    a2:d2:9f:23:6d:44:a2:52:42:80:4b:64:4f:5b:ba:
                    c3:8c:dd:e7:95:88:ec:4b:1f:37:b5:19:11:c9:34:
                    2f:92:b2:ff:76:bf:01:99:cb:0d:56:62:a9:84:7f:
                    b9:0d:43:95:a1:db:ea:e6:61:7b:f5:e1:0e:56:32:
                    79:c5:66:fc:f6:09:d9:e3:97:c0:95:c9:4d:4e:76:
                    8e:e6:93:45:dc:1c:2f:93:9c:d8:8a:dc:6a:aa:59:
                    81:32:6a:94:f8:f3:30:15:97:7e:d8:bd:82:a7:71:
                    05:46:fe:49:10:50:61:fd:cf:8d:87:70:98:fb:22:
                    2a:d2:35:8d:b4:ee:c6:52:18:41:69:f1:06:04:e3:
                    d4:26:1f:9d:b0:c6:2e:3f:c3:fd:de:2e:11:0f:9c:
                    98:a6:8d:09:db:29:a7:08:6a:95:7e:c1:30:e8:c3:
                    28:c9:59:25:1a:b3:e7:4b:e4:62:00:e3:97:b0:77:
                    6e:49:1b:6a:e0:89:24:f0:c9:e2:16:d9:f7:de:db:
                    07:23:c1:64:3a:fb:a3:da:fb:c4:b4:ed:5e:bf:c4:
                    89:2c:1d:68:c4:32:10:5e:39:9e:44:66:6e:37:c6:
                    6e:d7:b3:de:02:52:71:c5:27:24:11:91:b6:66:f5:
                    2e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:3D:54:E3:E1:31:98:F9:8B:0B:20:CC:71:8C:9C:DF:B3:53:9D:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/d428c59e-2516-3824-8041-36df18452c2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/17321389-82c8-40ad-969d-f355a789f579.crl

            X509v3 Authority Key Identifier:
                keyid:F2:07:B2:81:1D:EE:20:A3:1B:D2:87:04:DA:9C:1D:80:CE:FA:B4:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:84:85:ad:94:43:43:9a:66:80:de:72:8e:fc:6c:ee:85:c0:
         9c:2a:1a:98:4b:99:ca:01:3e:f9:fa:37:fd:42:a8:ab:4f:4c:
         39:37:b2:07:05:f9:50:54:9d:68:04:ec:c8:6d:ae:8e:1b:5b:
         ef:52:fb:46:fb:0b:37:f9:f8:70:42:c2:87:f2:43:82:6b:d3:
         bf:16:08:97:2f:72:a0:07:e2:27:bb:1c:ea:79:5a:9d:6a:93:
         b8:04:0d:eb:fd:0b:be:47:9f:16:ce:e4:fa:5a:6d:f9:ff:63:
         c9:4d:1b:ec:dd:43:b0:6f:0f:b4:cb:36:9a:d1:18:34:a3:7f:
         37:bb:1b:60:9b:88:81:70:e4:ee:e3:9e:65:74:63:6a:bf:ac:
         a3:ee:73:92:3e:62:4b:99:ff:f3:93:31:52:df:e6:80:e7:2a:
         a3:6f:2d:57:7f:1d:ed:d5:5e:e2:a4:14:dc:d1:60:4d:7f:de:
         6a:95:50:03:ba:a9:b3:43:2f:c6:04:49:d3:e9:e4:56:e2:7e:
         92:ea:67:dd:32:c6:19:83:f2:5e:1f:20:29:b8:be:08:9a:6c:
         b5:04:f6:eb:0b:fa:86:49:11:e4:b6:3c:ab:3b:4a:d2:16:f2:
         37:3e:53:5b:a0:6f:8f:95:10:30:ab:35:64:f7:96:a9:ef:ad:
         1e:78:32:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 10:57:49 2026 by rpki-client