Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a4a6ab0-4989-3090-af6f-cbb7cfe263fb.roa
File:                     7a4a6ab0-4989-3090-af6f-cbb7cfe263fb.roa (raw, json)
Hash identifier:          nieXUjplUxB6ho54AUbdGUjKkIlbCrUYzY2nqOcLvlw=
Subject key identifier:   F9:79:33:99:97:5F:FA:10:E4:E9:9E:E3:85:B3:18:0A:7D:FC:97:28
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F90A311A7C651E3F8A5E3BA00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a4a6ab0-4989-3090-af6f-cbb7cfe263fb.roa
Signing time:             Tue 20 Oct 2026 13:00:13 +0000
ROA not before:           Tue 20 Oct 2026 13:00:13 +0000
ROA not after:            Mon 18 Jan 2027 14:00:13 +0000
asID:                     20940
IP address blocks:        96.16.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:90:a3:11:a7:c6:51:e3:f8:a5:e3:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 20 13:00:13 2026 GMT
            Not After : Jan 18 14:00:13 2027 GMT
        Subject: CN=f1491473-5cea-47d7-b828-4a3c919a389c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:8d:c9:e4:ed:d6:55:e7:60:4e:d6:2e:32:cf:
                    6d:13:63:f0:11:5a:65:90:84:9c:94:c6:33:24:82:
                    90:8a:70:0b:bf:79:8c:5a:57:a7:2a:d9:9a:d3:e7:
                    4a:6a:6f:71:8a:1b:fb:03:6b:83:3f:c5:29:d3:84:
                    53:33:ae:c9:2f:c8:df:cb:15:90:b3:39:d6:db:7c:
                    8d:c9:38:df:82:75:33:76:6c:52:ef:ae:60:87:35:
                    b2:d8:c8:6f:1c:57:ad:ae:3e:73:48:91:3c:5c:05:
                    dd:45:8e:86:7b:f5:17:ee:ec:45:a3:a7:54:b5:4b:
                    7b:80:a8:7c:2b:96:7c:29:bc:c8:9f:29:c3:57:4f:
                    3a:c9:56:07:eb:de:a7:bd:5a:5f:b0:99:b2:a1:e9:
                    bd:c0:cf:47:44:39:ff:26:20:c4:48:20:b7:83:0f:
                    a8:7d:d8:e7:01:9d:02:db:36:a6:08:b5:95:67:bc:
                    05:fa:5a:d0:fd:c8:27:91:df:27:d6:25:e3:d9:f1:
                    df:30:a4:9e:4d:d6:8f:60:e0:62:48:7f:cf:86:5c:
                    2e:41:41:b9:cb:53:a1:b2:5e:04:3b:60:2b:1a:34:
                    af:84:dd:99:66:be:cd:b9:8e:f8:97:58:7c:6c:ba:
                    b0:6d:ad:37:dc:dc:98:65:fe:71:2a:84:72:f5:5e:
                    d1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:79:33:99:97:5F:FA:10:E4:E9:9E:E3:85:B3:18:0A:7D:FC:97:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a4a6ab0-4989-3090-af6f-cbb7cfe263fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.16.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:e1:49:cb:7a:3d:0e:40:bd:dc:1d:17:b5:c5:e8:57:7d:20:
         5d:d6:c6:19:99:89:6a:2f:63:ae:2c:4b:7c:6f:8a:d8:55:03:
         ef:11:41:15:d1:d2:41:a7:43:84:6f:3f:7f:1f:7c:44:bb:42:
         fe:a8:6c:5e:f1:a7:e8:36:6e:cf:10:6c:ee:51:34:2a:95:e7:
         36:f4:3f:ae:e3:c8:e9:64:89:60:4d:e3:ac:3b:20:67:a1:c4:
         d6:ca:8d:06:48:15:19:48:3a:c5:31:aa:f9:1c:fd:ab:3a:85:
         8c:f9:ae:82:6d:8e:b4:87:cb:6f:f5:cc:70:25:1a:79:9b:aa:
         27:66:39:10:44:a5:3d:4f:4c:66:23:73:fe:37:d8:a8:fe:28:
         bd:1a:3e:51:bd:3e:a0:67:30:0b:88:d6:31:63:96:bd:a3:32:
         ee:bf:b5:fc:c9:10:45:08:6a:1d:3c:ef:24:4f:d9:0d:a3:2b:
         25:8f:83:8c:f4:99:e2:9f:2a:16:92:3f:9c:e6:53:52:ca:ed:
         0a:44:56:ae:b0:c1:3a:24:bf:3b:29:86:11:45:bd:09:95:7a:
         c3:cf:14:7c:60:bf:4e:60:e9:61:3c:0c:ff:06:0e:56:ad:d2:
         86:43:f6:1c:25:e6:37:6f:5b:f6:34:05:a1:1d:8e:0f:33:0d:
         3e:63:66:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 03:09:47 2026 by rpki-client