Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/a475cb48-33a4-3db1-a4b2-107d2c630165.roa
File:                     a475cb48-33a4-3db1-a4b2-107d2c630165.roa (raw, json)
Hash identifier:          +PkouLt5dkxJkObElPuVixqcAQSC1pK7nLZBal4Q3WA=
Subject key identifier:   18:B9:A3:06:04:81:6F:E6:BE:FF:82:90:4E:B2:10:F3:74:42:9B:5E
Certificate issuer:       /CN=4931e717-c1d1-4dd8-863d-5c06fb76f47b
Certificate serial:       010D0C9F4328584F4972ED8C39EC1FF8C8322AA0
Authority key identifier: CE:42:FE:71:11:71:C3:49:1B:8D:B6:7B:74:E4:1F:4F:E2:91:DE:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/a475cb48-33a4-3db1-a4b2-107d2c630165.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     21713
IP address blocks:        216.14.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:ed:8c:39:ec:1f:f8:c8:32:2a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4931e717-c1d1-4dd8-863d-5c06fb76f47b
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=c7135e6d-ecdd-47ee-85e1-9c4aa1641068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7a:18:d8:c7:a3:db:26:67:6d:42:70:e0:dd:
                    cc:20:a9:f0:67:56:ee:8c:b2:92:d4:1e:1f:5b:80:
                    44:a7:80:2e:f3:05:b4:df:0a:7e:28:44:62:61:99:
                    61:07:97:7d:9a:bd:85:d9:3d:96:06:66:78:25:ef:
                    ce:a9:31:9c:03:65:70:7c:c6:ca:80:15:73:fe:7a:
                    4a:bf:25:c1:a7:c3:87:0a:51:cf:e8:2e:8f:16:9f:
                    08:60:1b:67:df:5e:dd:6f:c2:2e:1a:d4:8b:d1:4e:
                    b9:62:4e:f4:d6:c6:5c:40:36:90:3a:3c:0e:24:88:
                    d1:27:c1:a8:16:59:fc:f0:fd:f3:52:29:44:2a:1a:
                    4f:ed:50:d2:63:93:cd:13:a6:37:44:a8:1d:c1:bb:
                    61:73:bf:dd:a2:de:5d:7b:9d:4b:15:81:7a:1c:74:
                    e8:ab:17:37:64:5f:77:0d:c6:00:f5:d7:94:46:27:
                    8c:ec:54:a6:56:7d:c9:aa:3c:b7:57:85:6d:ad:f6:
                    e4:77:94:fb:ac:32:43:ca:e9:4f:37:26:24:90:67:
                    e7:e9:a4:64:53:68:85:9e:12:a0:dc:58:6f:a9:19:
                    3d:57:c4:12:fa:7b:1a:ea:b4:07:13:73:b0:93:8f:
                    46:36:73:60:a6:91:5f:ef:69:62:ea:85:fd:57:b9:
                    67:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B9:A3:06:04:81:6F:E6:BE:FF:82:90:4E:B2:10:F3:74:42:9B:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/a475cb48-33a4-3db1-a4b2-107d2c630165.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.crl

            X509v3 Authority Key Identifier:
                keyid:CE:42:FE:71:11:71:C3:49:1B:8D:B6:7B:74:E4:1F:4F:E2:91:DE:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.14.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:b1:89:ff:8a:7f:98:41:f8:d9:61:98:9d:01:d9:46:e5:d9:
         f9:d9:77:43:b6:b8:71:e6:3f:57:cb:bc:0f:69:ec:30:9a:0b:
         d1:68:e3:60:ec:78:32:73:52:ba:78:dc:cc:2f:83:63:0e:d4:
         7c:c8:85:64:60:60:63:35:70:c2:63:21:4c:2a:60:33:6c:90:
         af:ee:73:fb:72:30:02:13:30:0c:0a:9a:27:9d:64:21:31:1e:
         47:9a:fc:ee:d6:4a:a0:41:75:91:69:08:ad:9a:d8:57:8b:fa:
         11:9c:f6:65:b0:73:3b:42:3e:01:b9:f6:74:be:b5:06:21:10:
         dc:70:29:bf:7b:97:21:59:fb:43:59:1e:1c:2b:79:8f:d1:f3:
         16:aa:05:c9:c6:3e:fb:35:f9:40:4a:d4:79:46:49:93:2f:5f:
         3a:2c:1a:cb:03:7b:9e:71:38:91:eb:80:9d:05:d5:30:4b:87:
         cf:56:fc:7f:3b:b6:4e:7f:f9:5c:bc:7a:9d:d3:99:d2:0e:89:
         61:06:c6:25:a5:5b:f2:65:30:f1:74:95:e3:03:1e:a8:e5:b3:
         17:2e:10:1b:19:7f:0c:e1:01:38:e0:49:84:25:07:3e:ae:25:
         0e:d8:23:31:1b:b9:2c:d8:ed:68:ec:1c:6a:63:60:ff:24:21:
         61:c7:e6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:28:36 2026 by rpki-client