Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/2acb2416-ab76-3ae2-80f7-a1fe3e88b340.roa
File:                     2acb2416-ab76-3ae2-80f7-a1fe3e88b340.roa (raw, json)
Hash identifier:          sHOMw3XJhX+I2JsZk9P1XxuvVvtEAMPXHHrwU44AGJY=
Subject key identifier:   F8:23:E1:2A:3D:DC:ED:9A:B3:8B:10:B4:45:A2:4B:2C:51:1D:FC:62
Certificate issuer:       /CN=24f82d36-633a-44e0-9b31-a523e1609720
Certificate serial:       010D0C9F4328584F1897C1EBA70F46F22EF41500
Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/2acb2416-ab76-3ae2-80f7-a1fe3e88b340.roa
Signing time:             Mon 07 Sep 2026 13:00:12 +0000
ROA not before:           Mon 07 Sep 2026 13:00:12 +0000
ROA not after:            Sun 06 Dec 2026 14:00:12 +0000
asID:                     20001
IP address blocks:        64.16.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:97:c1:eb:a7:0f:46:f2:2e:f4:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720
        Validity
            Not Before: Sep  7 13:00:12 2026 GMT
            Not After : Dec  6 14:00:12 2026 GMT
        Subject: CN=c713965c-a175-42a8-9894-490dea0bc258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9d:97:28:43:c0:87:a0:cd:ff:87:39:f0:6e:
                    20:14:58:14:46:17:4a:7b:2f:b9:d8:66:01:14:f2:
                    b1:9b:1c:11:9c:87:fd:d4:ac:61:e9:94:4e:47:7a:
                    0e:11:42:55:85:34:aa:18:ec:1f:e0:c3:d9:f9:5e:
                    b4:82:ad:87:bb:a1:63:d5:16:1f:ae:19:57:72:d5:
                    d0:f3:59:27:da:4e:c4:df:4d:af:09:42:18:4d:2a:
                    b7:3d:9a:0b:88:cd:ec:bf:c8:d3:eb:95:94:9b:4a:
                    e8:f2:5d:2a:7a:b1:ed:55:ed:ef:47:f7:fc:02:6e:
                    d7:7a:ae:7c:f8:a3:50:92:16:59:31:bc:4c:a2:91:
                    fb:d4:d4:22:fb:df:7d:ee:b2:9d:05:fd:71:8a:83:
                    c0:b2:5d:24:6f:56:3f:cd:23:10:5a:47:4a:8e:e9:
                    b6:6d:31:6d:a4:48:41:81:8f:15:99:c6:b6:61:ce:
                    d4:05:71:31:f1:73:90:b4:04:af:44:4a:3e:53:46:
                    58:01:d7:92:ed:ec:1d:91:36:77:4a:7d:56:8f:f1:
                    2a:71:13:6d:95:27:f9:16:f0:34:c0:e7:15:ab:8f:
                    31:0f:2c:7f:f0:50:e2:3a:7e:f7:66:55:4e:16:ff:
                    79:10:de:14:ca:a5:a8:47:49:2c:0e:6c:54:a7:ad:
                    17:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:23:E1:2A:3D:DC:ED:9A:B3:8B:10:B4:45:A2:4B:2C:51:1D:FC:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/2acb2416-ab76-3ae2-80f7-a1fe3e88b340.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl

            X509v3 Authority Key Identifier:
                keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.16.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:1f:53:33:0e:07:9b:3d:03:16:08:93:8a:51:a3:47:8d:d8:
         7e:45:ab:44:6a:70:01:96:24:a4:96:53:f4:31:38:6c:92:2d:
         59:83:95:fc:cc:0d:db:09:03:d3:d4:57:b2:fd:b2:40:34:9f:
         5d:e3:af:4f:3e:1f:e6:13:c6:7b:e5:67:5a:cc:8f:69:57:95:
         41:87:12:6f:3b:32:99:5b:7f:fc:0f:b1:e4:15:db:fb:af:5d:
         6a:db:b7:ae:2c:48:ee:b1:30:f3:94:0f:e1:f4:de:86:03:ca:
         57:c8:9c:8b:a4:d2:04:3e:87:3c:06:b9:b4:7a:74:9e:3b:86:
         d4:6b:ff:56:74:4d:e1:aa:bd:f5:8e:be:7c:26:fc:c3:6b:40:
         4e:f7:01:c6:6b:0e:3b:9a:fb:49:b9:c7:d0:9e:ab:57:0c:c2:
         2c:69:b3:fa:f1:af:a3:b7:f3:1b:e7:aa:25:58:ba:b2:63:90:
         ae:cd:6e:10:ea:0e:c8:a8:d2:d3:c6:9e:fc:7e:f7:f0:2f:21:
         d6:7a:b6:fc:33:54:fb:78:f0:b6:d5:cb:19:6d:68:3c:92:f5:
         ca:d5:07:16:55:00:4f:86:4b:42:12:21:45:77:29:70:f4:f5:
         63:29:4c:e0:79:bf:d2:98:2e:1c:5a:a4:da:69:38:8a:3c:32:
         75:80:97:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 01:15:39 2026 by rpki-client