Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/c8516651-6d0b-32c2-a5fb-1fb6d889e203.roa
File:                     c8516651-6d0b-32c2-a5fb-1fb6d889e203.roa (raw, json)
Hash identifier:          LKnOvyIUIqUPNYybOqQ/id5113WHNKBCttJlksg8z6A=
Subject key identifier:   11:FF:2C:F9:53:02:70:DF:B0:2E:60:9C:7D:03:4F:EE:48:34:D1:0A
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584F3E47E2268BBA6AF96F66E4E0
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/c8516651-6d0b-32c2-a5fb-1fb6d889e203.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     3561
IP address blocks:        208.166.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:47:e2:26:8b:ba:6a:f9:6f:66:e4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=6bbf1779-1ec4-4d87-8127-ff59a014f145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b0:d9:3a:b4:47:0d:ce:ef:a0:54:b6:ca:81:
                    64:31:45:48:a7:37:b5:67:fc:94:ec:1a:92:e5:b0:
                    bc:af:70:62:0a:0b:b3:35:2c:cc:29:e1:a1:37:f5:
                    db:83:00:cb:e1:60:21:b9:8b:6b:89:b5:54:91:30:
                    5f:09:dd:79:1c:d4:81:e4:eb:fc:3a:71:ba:f4:99:
                    0d:df:aa:37:5c:66:d7:e2:89:92:55:d8:d6:7b:93:
                    ab:af:4e:2e:08:6e:b3:17:47:f2:ac:b9:59:86:9f:
                    72:8c:a3:20:2d:f7:8b:5e:67:25:f7:a2:04:9c:ac:
                    4c:4e:51:e0:6b:6f:fa:05:7c:f4:ee:39:5d:c3:c6:
                    6b:51:f3:f3:d7:62:a9:f5:46:b8:0d:30:5b:f4:10:
                    f9:cd:b1:e9:54:e3:1b:84:d0:7b:4d:d2:f1:c0:8a:
                    cc:ee:a5:85:61:5a:d8:b9:c2:dd:99:e1:fc:62:0a:
                    88:68:e9:b4:ff:cf:83:d6:89:03:c9:d3:bb:6a:a0:
                    76:12:ab:40:55:e9:96:db:51:6d:35:a3:a3:9c:cc:
                    fe:46:ca:2c:6f:5a:90:ef:6f:3f:25:a3:fb:e5:bd:
                    2b:b4:0b:c9:1a:a4:87:29:fa:f0:23:17:3b:08:0f:
                    2b:a1:1e:0c:13:4c:e5:b5:4a:d2:b0:a0:80:18:0b:
                    98:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:FF:2C:F9:53:02:70:DF:B0:2E:60:9C:7D:03:4F:EE:48:34:D1:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/c8516651-6d0b-32c2-a5fb-1fb6d889e203.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.166.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:4b:80:3a:6a:0d:a7:9e:e1:8a:15:f2:49:3d:f4:d7:6e:88:
         c0:7d:7f:7d:73:48:8e:a8:85:4c:74:b1:d4:72:b5:46:b0:81:
         e8:fa:1a:d3:af:0c:08:f8:d3:21:10:ed:c9:21:e2:e0:e2:e5:
         cd:3d:0b:b0:c5:b9:1e:12:1e:71:51:0e:ac:ec:6e:6e:8c:d4:
         31:f8:da:e0:4a:5a:2c:13:28:95:1c:76:2a:8f:c3:58:86:b7:
         f6:20:d2:dd:50:18:8b:12:6d:72:e8:ad:45:54:2b:db:0b:05:
         41:04:97:fc:25:a9:89:22:38:af:ea:ca:7e:11:3f:e3:14:8a:
         ea:fb:04:a3:f1:db:5f:9d:c0:ef:18:ec:1e:31:29:ec:16:41:
         fa:45:09:91:72:88:f2:21:a1:5b:f8:49:b3:88:09:73:03:e4:
         2c:d3:21:47:10:d8:62:f2:0d:69:5d:f7:22:8e:2b:6e:bf:b6:
         a8:dd:f5:3b:a8:78:71:71:01:34:2f:bd:14:53:d8:f0:85:e2:
         87:4c:b5:0c:c7:9a:79:ed:91:98:ba:16:1a:b8:fd:a5:a1:99:
         31:48:0a:92:39:bb:bf:32:54:44:a3:bd:a6:b3:4f:da:5d:17:
         4a:3c:47:9e:ef:0e:b4:42:26:ce:da:63:7d:c2:d3:6e:7f:a4:
         22:84:38:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:08:28 2026 by rpki-client