Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/1f7df69e-2e19-3974-9512-ae87190b53aa.roa
File:                     1f7df69e-2e19-3974-9512-ae87190b53aa.roa (raw, json)
Hash identifier:          7kcMddg18vLtutH6nm92lzLcHgRDomSMwNXgDi7tM04=
Subject key identifier:   ED:92:84:DD:BE:4E:F4:0C:2E:E7:A5:7F:87:F3:C3:A8:FD:EF:D2:50
Certificate issuer:       /CN=7d6bea32-db4c-4326-93a0-713364b8aa44
Certificate serial:       010D0C9F4328584F4974B9839EFED0FB41FEC6C0
Authority key identifier: D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/1f7df69e-2e19-3974-9512-ae87190b53aa.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     22351
IP address blocks:        216.250.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:b9:83:9e:fe:d0:fb:41:fe:c6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d6bea32-db4c-4326-93a0-713364b8aa44
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=cc86619a-1e6e-4d90-a979-4c514b878df0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e3:2f:89:67:eb:2d:98:d6:5b:54:06:8c:e1:
                    2e:6d:1e:d7:48:27:82:ca:00:36:0d:24:85:29:d2:
                    b7:9a:56:3e:71:f0:a6:69:21:9a:83:5f:77:13:6e:
                    e0:0e:81:82:f3:75:7d:c6:2d:b5:ee:73:39:f7:65:
                    54:f2:e9:be:9e:0c:f5:63:d2:94:fc:03:e1:71:c1:
                    03:6c:91:ef:d5:48:f6:45:db:4a:7c:08:4c:32:cf:
                    19:f4:63:62:e0:01:e3:cd:b9:46:7a:a7:3e:f7:4c:
                    55:9d:cc:5f:4f:1f:aa:f7:ad:e1:52:55:22:08:8f:
                    58:32:e6:ae:05:ed:b9:2f:b2:c2:b3:a1:29:74:d5:
                    b8:9a:80:18:3a:78:a7:6a:dc:35:5c:35:c1:23:d0:
                    d4:e3:ca:41:2e:20:57:dd:a8:d8:61:66:e6:96:66:
                    8c:4c:7c:3f:63:46:b4:a7:34:43:be:fe:46:5a:d2:
                    20:6d:fa:1a:58:db:42:8b:e4:f9:dd:ad:90:82:0b:
                    30:75:5a:ad:a5:7d:23:25:fe:58:38:f8:24:3e:39:
                    7c:ba:ef:e6:c6:dd:2b:fb:18:16:a5:b4:ce:5f:fb:
                    be:0d:24:5e:10:0b:ec:2f:7e:89:ac:9b:d4:eb:bd:
                    e5:8b:09:e8:65:65:65:47:ff:8f:b0:9d:3c:44:45:
                    45:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:92:84:DD:BE:4E:F4:0C:2E:E7:A5:7F:87:F3:C3:A8:FD:EF:D2:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/1f7df69e-2e19-3974-9512-ae87190b53aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl

            X509v3 Authority Key Identifier:
                keyid:D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.250.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:5e:32:94:fc:57:3a:a8:57:02:40:33:8f:46:64:6f:90:16:
         6e:72:e3:d2:f2:ef:0c:b9:fa:30:af:55:f1:6e:81:21:b4:d1:
         7e:8d:45:b2:3e:d6:1e:a1:99:d3:c9:fa:b4:e7:7e:10:82:6e:
         56:73:45:c6:3f:aa:d7:5c:5f:1e:96:c8:d0:5d:88:f7:8e:51:
         f3:b7:85:45:83:fc:81:88:c7:8a:91:dd:cc:ec:c7:86:b4:2b:
         3e:94:ba:14:e1:a6:fd:2f:57:13:31:cc:4a:a3:79:de:5f:10:
         4a:ca:f1:85:5f:27:72:50:13:24:63:41:49:5a:81:f4:29:a0:
         f8:b5:81:a9:61:b5:6c:92:8e:07:4e:55:04:36:2f:9e:0f:6c:
         c6:17:0b:b6:75:fd:44:4a:1f:2f:dc:72:7a:cc:ed:d8:35:c9:
         85:25:ce:01:83:32:ea:7a:cb:7b:e6:59:d8:f7:4e:10:26:88:
         d4:54:71:5a:33:ec:7f:76:2c:4e:88:28:4d:c5:4f:15:f0:a5:
         e6:a7:58:57:a4:bb:ce:6d:2d:fd:16:9c:dd:5f:29:6c:30:c1:
         1a:6a:2b:0a:cd:96:59:24:fa:97:7c:3c:dd:ed:0e:9e:8a:72:
         f9:f3:2a:39:c6:14:24:87:bd:e1:c4:f3:3e:d1:d7:06:08:18:
         b3:d6:ae:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:46:59 2026 by rpki-client