Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0bd6dde5-c227-3d16-a605-4687e4da9f84.roa
File:                     0bd6dde5-c227-3d16-a605-4687e4da9f84.roa (raw, json)
Hash identifier:          KK3GVmb00WqLN0T8Hrj0CbUiqOBFyDVEGfRbjjOMv0k=
Subject key identifier:   82:B9:6D:5A:53:2B:CE:59:8C:55:1C:47:B0:0D:6D:6B:F1:04:BD:E4
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584F4989F0A8633CF6E978308F80
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0bd6dde5-c227-3d16-a605-4687e4da9f84.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     23473
IP address blocks:        216.171.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:f0:a8:63:3c:f6:e9:78:30:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=343c1239-cdca-450a-8b27-581600df5303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c0:21:74:5c:1c:0b:ab:31:f1:35:56:0f:a6:
                    db:26:53:45:82:d0:c2:a9:34:e6:fc:db:06:3e:ea:
                    d6:01:fb:43:01:18:b7:eb:b8:28:3d:57:91:be:bf:
                    90:ec:65:64:6a:4e:1a:0c:22:3e:07:52:2f:75:5d:
                    bd:7d:c1:7e:9e:99:19:bd:f6:48:e7:0e:ff:de:df:
                    39:79:61:8a:72:1c:fe:8a:18:07:d2:5f:8e:3c:93:
                    20:2b:e7:39:d9:81:7a:99:70:e9:38:b8:88:be:e6:
                    e4:73:80:7f:3f:47:64:11:18:52:6e:11:57:1e:fb:
                    41:d0:e8:52:32:53:0b:74:71:85:94:27:5b:de:ab:
                    7c:32:5b:bf:70:5d:bc:2f:a1:78:0f:2c:18:18:5c:
                    4a:e2:b3:b6:5b:ab:27:3b:f2:9b:27:7b:02:6c:70:
                    be:0b:12:68:f7:b2:08:b6:ab:dd:24:24:2d:d2:e4:
                    89:2e:b8:4b:a3:fa:6d:a2:2c:0c:5b:8e:ab:a3:4d:
                    b6:57:c7:c0:68:af:94:88:be:db:e5:ce:41:d7:7b:
                    26:86:48:3d:a4:53:cf:8f:22:47:cf:34:8e:7d:fd:
                    e8:f7:32:11:06:2b:1b:14:4c:39:b0:0b:db:f3:ac:
                    2b:5c:5b:91:52:d4:cc:bb:be:b7:f3:4f:e7:ec:06:
                    3f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B9:6D:5A:53:2B:CE:59:8C:55:1C:47:B0:0D:6D:6B:F1:04:BD:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0bd6dde5-c227-3d16-a605-4687e4da9f84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.171.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:68:b9:3a:9a:71:53:b2:b5:a2:3e:b2:56:a0:51:a3:c2:67:
         3d:5d:f6:59:9e:09:9e:2d:ef:82:d7:a5:eb:b7:75:01:31:f0:
         f5:54:0d:96:d6:cd:08:52:8f:86:ff:ec:67:73:ac:a3:b3:a4:
         eb:5b:9d:12:59:73:32:aa:6e:86:c7:50:f4:a0:1a:36:93:d2:
         5e:0f:a1:67:b0:e9:c2:3e:f7:64:eb:29:e9:2c:c1:11:5b:0d:
         00:ad:93:41:2b:0b:74:bc:c5:54:28:9c:6d:31:54:67:32:75:
         c3:67:e2:76:4b:20:92:10:fa:7e:21:98:75:c0:23:b8:5b:1a:
         26:85:df:20:da:49:30:c2:61:1f:fd:fa:4b:fa:ac:07:c1:a4:
         20:ed:f0:51:00:ad:77:c8:51:e0:01:fc:59:fb:69:8c:66:70:
         31:39:8e:cd:f9:97:9f:2f:7f:d8:cb:bb:65:74:de:39:c8:b5:
         3b:ea:0d:9a:b5:e7:a2:93:8f:69:ce:4a:9e:73:10:51:d0:53:
         2d:f4:4d:4d:7d:1c:c0:4b:a7:8e:39:f4:32:14:b4:08:e3:bb:
         95:e4:18:5b:cc:7e:58:47:17:3c:66:f1:04:07:00:1f:f6:ab:
         ed:41:36:af:fb:af:65:7e:6a:9b:5f:17:5f:ea:37:df:d8:6d:
         f8:25:b2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:24:10 2026 by rpki-client