Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15/8d813e67-3495-37a5-b5ea-6531a041ee5c.roa
File:                     8d813e67-3495-37a5-b5ea-6531a041ee5c.roa (raw, json)
Hash identifier:          RXWUNbh6CioQ/0Sjd92G74bIspV7Egz4CLKUk/1Z08g=
Subject key identifier:   EB:F9:8D:28:F0:61:9B:62:8E:B2:21:79:5E:54:37:AB:E8:84:9C:74
Certificate issuer:       /CN=64ec5258-02d3-4bd3-af76-7496ec09cb15
Certificate serial:       010D0C9F4328584F2ABD320CDDB1FD7BE6E42340
Authority key identifier: 3F:26:E1:4E:E0:54:4B:F6:C3:E0:F2:14:45:44:EA:0B:24:FB:D5:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15/8d813e67-3495-37a5-b5ea-6531a041ee5c.roa
Signing time:             Mon 14 Sep 2026 01:00:12 +0000
ROA not before:           Mon 14 Sep 2026 01:00:12 +0000
ROA not after:            Sun 13 Dec 2026 02:00:12 +0000
asID:                     1097
IP address blocks:        216.146.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15/64ec5258-02d3-4bd3-af76-7496ec09cb15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15/64ec5258-02d3-4bd3-af76-7496ec09cb15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2a:bd:32:0c:dd:b1:fd:7b:e6:e4:23:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64ec5258-02d3-4bd3-af76-7496ec09cb15
        Validity
            Not Before: Sep 14 01:00:12 2026 GMT
            Not After : Dec 13 02:00:12 2026 GMT
        Subject: CN=bef1819d-795e-4aac-8420-32a0550342d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:86:fb:6a:26:c9:a5:f6:7b:dd:6f:f0:83:07:
                    42:8d:32:ae:a9:5a:ba:c0:7a:f4:e7:21:a3:8d:11:
                    6a:ee:10:e0:cd:c6:4b:51:21:22:a4:c2:da:1f:d3:
                    bc:95:32:9e:16:34:29:01:b1:3d:7a:b6:f2:f8:c9:
                    f3:ec:3c:68:a4:1f:96:65:5e:c8:a3:76:50:79:49:
                    ed:b1:b5:da:70:4c:58:61:77:58:81:60:0f:e0:d2:
                    92:42:ae:42:26:f0:40:4f:a0:b7:73:f6:ce:34:7a:
                    cc:fc:0f:82:36:5e:37:1e:93:77:da:08:41:cd:40:
                    ba:d5:81:7c:ce:21:7e:49:4d:35:ba:47:b3:7e:3a:
                    86:52:77:31:3a:f7:78:a7:06:36:ab:85:52:02:18:
                    e7:4b:de:69:ee:56:79:f9:9e:df:ab:61:07:91:64:
                    b5:a6:fb:26:bc:22:7a:b5:35:75:2c:d2:91:fb:73:
                    84:ed:30:45:30:ce:b1:6b:a9:b2:cc:23:3f:34:42:
                    d8:c7:47:04:35:ac:c7:4b:b1:44:9f:25:b5:5e:42:
                    24:b6:7c:23:a4:10:6b:42:c5:ef:e3:d9:af:9b:4c:
                    69:3c:61:c2:75:b7:11:66:55:f6:72:ad:45:19:9f:
                    9d:7c:24:ee:ad:18:ed:0a:85:38:02:b9:c8:5b:46:
                    e8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F9:8D:28:F0:61:9B:62:8E:B2:21:79:5E:54:37:AB:E8:84:9C:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15/8d813e67-3495-37a5-b5ea-6531a041ee5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15/64ec5258-02d3-4bd3-af76-7496ec09cb15.crl

            X509v3 Authority Key Identifier:
                keyid:3F:26:E1:4E:E0:54:4B:F6:C3:E0:F2:14:45:44:EA:0B:24:FB:D5:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:1c:8e:80:bc:49:dd:4b:aa:2c:9b:c8:89:0b:84:9f:d9:82:
         02:d3:a8:18:42:cf:02:61:e9:f1:69:01:c0:9f:de:fb:eb:92:
         ea:54:3f:43:b5:15:0e:1f:1e:94:68:5c:ba:a1:28:58:92:8b:
         c2:47:fd:0c:77:74:34:91:a8:b7:8b:56:52:ad:bf:3b:71:c9:
         9e:a4:f9:97:38:68:33:06:84:bc:d6:dd:ea:ce:50:19:02:7d:
         64:ac:ca:2b:29:58:1d:32:5a:9d:15:35:7e:59:47:33:7c:07:
         56:40:78:fc:8b:b7:c7:5c:3f:78:00:78:87:a4:20:7e:a1:52:
         79:3d:82:84:4e:df:31:8c:a4:72:9d:74:e8:a4:e0:35:d1:9f:
         8d:8a:3f:0f:48:19:64:c4:25:a6:b8:23:be:d3:d9:f5:54:07:
         bc:56:e9:5d:d3:af:49:f9:bb:01:6c:89:0b:23:34:2d:fa:77:
         88:be:90:17:c4:74:9e:44:f1:e5:b3:16:a4:43:ff:38:9a:32:
         b6:1e:b8:94:e3:61:14:72:d4:be:f8:c5:9b:f5:e1:e0:be:6d:
         96:47:14:67:d7:55:db:37:4d:20:11:7d:ff:b2:29:f1:28:33:
         5c:3c:07:94:83:0a:aa:23:93:f1:dc:98:ed:f4:fe:fc:0a:50:
         c7:77:02:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:57:25 2026 by rpki-client