Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/3a4f7762-0e9b-325f-ace1-81d1e1f109de.roa
File:                     3a4f7762-0e9b-325f-ace1-81d1e1f109de.roa (raw, json)
Hash identifier:          yzWD3S5+2EiH1941CkNM4tjFS7qFNX+rTknAHKVi6EQ=
Subject key identifier:   E3:86:98:F8:4D:14:C1:C0:73:2B:20:5B:71:85:26:A8:03:8B:4A:96
Certificate issuer:       /CN=c178d21b-9bf0-4172-9ece-4a4d84fc66e7
Certificate serial:       010D0C9F4328584F612D6203DE45583278C96770
Authority key identifier: 98:1B:22:24:7B:4C:CC:8D:BA:0F:59:A9:01:99:8A:D9:CF:BE:CF:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/3a4f7762-0e9b-325f-ace1-81d1e1f109de.roa
Signing time:             Sat 03 Oct 2026 13:00:13 +0000
ROA not before:           Sat 03 Oct 2026 13:00:13 +0000
ROA not after:            Fri 01 Jan 2027 14:00:13 +0000
asID:                     26356
IP address blocks:        216.86.160.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:61:2d:62:03:de:45:58:32:78:c9:67:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c178d21b-9bf0-4172-9ece-4a4d84fc66e7
        Validity
            Not Before: Oct  3 13:00:13 2026 GMT
            Not After : Jan  1 14:00:13 2027 GMT
        Subject: CN=ac88fc0a-b0b2-4f71-9680-56069217f14f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e4:61:8d:e0:14:75:1a:30:34:7b:00:cf:7b:
                    0c:69:9c:72:56:c4:87:4e:99:07:af:90:04:14:6a:
                    45:fc:50:17:39:9e:6a:5d:73:66:08:0f:21:1a:02:
                    b7:13:ae:a2:05:35:93:d8:99:f4:3d:25:6f:a7:f7:
                    54:ca:e6:ae:f8:85:08:ed:47:39:55:a0:75:39:a0:
                    0e:4f:a1:6d:4e:c7:51:dd:87:ff:a7:ea:49:5d:c5:
                    11:04:bb:32:d3:58:79:31:f3:e1:ce:e2:23:3d:47:
                    1b:25:9a:2e:60:c2:e7:5a:f9:e9:81:36:6e:0b:bb:
                    f6:df:6b:6a:c0:c0:95:c4:5d:56:34:c2:76:25:6c:
                    85:ae:91:8c:24:ca:a1:81:de:d8:97:5a:e4:34:9b:
                    0d:d4:ce:fa:11:d8:cf:e6:a5:ea:94:49:6d:55:95:
                    53:f3:bd:f5:ea:83:0e:95:74:fb:14:a3:f7:9d:99:
                    e2:75:28:54:ee:b2:de:d7:2c:39:8a:8e:1a:c3:b5:
                    8c:6f:e0:76:5c:e9:21:e1:a9:0e:10:04:1d:ef:74:
                    ef:48:e3:33:7e:23:53:1b:9d:a3:83:62:09:04:69:
                    c9:ea:a9:43:93:dc:1e:e7:d9:8e:17:84:86:e9:d5:
                    f0:86:e0:36:be:0e:02:a1:c4:fb:0d:d6:0e:7d:66:
                    7c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:86:98:F8:4D:14:C1:C0:73:2B:20:5B:71:85:26:A8:03:8B:4A:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/3a4f7762-0e9b-325f-ace1-81d1e1f109de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.crl

            X509v3 Authority Key Identifier:
                keyid:98:1B:22:24:7B:4C:CC:8D:BA:0F:59:A9:01:99:8A:D9:CF:BE:CF:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.86.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:50:62:3b:f7:3e:80:2e:26:9d:36:64:00:6f:d3:65:e4:ec:
         72:00:2b:a3:c1:c7:29:b6:db:78:05:0b:81:d1:f6:df:e0:86:
         79:c4:a1:d2:f3:bf:d9:21:87:d0:bc:a1:16:35:a7:cb:1d:44:
         2f:b6:cf:68:f9:c3:36:cd:6b:c7:b5:4a:8e:0a:4d:01:da:d1:
         aa:67:f3:b0:e1:c5:26:ed:e2:bc:00:85:3e:87:f4:94:94:d8:
         43:5c:fd:98:58:56:8d:b5:ae:34:81:af:d7:dd:65:95:b2:64:
         d7:3e:4f:dc:17:a0:4f:7e:01:27:18:63:cc:23:da:68:0c:ac:
         e5:86:71:7a:15:a4:98:06:cf:2d:d2:06:65:74:92:a1:87:4f:
         a2:da:9d:1e:a4:1f:ca:f5:d5:69:ec:95:5c:5a:6b:e7:b9:b7:
         74:e6:d3:96:f0:50:2a:eb:ff:95:cb:bb:2a:4e:e5:1f:21:dc:
         a5:9c:3a:29:dd:42:10:b9:e5:60:52:0c:31:98:17:1b:64:5b:
         a9:7f:9f:48:a5:80:be:fc:cd:bd:73:f0:0c:27:db:61:b3:3d:
         43:6e:a7:bc:a7:a1:7f:01:2e:ca:3d:c0:1c:b4:ff:30:f1:2c:
         07:5f:89:e5:67:6d:60:24:43:e5:5d:99:b7:d2:93:e4:56:c8:
         56:3d:6f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:34:20 2026 by rpki-client