Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/2613f3f7-60d2-3644-87f5-381f608c7546.roa
File:                     2613f3f7-60d2-3644-87f5-381f608c7546.roa (raw, json)
Hash identifier:          5CZjr7+C/44ljVppE9AGvR40MlHU6osh+qm2CF4DbpY=
Subject key identifier:   BD:B9:D9:DD:DF:46:8D:97:60:FB:B8:3C:D5:51:75:B3:3E:7A:C0:0B
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584F14679430E0C298C375A9E1D5
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/2613f3f7-60d2-3644-87f5-381f608c7546.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     16509
IP address blocks:        216.157.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:94:30:e0:c2:98:c3:75:a9:e1:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=2727bc84-bb1e-49fc-b3cd-c80590736cbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:55:1f:cd:ab:16:2a:19:9e:98:0c:83:66:1a:
                    81:3b:77:95:0c:9e:a1:0f:af:ae:87:98:b1:cf:83:
                    41:52:72:ff:8c:11:e9:b7:22:c6:db:92:c0:f0:d9:
                    ed:6c:35:8a:56:9b:53:19:d6:8e:30:dd:36:65:38:
                    fa:87:53:42:c2:65:d6:5c:e6:e2:c5:f8:32:f5:6a:
                    53:1b:c0:bb:61:b0:8a:ee:9b:74:01:07:3c:a5:13:
                    0f:de:51:db:99:ec:a8:7a:f3:c3:63:45:29:41:a8:
                    8d:6f:ff:81:b4:d6:e8:fe:5e:ba:3a:b8:6d:f1:0a:
                    51:c3:92:92:21:9b:fb:4c:36:47:1a:4f:eb:98:38:
                    d6:59:44:77:4a:6c:67:92:1d:e2:aa:97:a0:c5:b6:
                    a6:4c:04:74:b1:5e:5e:fe:35:b4:4d:55:14:e3:6e:
                    70:90:6f:64:d9:0f:c9:cf:d2:5c:e9:d6:52:d9:b6:
                    7b:7c:fe:e9:06:09:98:95:2e:3b:1c:26:cc:ff:26:
                    ba:be:23:32:c8:08:41:52:22:70:fe:b1:a6:69:5d:
                    6d:95:25:3d:2d:49:07:26:ec:db:20:58:bc:b0:43:
                    08:a5:17:3e:e5:84:71:0d:1e:f5:31:05:d9:6c:42:
                    90:c7:32:9d:a5:f9:bb:74:bd:67:29:fe:36:7b:67:
                    f9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B9:D9:DD:DF:46:8D:97:60:FB:B8:3C:D5:51:75:B3:3E:7A:C0:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/2613f3f7-60d2-3644-87f5-381f608c7546.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.157.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:fb:55:73:31:ae:eb:65:0d:59:da:17:c8:0b:11:b0:fe:c3:
         01:f2:24:e7:e8:ab:a0:c9:a7:c6:19:9e:e6:de:9c:df:c1:0a:
         3c:35:3d:5c:6a:f9:19:88:7e:a2:4f:e9:34:41:c6:a5:06:48:
         cd:20:ea:95:b1:3b:0d:09:43:39:f2:08:e3:03:8e:94:96:34:
         9a:93:9e:13:3c:95:6a:df:2e:b6:74:50:0c:42:66:fc:97:59:
         67:81:35:31:f7:99:37:3c:bb:4f:4c:13:e1:97:f7:67:06:3c:
         7e:21:61:fc:03:a8:13:4b:eb:af:1c:8d:a7:fe:39:e9:4d:ab:
         47:0f:e9:c3:bd:01:84:de:fe:93:6d:29:83:2b:e5:9e:e8:11:
         1c:b2:f9:e0:56:52:6e:15:f3:b7:9d:4e:34:2c:73:bf:0e:b2:
         c3:78:6e:d4:70:13:fc:0f:d4:b5:f8:2e:a9:df:e7:04:8a:10:
         1c:d8:85:44:b8:54:00:7c:6c:b2:22:28:72:19:6b:c3:9b:72:
         a0:68:d1:29:fa:ca:29:2b:14:c9:33:46:92:af:62:82:a9:35:
         fc:24:b9:d8:a1:a4:e0:7d:b9:30:74:29:fc:75:7a:07:93:c2:
         99:7e:8b:3c:97:de:78:ed:d2:ee:ed:5e:d2:e8:80:4f:fc:a9:
         ad:b3:e1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 14:11:50 2026 by rpki-client