Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7acedb49-6280-34fd-804c-d85973efbe36.roa
File:                     7acedb49-6280-34fd-804c-d85973efbe36.roa (raw, json)
Hash identifier:          BnW5MJlbbD0RI4pYca/nJODEG5UvtA/1+5TdWasjH1E=
Subject key identifier:   EC:3D:1C:C1:67:3C:73:49:12:95:2F:CE:9E:4E:5D:DB:FA:AD:DD:DB
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F7E7DDC776C187B9575AA8200
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7acedb49-6280-34fd-804c-d85973efbe36.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     54288
IP address blocks:        216.218.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:dc:77:6c:18:7b:95:75:aa:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=5ed8fa6b-a909-429f-bda5-9700f322e0bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8b:73:e6:0b:20:7e:ec:b7:0b:a2:28:37:e8:
                    e7:2f:d2:05:47:c8:08:95:5c:9f:ea:d3:96:27:c5:
                    4b:b9:dc:13:2d:66:95:28:58:21:5d:19:45:3e:0e:
                    df:66:4a:90:0a:8b:a9:cc:db:03:13:e4:2b:2c:d3:
                    28:29:6a:27:ad:fa:0e:bd:54:09:d4:cb:68:93:f7:
                    2b:38:60:30:98:43:6c:6f:99:8d:d6:15:3b:66:99:
                    a8:26:ed:98:05:79:d1:31:b7:af:0c:11:6d:39:97:
                    ee:99:36:4c:4f:64:f5:e5:a9:c6:9d:a6:55:01:04:
                    11:40:72:4d:fc:05:13:b3:ad:15:92:96:1c:74:30:
                    db:7a:db:32:d6:d6:fd:a9:a5:3b:a2:05:1e:38:e6:
                    b4:6a:a5:bd:cc:d9:10:31:f6:1d:27:8d:6c:ad:0d:
                    02:f1:49:d5:34:5f:ff:48:d1:15:de:51:4c:24:16:
                    16:2c:73:6a:5f:dd:bd:25:98:7f:6e:d3:b8:c7:aa:
                    f5:07:48:57:70:be:de:ed:07:07:33:df:21:59:9a:
                    3d:4e:d2:77:d5:34:19:84:ac:ae:7d:fe:d0:8d:9b:
                    c9:98:ad:d4:34:71:94:4e:5e:7a:26:eb:ee:42:50:
                    12:99:04:c5:44:cc:2e:c0:65:80:e1:d5:cf:30:81:
                    64:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:3D:1C:C1:67:3C:73:49:12:95:2F:CE:9E:4E:5D:DB:FA:AD:DD:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7acedb49-6280-34fd-804c-d85973efbe36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.218.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:89:6c:12:85:83:9e:d2:4a:f1:dc:71:0f:47:6b:be:2b:56:
         34:8d:90:eb:2b:a2:b2:22:18:d5:dd:bf:9b:c0:d1:c7:e9:87:
         3a:a2:07:50:08:fe:20:cc:2f:77:42:2e:c2:92:0d:bd:84:09:
         b2:8a:07:3f:23:e3:eb:5b:7f:e4:d4:0b:2a:78:17:35:23:01:
         9a:87:c9:2c:b2:80:e5:db:b4:79:7a:7c:e6:14:ca:8e:96:76:
         08:c8:9d:9b:d0:44:28:b9:be:2d:4a:d5:74:35:9c:c5:e9:64:
         0e:97:2f:1f:e8:d9:ea:f1:d3:88:d5:08:ad:3a:8d:b3:ab:10:
         09:8e:86:4b:6c:db:7c:78:41:b7:db:c9:f1:fd:ff:48:a2:b0:
         2a:5d:c2:af:0f:55:7d:87:7d:2d:60:a7:41:87:17:cc:98:7c:
         2e:3b:3a:0d:87:04:ee:40:e9:97:3e:84:47:df:2d:24:6c:c7:
         2f:6f:f1:dc:1d:8e:34:d6:23:16:95:9d:8e:26:49:84:10:a0:
         46:f8:4e:61:dc:81:a1:93:0c:29:92:35:40:4b:ba:b2:02:e3:
         33:be:de:f6:92:85:7c:38:e0:1a:21:7d:b3:85:4a:4e:dc:1e:
         f1:39:19:2e:07:6e:a9:c0:42:77:7f:08:c3:7b:12:bf:bb:63:
         44:ff:82:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 02:21:44 2026 by rpki-client