Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/0b865a74-43ce-357e-8858-73c4efd70945.roa
File:                     0b865a74-43ce-357e-8858-73c4efd70945.roa (raw, json)
Hash identifier:          inXhTJii6hL3g0hPUhWlLD3iJXQn1yQs1AaPlNe5ZGA=
Subject key identifier:   F1:A5:60:C3:3E:53:F5:8B:EA:31:E9:16:B3:25:19:BE:11:92:E4:B8
Certificate issuer:       /CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566
Certificate serial:       010D0C9F4328584EF87CBF998F5DFFC3511559EC
Authority key identifier: D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/0b865a74-43ce-357e-8858-73c4efd70945.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     40501
IP address blocks:        216.235.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:bf:99:8f:5d:ff:c3:51:15:59:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=1a663557-9e0f-4697-b539-a07f7d741340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b9:f8:99:90:34:98:44:64:d0:56:52:e2:14:
                    d2:44:ce:9e:63:77:88:05:3a:f1:dd:9d:8e:8a:e7:
                    66:97:84:9e:53:fd:9f:cf:4f:af:38:83:18:73:2b:
                    85:9d:d4:7f:06:41:a7:7b:a5:76:d3:2d:58:9d:07:
                    36:61:2a:79:72:ec:d3:fd:4c:1c:83:32:03:47:66:
                    73:ad:c6:ef:01:b4:2a:8e:77:7f:2e:1b:1a:19:91:
                    c9:3a:44:f8:f8:7f:ba:04:b2:1f:5d:cc:e5:fe:18:
                    a4:5f:95:ad:9b:23:1b:e6:91:83:df:43:ea:28:9f:
                    45:bc:c9:58:42:7d:cd:16:78:f5:06:9a:e1:11:44:
                    a8:d9:15:36:9b:65:ef:d5:d4:6e:f8:b8:d8:c6:bd:
                    56:ad:26:93:fc:df:e4:f0:8e:93:74:14:95:fb:4e:
                    44:38:7e:83:7e:ec:82:df:a9:d1:54:ac:4e:e7:70:
                    56:e6:db:af:85:f3:0d:22:6c:68:c3:a2:77:cc:83:
                    89:ca:1c:87:3c:82:43:96:de:64:95:52:17:2c:34:
                    29:b4:69:e3:d8:55:f5:88:c0:e3:d4:7e:8a:33:5b:
                    b5:24:6d:96:48:71:dd:49:95:56:cd:66:61:93:79:
                    3c:40:dc:af:77:d2:8a:35:7c:b7:45:3f:1d:74:ca:
                    78:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A5:60:C3:3E:53:F5:8B:EA:31:E9:16:B3:25:19:BE:11:92:E4:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/0b865a74-43ce-357e-8858-73c4efd70945.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl

            X509v3 Authority Key Identifier:
                keyid:D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.235.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:d4:aa:81:03:1c:79:c3:29:29:03:a2:6e:17:ce:07:62:1d:
         e9:86:b9:17:3f:31:0c:25:88:98:95:a8:c8:a5:c2:91:4a:0d:
         0b:09:bd:6b:74:5e:98:e0:3a:74:56:67:80:93:9f:96:9d:b8:
         c4:78:fd:fc:da:88:d8:1b:a2:13:d1:8e:fb:c8:cd:6a:9f:e1:
         31:35:d1:7f:f0:84:ec:ca:75:61:5f:c7:0e:ca:b3:81:05:e6:
         36:90:20:a5:12:b6:04:38:e6:df:51:41:1c:04:19:6a:42:8d:
         05:d3:2b:da:d6:f4:9d:d7:3c:70:2f:79:95:06:46:a7:53:1f:
         ee:2e:c8:b3:f8:ed:02:85:11:44:44:e0:ac:82:ca:29:c7:84:
         7c:66:0c:54:66:ba:70:eb:ce:35:f1:c6:0c:25:27:fd:b0:78:
         e2:7f:66:e8:d4:76:18:16:c9:77:a8:c1:e1:c2:a6:01:f6:d6:
         da:f4:01:46:47:a4:0b:70:e9:c2:e7:83:2e:4f:aa:32:a8:99:
         3e:0a:d7:e1:b2:48:12:ec:ca:46:40:d7:9e:65:74:55:fb:8e:
         3a:19:fc:40:16:7a:93:2a:d5:c8:41:d0:3e:f3:eb:97:11:31:
         c9:e4:d2:c4:0f:c1:b8:39:61:28:9e:40:70:47:05:8b:81:d1:
         b6:60:cd:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:07:23 2026 by rpki-client