Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/7c9c0f53-d891-3144-bfee-1bcb12654926.roa
File:                     7c9c0f53-d891-3144-bfee-1bcb12654926.roa (raw, json)
Hash identifier:          MgzTuiaEr45ddIqNhXjIgk8Y1x/nIjpbM8cMBDcOYDE=
Subject key identifier:   FF:E0:57:17:FD:0A:A0:1B:A1:3C:1E:8B:2E:BB:AB:EE:75:6B:B2:3C
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584EC7A1D5476A12B47ED37D0B80
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/7c9c0f53-d891-3144-bfee-1bcb12654926.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     16417
IP address blocks:        216.71.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:d5:47:6a:12:b4:7e:d3:7d:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=5942de20-3e61-48f2-9059-9d919d7706b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b4:a4:2c:33:24:6f:07:79:2e:e6:28:d0:44:
                    e1:b9:9c:e6:94:bb:b8:e0:a4:63:b9:ad:3a:08:98:
                    9b:89:d9:86:d3:03:cf:2c:ca:1f:a4:be:8e:08:b8:
                    82:81:e3:9a:c2:00:14:75:3e:f1:9b:f5:7a:ca:06:
                    05:c3:1a:b9:be:d5:76:3e:e5:a5:43:d7:3e:44:1a:
                    8b:29:4a:0f:f6:17:bd:0d:cf:c5:da:08:ab:cd:d1:
                    40:c2:25:8e:ee:50:f9:11:d3:dc:ee:dd:7d:01:3d:
                    2f:d2:27:00:8c:12:b9:89:82:a8:92:18:64:a1:ad:
                    eb:5b:eb:ef:44:47:5a:78:df:ce:fa:76:56:3d:1e:
                    53:73:13:f6:36:eb:7a:f9:12:0c:16:79:62:9e:e7:
                    4c:2d:19:e9:4c:cc:ad:f5:e4:e8:84:09:64:e1:0b:
                    51:67:b4:03:3e:4a:e7:af:d7:9d:90:ee:14:9a:6f:
                    19:29:f2:10:29:fd:4c:18:44:a9:34:f0:fb:1c:07:
                    32:c7:78:16:84:aa:23:b8:3e:e5:57:9d:2d:a0:24:
                    d3:06:ac:63:3e:c4:72:18:a5:da:31:26:6d:33:ab:
                    3b:ef:2f:00:50:94:02:8a:a7:8a:3d:54:93:12:46:
                    17:39:2f:77:b2:29:ae:b6:4b:03:46:3c:9d:2a:fd:
                    89:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E0:57:17:FD:0A:A0:1B:A1:3C:1E:8B:2E:BB:AB:EE:75:6B:B2:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/7c9c0f53-d891-3144-bfee-1bcb12654926.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.71.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:b9:66:c4:a9:5a:a1:93:ff:f9:b0:75:36:58:68:eb:6f:59:
         4d:c8:35:43:3d:e6:8b:78:20:9b:9d:5a:5d:64:15:f8:83:6d:
         62:96:72:2a:de:ec:06:e3:84:2e:35:1d:19:e2:0f:14:bb:49:
         28:05:5c:11:a7:4c:97:02:7e:28:a0:8a:0c:b1:76:74:72:c1:
         98:e3:c6:95:16:fd:a7:e9:87:19:59:4c:cc:75:b0:ea:c5:6b:
         3d:bf:38:e1:fe:f7:bf:b1:73:ee:5a:5f:ff:b7:1c:cd:6c:56:
         1a:b7:65:3f:55:78:03:ec:c9:6c:c2:21:02:21:0e:6d:d4:73:
         ec:d3:73:67:92:22:cf:08:bf:48:63:e4:3c:e1:0e:6c:7c:15:
         9c:96:c1:ae:75:03:a4:7f:cb:6d:87:55:76:3e:17:30:10:a1:
         9e:d8:db:ad:a5:91:b5:d1:39:48:6e:37:5d:de:c5:fa:04:76:
         6e:c0:2c:ac:f1:32:03:7e:d4:b3:32:d3:bd:d4:b1:a9:f5:7e:
         33:cc:ac:c2:19:25:5a:0e:7a:68:27:66:07:16:1e:70:4b:0c:
         e1:0a:2f:e8:cb:d3:57:92:1d:0f:b0:1a:85:8e:8f:98:51:ee:
         ee:3a:58:a3:00:8c:07:e9:3f:55:34:95:a9:c2:c3:78:b1:e6:
         ff:b2:63:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 15:46:48 2026 by rpki-client