Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/eeb5fe65-95ab-36ae-b689-0312ac3e57a9.roa
File:                     eeb5fe65-95ab-36ae-b689-0312ac3e57a9.roa (raw, json)
Hash identifier:          CqajGdwI7l32AqMi/y2WqxljvWlr771/swH2CgpT1xs=
Subject key identifier:   9A:EA:07:38:66:B6:3A:F2:42:B0:DE:C0:C2:E3:C3:02:C7:E2:7C:92
Certificate issuer:       /CN=5ddbca9a-960e-43a1-a865-f0c100d0fc7a
Certificate serial:       010D0C9F4328584F498A26D82E92444476BDB1C0
Authority key identifier: 0A:3B:70:84:88:05:6E:BB:E4:7F:9E:4C:EE:37:E2:8F:53:7C:BE:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/eeb5fe65-95ab-36ae-b689-0312ac3e57a9.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30313
IP address blocks:        152.216.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:26:d8:2e:92:44:44:76:bd:b1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ddbca9a-960e-43a1-a865-f0c100d0fc7a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=95ab82df-67af-417f-ac63-ba0c2b4a36dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:5b:ba:5e:b3:23:0c:99:51:27:8d:e1:5e:26:
                    52:0f:c8:a8:bf:cb:97:e5:9d:37:91:6a:1a:90:11:
                    59:bf:a6:7d:e0:6c:87:7a:08:b3:65:b1:74:b7:35:
                    86:a4:ca:1f:23:7d:6d:30:5a:8a:47:6c:7a:72:11:
                    af:30:c3:ff:6d:cf:b7:c6:30:f4:8d:d6:93:de:21:
                    fa:f9:1b:8c:92:35:62:92:42:1b:9b:08:a9:2c:91:
                    6b:27:a0:ab:af:8a:e9:5e:b5:3f:5f:59:21:a3:d1:
                    b6:25:2b:08:fe:eb:cc:c1:d5:6d:ea:48:21:cc:b1:
                    4e:76:71:50:5c:28:6e:38:d8:4b:59:d4:d6:a3:8c:
                    32:b0:88:e5:73:6f:7c:cd:57:8f:b0:4c:da:20:bd:
                    81:ed:ca:de:7a:47:67:0c:50:d1:d4:b8:d9:77:45:
                    0b:7d:e9:be:7a:5b:da:51:05:d6:66:d5:42:63:b1:
                    00:6c:b7:c1:0f:59:23:b3:94:92:97:01:eb:a2:85:
                    c3:2c:f8:0d:6a:78:8b:80:34:e6:3a:0e:5d:f5:9b:
                    c9:ec:1f:c7:bf:c4:3a:a7:97:0e:2f:77:75:d0:c3:
                    e2:70:99:3e:42:65:49:5e:a0:4f:eb:57:c8:bb:76:
                    85:a9:23:e3:36:6b:02:59:67:d5:96:83:f6:82:29:
                    e4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:EA:07:38:66:B6:3A:F2:42:B0:DE:C0:C2:E3:C3:02:C7:E2:7C:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/eeb5fe65-95ab-36ae-b689-0312ac3e57a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:3B:70:84:88:05:6E:BB:E4:7F:9E:4C:EE:37:E2:8F:53:7C:BE:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.216.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:03:d4:b8:4e:0f:d4:d9:18:3c:27:cd:bd:30:2f:ca:47:7d:
         59:23:79:bb:dd:b6:c7:a7:6d:38:d2:47:3e:14:15:d8:5d:ea:
         84:a6:74:e3:91:ba:25:6d:de:55:d5:dd:39:a2:5e:ff:67:cf:
         34:28:6f:50:39:ba:17:f6:cf:7f:77:91:cb:35:22:bd:f2:2a:
         9f:0a:d2:91:61:3d:06:80:d1:c2:72:e0:59:81:1d:5c:ee:bc:
         69:fd:ec:81:6e:81:d5:31:f3:f6:3f:60:5b:9f:94:8b:51:cd:
         08:be:8b:e4:f0:ba:81:ca:2c:d8:ce:34:bc:fa:5d:71:b9:ab:
         96:33:9d:70:17:86:dc:a2:b3:97:77:85:5c:9c:95:d7:09:8a:
         a7:a8:61:6b:74:bf:d3:ae:72:2d:2f:d8:b2:a5:de:fe:c4:4e:
         ff:e8:22:70:28:49:51:3e:51:70:d6:77:63:09:74:c2:97:ed:
         29:e1:f3:90:42:a6:62:a8:96:e1:eb:82:ad:b7:f1:72:90:f3:
         05:61:0b:0f:62:fa:71:58:62:20:a2:92:7c:fd:32:72:f4:3b:
         00:b0:c2:4c:f8:e2:83:8a:ec:c7:5c:0b:a1:d0:9e:d1:b9:4b:
         64:c2:5d:83:29:24:34:7e:79:36:72:6a:90:f9:4b:6a:da:32:
         39:be:3c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 17:35:49 2026 by rpki-client