Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/cd011bcd-5b47-3a26-a048-12e973e67b5f.roa
File:                     cd011bcd-5b47-3a26-a048-12e973e67b5f.roa (raw, json)
Hash identifier:          gGSww/R1oiBzjigNzeNcRavkYwqhi+wFzYvOTUlxGvM=
Subject key identifier:   5B:FE:D9:55:81:99:1C:FD:C7:D1:2F:8F:95:ED:49:EE:5C:DE:63:09
Certificate issuer:       /CN=e4fdf8c6-f91a-494f-99e5-526e6fffeebe
Certificate serial:       010D0C9F4328584F4973C01A68AC311FD508B1D6
Authority key identifier: 6A:7D:86:AE:89:46:EB:FC:95:A3:31:31:15:03:35:D5:52:C0:41:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/cd011bcd-5b47-3a26-a048-12e973e67b5f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     53334
IP address blocks:        216.59.58.96/27 maxlen: 27
                          216.59.58.128/27 maxlen: 27
                          216.59.58.160/27 maxlen: 27
                          216.59.58.192/28 maxlen: 28
                          216.59.58.208/28 maxlen: 28
                          216.59.58.224/27 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:c0:1a:68:ac:31:1f:d5:08:b1:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4fdf8c6-f91a-494f-99e5-526e6fffeebe
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=faccb8a2-ba69-493c-bced-99a71fee80d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:85:ab:d4:60:19:41:fa:af:45:ff:64:cd:04:
                    83:0a:c6:f0:42:bc:5f:31:c6:4c:b7:c2:72:33:43:
                    d6:e0:2e:44:b1:15:68:8d:f7:bf:e4:72:8f:50:cd:
                    42:d4:58:82:73:da:64:7c:ac:21:0e:9e:62:25:74:
                    49:72:43:53:87:f3:f5:9b:97:e1:94:01:62:6f:55:
                    14:85:b4:6b:29:b8:bc:41:46:7f:58:46:1c:d5:f7:
                    81:41:23:a0:5c:2a:92:3e:da:72:6e:eb:4e:51:e5:
                    26:61:9a:7c:1a:92:2b:21:70:04:b5:71:5c:27:27:
                    f2:cf:a3:33:a9:ad:6d:62:a3:e9:b5:e0:c1:d8:db:
                    7c:4b:eb:83:bf:fb:57:09:f0:48:a0:6f:d4:78:04:
                    1a:a4:64:44:f1:26:db:7e:b6:eb:e2:e6:61:ab:5e:
                    9e:d4:04:e5:0e:ed:e3:8c:80:c9:ed:37:09:ff:e3:
                    1c:9f:b7:b5:a1:2a:4f:77:55:4a:1b:1f:40:2b:60:
                    54:50:51:08:c3:51:e9:40:b0:34:87:50:ad:8a:ef:
                    cd:8d:33:de:af:72:52:e2:f0:4d:6d:55:c7:cd:64:
                    6a:fe:f2:92:5f:48:ed:23:37:9a:65:1c:72:b8:1f:
                    34:46:a5:40:61:22:3f:67:21:11:5d:14:a9:b2:31:
                    d8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:FE:D9:55:81:99:1C:FD:C7:D1:2F:8F:95:ED:49:EE:5C:DE:63:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/cd011bcd-5b47-3a26-a048-12e973e67b5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.crl

            X509v3 Authority Key Identifier:
                keyid:6A:7D:86:AE:89:46:EB:FC:95:A3:31:31:15:03:35:D5:52:C0:41:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.59.58.96-216.59.58.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:3f:5e:ab:54:49:a2:10:65:17:33:09:16:fc:df:28:21:38:
         90:f7:81:df:b0:ef:3e:8c:7b:36:20:93:2f:dc:4d:13:b4:33:
         9a:ca:39:18:dc:6c:41:a4:6d:c7:a0:d1:bd:a6:08:cc:c3:a6:
         1d:7f:69:d6:5f:a9:b3:49:1a:31:7b:e5:04:d0:9f:b5:c9:f3:
         53:b0:9d:40:00:e8:70:09:d1:18:7e:e4:70:b0:e6:c5:65:81:
         26:60:70:74:f9:a5:9b:c3:05:a4:e1:90:ae:fc:e2:92:fd:32:
         a3:39:07:cc:8e:80:c3:b9:0e:a0:01:15:cb:25:c2:8f:dc:61:
         f4:a0:04:b3:a3:f7:c8:8e:39:9e:d3:0e:66:c6:13:89:7e:1d:
         55:cb:17:3a:eb:74:77:3f:8f:85:cc:69:87:07:98:db:95:e0:
         a4:40:b9:94:63:27:8a:45:3e:dd:e3:7b:82:4f:64:c5:c8:35:
         0f:87:53:b3:73:f8:b4:bf:49:63:90:a0:01:f9:3e:cc:cd:aa:
         a5:2d:69:73:1a:b8:01:47:55:db:74:6c:e8:eb:7d:1c:86:39:
         d5:86:97:97:62:ce:8f:35:8c:88:d8:69:4f:a2:ac:f6:d5:d6:
         78:28:4d:2c:6a:eb:98:7f:15:14:30:d4:cd:0b:e0:a2:75:bd:
         9d:74:44:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 22:23:46 2026 by rpki-client