Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/6dd2c7a8-1f04-3246-85e7-d51cac05cae8.roa
File:                     6dd2c7a8-1f04-3246-85e7-d51cac05cae8.roa (raw, json)
Hash identifier:          6IKpIjpme5HJhddINNLSeTbH0DkvI9Vw9G+gArl8C+4=
Subject key identifier:   05:0A:4F:63:C6:53:A0:82:19:D9:83:DF:96:90:70:84:C0:0C:08:96
Certificate issuer:       /CN=2a85302a-1502-4116-b560-4c2d2155f989
Certificate serial:       010D0C9F4328584F6292E0311AC7B9DF502F6A40
Authority key identifier: 58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/6dd2c7a8-1f04-3246-85e7-d51cac05cae8.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     16509
IP address blocks:        216.150.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:e0:31:1a:c7:b9:df:50:2f:6a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a85302a-1502-4116-b560-4c2d2155f989
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=5c1c5ba9-19c5-45d0-98a8-7bd92a0a96d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9c:40:6d:5c:13:e7:4f:40:8c:f8:99:20:ed:
                    e8:29:12:f4:ed:d5:65:78:df:d6:16:c6:1c:c0:db:
                    db:9d:a8:59:2b:3d:6e:8c:d0:2e:2e:08:90:6b:23:
                    30:5e:22:d8:bf:14:24:26:25:5e:72:76:0a:a4:3c:
                    c9:07:cc:4f:70:31:9b:50:bb:07:0e:09:2d:76:0a:
                    ad:a3:0a:73:71:4f:a7:26:66:2e:6f:70:14:5a:c7:
                    39:9a:53:b6:c1:1e:6f:fb:a7:17:bf:92:57:60:26:
                    bd:a8:b7:c2:49:7f:fc:d9:eb:b4:f6:33:6e:ba:93:
                    a5:0d:57:86:b9:27:50:78:34:19:68:12:28:b3:36:
                    41:46:0d:6f:5d:7d:dd:77:ff:6a:09:ce:dd:a4:bf:
                    44:82:c9:26:a2:53:4b:ab:00:35:36:34:0f:ab:e9:
                    24:0f:74:eb:75:ca:3c:91:bc:c6:6d:4f:65:4d:1f:
                    5c:81:7c:39:de:d2:ce:9a:18:58:ea:6c:b4:0e:2a:
                    1b:78:b3:f5:f0:90:40:78:09:39:71:09:0e:ce:c2:
                    19:91:db:2a:23:4c:7c:20:b8:fb:f8:4b:56:09:2d:
                    5b:74:02:3b:9b:2a:02:c6:c3:71:a9:78:1c:ae:9c:
                    b4:d7:ea:ab:8d:23:1f:25:33:05:02:d3:e5:05:12:
                    45:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:0A:4F:63:C6:53:A0:82:19:D9:83:DF:96:90:70:84:C0:0C:08:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/6dd2c7a8-1f04-3246-85e7-d51cac05cae8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl

            X509v3 Authority Key Identifier:
                keyid:58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.150.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:3c:3e:bd:d3:67:93:dc:66:df:7c:53:0a:c9:16:9c:c4:a4:
         a3:75:59:87:3e:67:3b:6a:21:70:e5:5e:d3:f3:32:c9:33:3e:
         b6:8f:a7:60:c5:c4:32:1c:72:06:be:a0:ab:16:9e:8f:62:14:
         8f:11:d6:87:dd:e9:db:30:21:84:ef:f8:9c:4a:4d:62:84:4e:
         e3:c3:ea:63:c7:ce:df:8d:62:04:4a:9f:ba:b4:38:f8:70:6c:
         47:b9:77:26:6f:f3:b7:67:57:aa:87:56:3b:d8:53:ae:9f:7d:
         43:16:56:ca:ca:31:b6:1a:4c:f9:7a:4b:7c:cc:ec:f8:e9:90:
         0d:78:46:de:d8:c5:81:99:00:61:a4:9b:e1:c0:ce:45:9e:0d:
         37:27:cf:c4:81:51:a8:37:a0:7d:43:77:c9:5d:96:d3:d2:a9:
         00:a1:15:dd:a3:ec:eb:07:65:ea:c6:72:e2:2b:11:f1:2f:fd:
         32:93:dd:0d:ec:48:21:1c:f2:79:e3:45:b3:c8:e6:cf:e0:7c:
         ff:cc:c4:6a:67:1c:41:e2:5b:58:07:c8:5c:5b:7b:f7:61:35:
         04:64:1a:56:a6:f8:3d:62:f0:d6:b4:0f:b9:69:4e:49:15:26:
         ea:44:e2:d3:1d:10:48:61:1b:77:8f:68:fe:3a:6d:d0:66:56:
         66:40:fb:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:47:42 2026 by rpki-client