Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/87c3de23-9fc4-3970-9862-fe9aff94f37b.roa
File:                     87c3de23-9fc4-3970-9862-fe9aff94f37b.roa (raw, json)
Hash identifier:          OHcGu1Fo5vUQ+W8T6PT+g4yecjPn8xUC23kEEnUl9pQ=
Subject key identifier:   A4:AF:3F:92:14:8F:5F:46:43:37:C9:6D:E5:E4:1B:93:69:2D:A9:6F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F7E7DF2FDC24A9047DBBA2680
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/87c3de23-9fc4-3970-9862-fe9aff94f37b.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     18865
IP address blocks:        216.218.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:f2:fd:c2:4a:90:47:db:ba:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=0adf7df5-27ef-4c64-85fb-fe731dee1aa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d2:d5:95:b7:a4:0d:33:97:5d:f3:59:a8:50:
                    2c:3b:d1:2b:69:50:f6:80:a5:d6:3f:0e:b2:52:6c:
                    4d:dc:6b:48:df:1e:12:33:4a:00:3d:de:7c:d4:c3:
                    47:f4:c6:1c:f6:f0:ed:1d:45:68:03:af:bb:11:a8:
                    3b:af:36:dc:b3:be:b4:18:12:16:41:40:6c:21:f5:
                    ac:c4:e7:8d:cd:b4:71:34:32:3f:8f:59:af:3d:c0:
                    68:84:10:63:d3:76:aa:4f:4d:06:53:38:ea:7b:00:
                    c6:83:55:9d:8a:f0:39:dc:30:77:6e:51:ab:87:88:
                    d0:92:7f:7f:4e:8f:09:00:84:2c:2d:7e:e0:0a:39:
                    8b:ee:58:4b:f8:d7:ec:72:0c:1b:73:b3:ec:5a:09:
                    92:19:47:a1:ea:27:a1:2a:cc:c7:38:d3:f5:43:c5:
                    91:62:bd:1d:b2:64:66:8e:77:94:ec:8b:da:b1:89:
                    7a:6d:c9:6d:15:54:16:5b:d7:dc:1d:88:b1:f3:c7:
                    d7:67:93:bd:1c:ba:a5:91:c7:83:fb:99:ce:da:4b:
                    65:0a:30:3d:f6:7c:16:e7:b8:df:83:b3:e4:8f:18:
                    08:0a:85:9c:61:57:24:a4:2e:3a:5f:38:3e:80:75:
                    58:b4:fd:a5:6d:27:9d:d4:dd:d1:e5:ec:29:ec:2a:
                    db:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:AF:3F:92:14:8F:5F:46:43:37:C9:6D:E5:E4:1B:93:69:2D:A9:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/87c3de23-9fc4-3970-9862-fe9aff94f37b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.218.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:48:86:e5:47:a4:7e:24:6e:4e:65:f7:39:8e:19:5c:08:9f:
         b5:6e:bb:44:69:7c:b1:a4:2c:74:5f:3a:fc:ad:74:da:cc:1b:
         b0:15:75:43:18:93:58:d7:b4:ba:8b:1f:c9:db:84:47:01:b3:
         f8:ef:a7:74:e9:26:04:c9:84:57:d5:69:9f:9b:af:cc:35:7a:
         8d:d9:9b:6d:f7:31:f6:b5:ec:db:62:2e:65:74:83:b1:1e:0c:
         90:bb:be:c7:3c:7c:df:92:a0:36:8c:4c:45:9b:7a:84:d2:2d:
         32:b8:bd:ee:f0:04:fa:cd:3a:c6:6c:2f:48:08:e8:3f:64:ba:
         89:ea:c8:65:2d:34:e3:8d:03:93:0d:84:08:43:1f:55:fe:e5:
         c4:5c:ce:14:35:91:26:b1:a8:24:e7:e2:d6:3c:36:62:7a:fd:
         5d:fa:3d:3f:11:2a:bd:1d:db:11:4b:a1:ae:b0:01:25:31:0f:
         c4:fe:a1:b6:43:22:b4:48:54:46:35:b3:bf:88:5b:78:57:51:
         39:e3:bd:3c:0d:56:af:6f:54:03:2e:1c:c4:3f:9a:8a:84:71:
         f0:d3:11:f6:e2:d4:01:ae:bb:d5:bc:6d:d8:eb:a7:a8:18:7c:
         a6:e8:e1:7d:9a:68:7c:37:06:32:32:1c:7e:5c:f8:63:21:21:
         61:b3:b4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 19:12:16 2026 by rpki-client