Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e6abdd9-4ebf-401b-b031-b7fe672633df/0d5fd5be-09f5-304a-8661-d325182ea2a1.roa
File:                     0d5fd5be-09f5-304a-8661-d325182ea2a1.roa (raw, json)
Hash identifier:          Ou/WZrpAsrtSgSPOmmtbVe6uF1G8cnO4hpZ7dE6Gq/Y=
Subject key identifier:   94:AC:D2:04:32:87:3C:42:6A:56:E4:E5:DA:75:E8:22:A3:99:0B:3F
Certificate issuer:       /CN=2e6abdd9-4ebf-401b-b031-b7fe672633df
Certificate serial:       010D0C9F4328584F8F3DA52E8795430660878B80
Authority key identifier: EE:58:09:12:A4:23:D2:EE:D6:51:C8:90:79:A8:93:60:C8:67:E8:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e6abdd9-4ebf-401b-b031-b7fe672633df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e6abdd9-4ebf-401b-b031-b7fe672633df/0d5fd5be-09f5-304a-8661-d325182ea2a1.roa
Signing time:             Tue 20 Oct 2026 01:00:12 +0000
ROA not before:           Tue 20 Oct 2026 01:00:12 +0000
ROA not after:            Mon 18 Jan 2027 02:00:12 +0000
asID:                     19108
IP address blocks:        216.117.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e6abdd9-4ebf-401b-b031-b7fe672633df/2e6abdd9-4ebf-401b-b031-b7fe672633df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e6abdd9-4ebf-401b-b031-b7fe672633df/2e6abdd9-4ebf-401b-b031-b7fe672633df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e6abdd9-4ebf-401b-b031-b7fe672633df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8f:3d:a5:2e:87:95:43:06:60:87:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e6abdd9-4ebf-401b-b031-b7fe672633df
        Validity
            Not Before: Oct 20 01:00:12 2026 GMT
            Not After : Jan 18 02:00:12 2027 GMT
        Subject: CN=d512ab28-d991-4e27-80d2-16dd848e62b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f2:56:0c:78:35:3c:c9:26:7e:2d:08:de:24:
                    cb:b3:74:af:a8:8d:f3:90:91:25:e6:ce:14:33:25:
                    a5:74:29:c3:8e:31:c5:3e:71:bb:3b:17:6b:cc:11:
                    db:d0:26:a9:63:e6:b0:30:d3:9d:01:3b:68:6a:14:
                    53:d3:6a:92:78:7a:45:b8:f1:dc:14:38:db:90:3f:
                    e2:4a:f8:f4:6b:f4:6b:81:d0:ac:be:7e:a4:f2:c1:
                    31:9e:e9:c3:70:17:8c:41:db:3f:8c:5f:f0:19:dd:
                    e9:26:39:3b:4a:40:ae:05:5e:7c:15:b4:c2:17:31:
                    73:20:39:a7:64:39:09:35:b8:37:f0:94:04:bf:f1:
                    ac:e4:99:7c:f4:e5:00:77:05:eb:7d:00:1d:0c:f4:
                    e0:c3:9e:9d:8d:8c:75:c0:b0:96:17:0c:3b:02:59:
                    79:65:c9:5d:86:c1:c0:0d:91:00:78:ab:c3:53:14:
                    bd:ca:e1:97:7c:49:d4:e7:14:dc:6d:b6:8a:f7:0c:
                    a7:b4:07:19:c7:02:60:2b:62:ea:0c:66:23:ae:d3:
                    22:55:95:4c:df:74:38:74:d4:3f:d9:3b:8b:17:a9:
                    dd:73:18:f7:60:cb:a9:d8:e1:9e:f2:9e:ca:8f:83:
                    fb:f8:3b:50:a4:85:3a:c2:27:99:d3:72:27:7f:83:
                    92:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:AC:D2:04:32:87:3C:42:6A:56:E4:E5:DA:75:E8:22:A3:99:0B:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e6abdd9-4ebf-401b-b031-b7fe672633df/0d5fd5be-09f5-304a-8661-d325182ea2a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e6abdd9-4ebf-401b-b031-b7fe672633df/2e6abdd9-4ebf-401b-b031-b7fe672633df.crl

            X509v3 Authority Key Identifier:
                keyid:EE:58:09:12:A4:23:D2:EE:D6:51:C8:90:79:A8:93:60:C8:67:E8:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e6abdd9-4ebf-401b-b031-b7fe672633df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.117.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:57:33:7d:a3:c6:57:e6:22:bf:94:96:27:26:00:da:fa:33:
         c2:10:92:8c:4c:c1:cd:71:fa:ad:40:d5:2b:8b:31:05:b7:cc:
         51:fb:8c:e0:33:28:0d:ea:9a:e8:ea:44:07:9a:26:ed:35:09:
         0c:5c:9f:b4:9c:2f:e3:e2:cd:f4:4d:a2:be:a4:2b:92:d1:9b:
         c3:e0:01:83:8d:d3:2a:28:e9:ef:bd:b8:51:c2:c8:e6:ef:11:
         af:5f:d6:a6:0b:ca:9c:4f:bd:94:6e:b2:5b:1c:cc:67:2f:83:
         30:ee:70:22:43:40:a8:f7:62:93:cb:e0:57:7b:bb:9b:49:14:
         a8:78:d7:95:f0:3a:88:3d:21:56:a7:6e:2b:c9:5a:c3:3c:58:
         04:08:45:f2:19:ed:aa:8c:00:86:22:f2:63:7d:1f:38:ce:2c:
         6b:18:4c:6e:9a:21:e3:fc:dd:0b:0f:d4:2c:08:41:95:6a:87:
         e7:68:ac:1f:bf:09:85:5f:7b:7d:64:2c:f0:99:02:17:f8:50:
         9e:e3:72:b8:7d:64:f5:f7:a2:f7:e7:71:5c:77:04:1c:6d:cb:
         77:79:c9:0e:ce:cc:c3:39:3d:52:af:e0:f9:54:69:98:19:ab:
         07:a0:24:69:0b:12:b5:97:91:d9:0a:3f:3b:ab:8a:a3:c7:00:
         11:93:63:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 01:35:12 2026 by rpki-client