Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2d9c8c49-35fe-42fb-a908-c07b97255b4a/817d97f7-5adc-3334-9df3-d50b2f74f417.roa
File:                     817d97f7-5adc-3334-9df3-d50b2f74f417.roa (raw, json)
Hash identifier:          6Wm8HDli9hs6qPlJ/GfUbSTQ8XAku1QDqfxsRQAxOxY=
Subject key identifier:   3D:A9:C2:1B:B9:6F:A3:15:FA:F5:A4:A6:1F:30:1C:28:2F:89:98:F6
Certificate issuer:       /CN=2d9c8c49-35fe-42fb-a908-c07b97255b4a
Certificate serial:       010D0C9F4328584F7A4D972630073494B2C42240
Authority key identifier: DE:BD:AA:75:38:5A:90:C6:36:0B:ED:CA:72:F4:F4:17:4A:0E:93:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2d9c8c49-35fe-42fb-a908-c07b97255b4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2d9c8c49-35fe-42fb-a908-c07b97255b4a/817d97f7-5adc-3334-9df3-d50b2f74f417.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     394769
IP address blocks:        141.216.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2d9c8c49-35fe-42fb-a908-c07b97255b4a/2d9c8c49-35fe-42fb-a908-c07b97255b4a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2d9c8c49-35fe-42fb-a908-c07b97255b4a/2d9c8c49-35fe-42fb-a908-c07b97255b4a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2d9c8c49-35fe-42fb-a908-c07b97255b4a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4d:97:26:30:07:34:94:b2:c4:22:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d9c8c49-35fe-42fb-a908-c07b97255b4a
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=4c8560bd-a012-4b9e-bda3-2695ffcf20c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:06:2c:7b:36:fc:d9:e1:ed:31:a1:90:a5:eb:
                    3c:1d:2a:be:b5:21:8a:66:68:03:f0:54:b7:73:47:
                    a8:2b:b6:25:6a:b3:f7:41:46:64:33:d8:af:07:a2:
                    32:f8:79:0d:c6:64:66:ba:4e:da:87:75:cf:1a:e7:
                    78:dd:41:00:90:95:4b:ce:87:1d:5a:39:d1:1f:b6:
                    f7:74:80:de:77:4e:12:c4:a2:b9:20:35:63:82:2f:
                    7f:3e:f1:da:1e:25:d4:63:7d:01:ec:f7:6b:92:18:
                    1e:38:03:e0:ad:81:62:c4:2a:6e:7f:1f:9a:56:13:
                    61:31:80:c1:0d:75:26:b6:42:b6:be:28:5d:96:3f:
                    92:6a:02:16:51:7a:ee:3a:3a:23:de:04:60:11:b2:
                    df:5a:c1:5a:56:88:38:b7:95:0a:78:1f:e6:f3:6d:
                    cf:1c:3a:1f:3b:44:ce:5f:b5:5f:32:06:01:88:c6:
                    0f:86:26:76:1b:9e:c2:57:ab:3c:68:66:db:26:ad:
                    9e:92:4d:b5:aa:cc:51:eb:f7:67:03:9d:6c:98:f1:
                    e9:bd:80:ff:c7:51:b1:75:89:8a:32:00:f2:8b:94:
                    82:3c:71:96:66:22:b3:57:61:0f:e8:7d:4f:e2:52:
                    c7:da:6b:e2:44:16:e0:87:68:7e:cb:6c:57:0b:4a:
                    2e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A9:C2:1B:B9:6F:A3:15:FA:F5:A4:A6:1F:30:1C:28:2F:89:98:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2d9c8c49-35fe-42fb-a908-c07b97255b4a/817d97f7-5adc-3334-9df3-d50b2f74f417.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2d9c8c49-35fe-42fb-a908-c07b97255b4a/2d9c8c49-35fe-42fb-a908-c07b97255b4a.crl

            X509v3 Authority Key Identifier:
                keyid:DE:BD:AA:75:38:5A:90:C6:36:0B:ED:CA:72:F4:F4:17:4A:0E:93:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2d9c8c49-35fe-42fb-a908-c07b97255b4a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.216.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:72:8d:75:f1:aa:11:ca:d2:90:ac:31:cd:8a:9c:9f:ed:3c:
         00:16:a0:c9:2d:54:55:c5:2c:45:c1:00:33:85:c3:d2:1b:5f:
         a6:2e:e1:76:21:96:ec:88:eb:f2:f2:11:e8:83:0f:f2:b2:d7:
         5f:ad:4a:f9:77:28:8a:64:a2:d2:77:ab:74:08:7c:04:ed:01:
         75:53:15:8c:d1:33:94:c0:99:78:2a:94:d7:44:b2:05:e9:af:
         d1:19:f9:ec:90:ad:3b:17:aa:d4:e1:44:4b:75:93:2f:d6:89:
         c8:47:bf:09:02:96:41:e8:db:5a:0a:de:96:9c:b9:d9:ac:6e:
         4b:87:47:6c:d3:c1:15:f6:49:26:e6:99:f2:43:56:6a:5e:a1:
         d5:c7:bb:25:dd:88:9f:dc:ba:2f:3b:e6:7e:17:b8:0b:59:84:
         16:0a:d4:38:a2:1d:da:87:60:c2:16:70:a7:32:ab:fa:7b:c3:
         42:a5:93:d8:51:a5:d9:f1:65:ac:b4:15:b3:f2:e5:5d:8a:33:
         c8:17:12:b2:4f:d1:af:b4:e7:1f:37:29:e4:66:f2:5d:c8:0a:
         4a:d1:1a:2b:88:a1:35:87:f5:8a:6a:8f:94:55:88:cd:90:ef:
         13:9b:7c:1b:33:a2:54:f8:a3:8b:3a:20:5a:16:26:f9:1d:16:
         21:ff:41:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 16:21:39 2026 by rpki-client