Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f568952a-f44b-4d9f-b700-cda11a2b0488/d51c485b-aea1-37e1-8b1a-4621190d7378.roa
File:                     d51c485b-aea1-37e1-8b1a-4621190d7378.roa (raw, json)
Hash identifier:          3YFCdjS+rhcmhbigQyhmQSuCvd9DieD9rHxzwWpuqZk=
Subject key identifier:   D8:6C:74:C9:74:42:6C:32:4E:51:2C:4D:02:E5:C7:D1:04:A2:CB:05
Certificate issuer:       /CN=f568952a-f44b-4d9f-b700-cda11a2b0488
Certificate serial:       010D0C9F4328584F1FC1EF09797528EB10231820
Authority key identifier: 21:7F:1D:16:D1:F2:E9:46:1C:7D:6E:47:F8:01:AC:22:8B:95:AA:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f568952a-f44b-4d9f-b700-cda11a2b0488.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f568952a-f44b-4d9f-b700-cda11a2b0488/d51c485b-aea1-37e1-8b1a-4621190d7378.roa
Signing time:             Thu 10 Sep 2026 02:36:16 +0000
ROA not before:           Thu 10 Sep 2026 02:36:16 +0000
ROA not after:            Wed 09 Dec 2026 03:36:16 +0000
asID:                     396982
IP address blocks:        216.71.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f568952a-f44b-4d9f-b700-cda11a2b0488/f568952a-f44b-4d9f-b700-cda11a2b0488.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f568952a-f44b-4d9f-b700-cda11a2b0488/f568952a-f44b-4d9f-b700-cda11a2b0488.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f568952a-f44b-4d9f-b700-cda11a2b0488.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1f:c1:ef:09:79:75:28:eb:10:23:18:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f568952a-f44b-4d9f-b700-cda11a2b0488
        Validity
            Not Before: Sep 10 02:36:16 2026 GMT
            Not After : Dec  9 03:36:16 2026 GMT
        Subject: CN=2af6dad0-13af-4577-a266-ba65d9de597a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ac:aa:ac:e1:ff:e3:31:15:c2:ae:7f:9e:13:
                    eb:88:55:52:57:5b:86:1b:12:cb:fd:4b:fb:d3:cb:
                    a8:70:56:ac:ff:1c:4a:14:dc:8a:c4:95:55:37:2a:
                    b6:1d:c2:d8:99:e4:b0:b9:9b:cf:6d:95:13:50:70:
                    ca:60:64:25:99:b1:e4:df:57:24:e9:01:7b:f1:2a:
                    b7:29:1a:5d:85:18:6c:61:9e:bb:3d:b7:1e:b6:29:
                    5a:b0:32:1b:5c:71:8d:a8:34:3f:21:36:b1:56:96:
                    57:44:9f:46:b7:bc:d1:8e:72:14:fa:6a:b5:02:65:
                    e4:96:d3:38:31:b2:cf:f0:47:2e:37:0b:a1:b7:4a:
                    8b:c3:99:46:36:54:a0:9d:70:c2:5b:f9:15:d3:75:
                    75:52:37:39:86:04:7d:c0:cc:f4:f7:d1:7d:90:db:
                    57:b1:97:3c:f3:ef:6d:54:07:fc:bc:e3:71:6c:36:
                    cc:4f:04:3c:1d:bb:af:0c:3d:f2:17:97:fa:7d:b4:
                    08:a1:92:27:90:84:47:45:c3:7e:8e:2f:dc:33:1a:
                    95:48:03:3a:92:19:73:cd:da:ef:00:48:93:4c:1c:
                    d6:14:d2:0c:52:c3:3f:0f:93:85:63:b8:ad:4c:d8:
                    8c:b9:9f:64:52:28:98:c4:0f:60:86:b5:9d:52:52:
                    07:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:6C:74:C9:74:42:6C:32:4E:51:2C:4D:02:E5:C7:D1:04:A2:CB:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f568952a-f44b-4d9f-b700-cda11a2b0488/d51c485b-aea1-37e1-8b1a-4621190d7378.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f568952a-f44b-4d9f-b700-cda11a2b0488/f568952a-f44b-4d9f-b700-cda11a2b0488.crl

            X509v3 Authority Key Identifier:
                keyid:21:7F:1D:16:D1:F2:E9:46:1C:7D:6E:47:F8:01:AC:22:8B:95:AA:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f568952a-f44b-4d9f-b700-cda11a2b0488.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.71.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:9b:db:1b:e2:e7:84:a7:32:54:4d:ea:9f:7a:85:cb:bd:be:
         f6:6a:cd:7d:98:14:18:e2:02:e8:6a:67:4d:d3:e6:1d:d4:a8:
         90:aa:59:19:44:31:79:0b:63:e1:59:f2:17:84:12:73:36:84:
         d2:0b:bd:49:02:7b:47:6e:99:62:f4:ad:e0:b6:6f:a6:65:8e:
         11:9a:9c:d8:e8:89:4e:48:a6:e7:de:bd:6e:f6:cf:1d:ea:99:
         9b:f9:ac:b2:1e:d4:b2:85:87:42:fa:11:d5:52:14:24:dd:bf:
         ba:86:83:79:8b:23:21:76:29:df:3c:06:6f:4f:a3:6f:39:15:
         db:0f:1a:52:86:a3:7d:ee:b2:e9:3c:c0:4b:37:d7:d8:44:a2:
         45:3a:57:22:b6:03:ce:a4:da:21:53:d4:87:b0:a0:6c:54:1a:
         40:46:85:ef:e4:ae:55:b3:94:c4:20:5f:4c:75:cb:ed:fe:0c:
         34:98:04:fc:5b:ec:ac:97:66:09:1d:a9:eb:f3:b2:9b:27:89:
         39:a9:46:2e:99:e9:e5:31:5b:d2:40:90:de:b1:37:45:bc:36:
         45:06:8e:93:18:a4:40:1c:ad:4a:e6:e9:24:fd:36:ce:0b:a0:
         89:f1:74:6d:8c:a8:5a:90:76:ac:d9:76:e0:ca:46:a1:05:47:
         b8:91:4e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:07:10 2026 by rpki-client