Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/321fb60d-9686-3132-a037-9e5f9e621a79.roa
File:                     321fb60d-9686-3132-a037-9e5f9e621a79.roa (raw, json)
Hash identifier:          whzrt22KBnPtw8VLJEpshdZ+y6H0AF1ytvZNpuTZqkg=
Subject key identifier:   82:E7:A9:62:B5:06:1A:34:4D:C8:69:BF:D5:5C:2C:17:27:3F:B3:1F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EE7BCC19CD6BFE6BCF8EF9C80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/321fb60d-9686-3132-a037-9e5f9e621a79.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     701
IP address blocks:        216.156.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 15 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:c1:9c:d6:bf:e6:bc:f8:ef:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=a6cef488-36eb-4962-afa8-986f1ddc03a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ab:06:aa:e1:36:da:2a:90:9f:04:ce:18:72:
                    ba:36:fb:3a:d7:05:28:d1:77:28:5b:ae:56:78:29:
                    3f:f7:a5:99:99:87:dc:48:3c:b7:bf:00:a3:53:46:
                    15:3f:8a:bc:04:06:17:02:90:7f:d2:d0:c2:fe:48:
                    2d:c2:f3:bc:d4:3f:9d:17:bf:48:10:10:22:dd:72:
                    09:b0:9b:f8:8c:bb:a1:0f:d2:40:19:7f:30:e5:71:
                    e5:42:c9:43:17:9a:3e:bb:32:79:f3:c4:80:52:aa:
                    94:54:56:18:18:f5:0c:49:52:f6:94:aa:51:77:b1:
                    d0:81:1a:57:0c:01:8d:15:e4:ec:ec:34:44:0e:82:
                    9f:4f:1e:a7:d6:cc:38:1e:1d:5e:83:54:8d:8d:8d:
                    1e:f9:7d:6f:40:b2:f7:35:af:db:e7:3b:32:09:82:
                    40:cb:6b:9f:9e:64:1a:71:ad:1c:d8:23:62:3b:ed:
                    05:16:50:ba:50:7a:d8:92:54:17:8c:52:7a:e3:de:
                    00:3f:ff:db:3a:8c:32:e3:36:f9:68:b1:e9:07:ff:
                    ae:41:ee:58:1f:ff:65:31:71:be:41:77:1d:6f:be:
                    4e:cb:78:95:e6:37:ab:54:0c:85:d3:ff:67:aa:78:
                    b7:95:9b:b5:c8:ac:d1:cd:88:18:44:6c:1a:0f:2b:
                    2d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E7:A9:62:B5:06:1A:34:4D:C8:69:BF:D5:5C:2C:17:27:3F:B3:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/321fb60d-9686-3132-a037-9e5f9e621a79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.156.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:37:9f:87:1b:94:42:97:1f:bf:fd:43:6b:b1:91:e2:28:fd:
         13:26:14:ea:c2:d1:b3:0a:41:1f:22:98:68:e5:0b:af:fb:c2:
         0c:4c:26:58:1a:81:23:b7:eb:9b:fe:55:49:cd:28:cf:5a:45:
         8e:ac:5b:bc:c8:f5:49:37:d2:a9:15:4a:1a:5f:28:03:f1:d5:
         74:dd:a3:14:2e:8e:e3:ef:24:d0:a6:1c:9d:a4:cc:c7:f9:6b:
         52:88:4e:0d:2a:c6:b3:25:0f:9a:10:9b:1a:b0:e0:87:41:e6:
         17:ac:99:99:8c:e7:96:06:52:ef:d5:8e:94:2f:8c:b6:8c:b9:
         16:6a:99:6a:c7:4b:c5:38:ee:a0:3c:03:1d:41:56:ab:60:ae:
         73:b3:92:a5:c6:40:3f:8e:66:05:14:c2:b9:63:c8:03:25:4a:
         dd:ff:a6:a9:68:85:a6:dc:d0:1b:9e:5d:3a:0a:b7:0a:e8:d7:
         6e:2b:84:a7:f0:1a:ff:12:1f:32:a7:13:29:22:9e:34:5f:c1:
         af:98:c3:89:8c:f2:d7:3a:b5:f0:8f:d5:3c:a9:20:a9:b5:d2:
         b4:2e:91:bc:23:d6:5e:9e:c7:1e:41:c2:4d:6d:df:01:40:37:
         17:1f:50:f5:83:f1:02:cf:29:fd:a9:8a:ef:3c:60:07:41:a9:
         6e:6a:0f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 19:44:15 2026 by rpki-client