Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/927c1ab5-1e5d-312c-91e2-adb2bbbd62b6.roa
File:                     927c1ab5-1e5d-312c-91e2-adb2bbbd62b6.roa (raw, json)
Hash identifier:          as5v7/OiqyFtb+qyaoNBGMQegKJdWbPN1v16ehsYVUk=
Subject key identifier:   EC:07:82:A1:FF:95:3D:F5:BA:BD:B1:D9:38:25:30:79:A5:8A:3E:DC
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584F06722FA6AA1AD3ED05145B40
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/927c1ab5-1e5d-312c-91e2-adb2bbbd62b6.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        216.219.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:2f:a6:aa:1a:d3:ed:05:14:5b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=a6bfb74a-3936-419b-9720-af48113949d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d3:f9:87:1a:84:b3:95:61:3d:6e:18:78:80:
                    81:5a:79:c9:bf:a5:fa:a5:fd:1d:c6:b7:6c:ae:3b:
                    22:43:31:06:4e:8b:8b:14:55:93:dc:12:dc:99:9a:
                    b8:c3:ee:5a:8e:79:e4:8f:a0:c7:5a:52:64:eb:c3:
                    b4:95:be:5e:10:93:a5:c3:24:11:b4:3e:b9:10:ec:
                    94:af:bb:ee:0c:8e:36:5d:5f:09:48:79:b1:50:f7:
                    08:62:eb:82:93:5b:d3:a5:dd:e1:5e:94:8c:4b:5c:
                    78:63:34:ba:a4:02:1e:91:2e:6b:5a:8d:27:a4:be:
                    72:dd:c8:02:bb:35:b7:c5:7c:0d:36:4c:d2:e0:04:
                    2c:66:ee:fb:cb:1d:12:fb:94:15:d9:ac:ef:6b:59:
                    9e:ab:51:da:2b:84:5d:04:5c:6c:32:08:f8:2f:fb:
                    05:87:4f:23:29:a3:55:01:91:f1:6b:84:70:e9:fd:
                    76:1e:0d:92:8f:da:86:11:1e:fd:04:bd:0d:77:65:
                    db:f3:0d:f0:dd:fd:c1:34:1e:2c:23:d7:ed:06:27:
                    d2:42:21:e9:c0:24:b2:84:f9:d9:aa:0a:a3:86:7b:
                    f6:af:71:40:81:c8:ec:4f:ef:de:71:28:f1:97:bc:
                    15:87:f8:d2:a4:aa:db:41:f0:97:c9:28:16:b8:ef:
                    c2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:07:82:A1:FF:95:3D:F5:BA:BD:B1:D9:38:25:30:79:A5:8A:3E:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/927c1ab5-1e5d-312c-91e2-adb2bbbd62b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.219.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:da:ce:69:2e:13:cb:14:75:b2:19:9e:c1:51:69:dd:06:1e:
         d5:5d:4f:a0:e4:4e:36:2e:53:a2:13:c7:09:18:c4:0c:c8:12:
         09:bd:b8:66:cb:2c:38:cf:f5:da:14:c0:7e:e9:15:0c:93:ce:
         d3:1c:ed:84:ba:4a:dc:96:ca:81:84:71:ee:c0:c0:f0:e1:a7:
         f9:f4:56:44:71:c7:f3:b3:ce:08:66:16:d8:d8:bb:87:bd:f1:
         a4:1e:b0:84:a2:70:2f:70:3d:05:24:bb:87:df:0a:b2:c1:79:
         32:52:a7:03:4b:ef:ef:ab:e5:8b:10:4b:60:94:33:e2:c1:31:
         91:93:bf:ed:2e:3f:f5:ff:41:91:27:4c:77:94:81:c1:59:0f:
         20:75:15:68:d0:5f:78:b2:59:92:48:93:2b:8c:bd:86:53:f1:
         a2:08:50:8b:bd:a5:ed:1a:f1:49:a6:c9:8d:56:e7:e5:71:db:
         96:e8:26:8a:bb:1b:53:bf:66:96:0c:15:55:56:ac:d3:64:49:
         50:46:36:61:7b:a7:a6:68:fb:8a:32:ad:7a:9f:22:a0:ed:f6:
         53:23:e2:7a:ec:c7:6a:6e:cc:1e:fe:e3:71:75:2c:2e:7f:8d:
         54:70:f8:ab:fd:c7:2b:98:f3:42:4d:41:7b:30:7d:ca:ba:e1:
         a1:9f:52:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 22:39:12 2026 by rpki-client