Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1db69722-a6c0-373b-b0be-92aa14b7cd16.roa
File:                     1db69722-a6c0-373b-b0be-92aa14b7cd16.roa (raw, json)
Hash identifier:          lp/IFuu1Vp/mQjyFXqi8mOeHh4t20v52ZQV/oTqLpss=
Subject key identifier:   73:F8:05:FB:01:0B:74:1C:E3:73:E5:D0:BF:DB:C8:73:56:3C:FC:18
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584F497435E780BCDE81F847EBA0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1db69722-a6c0-373b-b0be-92aa14b7cd16.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     20001
IP address blocks:        216.213.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:35:e7:80:bc:de:81:f8:47:eb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a4011a8f-8c53-44a9-bb66-681b626f977d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:70:cf:3a:54:28:de:40:a6:5c:32:9e:c8:29:
                    8a:5f:b4:65:6c:8a:29:b3:09:97:c9:0f:87:28:5a:
                    35:47:89:e9:45:0f:23:05:bd:37:62:a1:02:76:1c:
                    be:88:fd:ad:b7:1a:c1:44:20:fd:9e:12:67:82:8d:
                    61:a2:85:14:ce:a3:83:8e:9a:07:36:ee:e4:ee:f7:
                    58:ad:0f:1b:fb:24:88:46:00:76:33:67:20:3d:36:
                    f8:b5:5c:cd:c7:fb:83:95:75:36:97:6c:27:68:67:
                    2c:4c:6c:f9:ce:a0:9a:f1:5c:73:70:e9:79:79:18:
                    08:21:bc:c5:f9:b1:62:e3:b8:5d:ee:41:3e:a7:c3:
                    fd:0e:68:0e:84:94:3e:e6:d7:1e:70:f5:39:7d:d2:
                    1d:c1:d2:b9:3c:5a:0b:e7:4e:95:50:7e:43:66:f3:
                    44:e8:23:6c:61:a1:2b:07:9d:ad:f5:0e:de:07:bf:
                    a4:57:74:27:c7:fc:62:63:25:7a:ca:e6:b4:99:bf:
                    96:d2:15:ad:45:03:a1:c9:0b:d4:44:b6:98:b1:95:
                    6b:bc:7b:2f:eb:65:85:82:ea:9f:60:1d:24:33:2a:
                    33:94:b5:df:7b:36:cf:8f:13:34:7e:a4:11:3c:84:
                    01:bd:d0:6b:b1:d9:9d:53:19:82:1f:af:9c:d6:11:
                    aa:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F8:05:FB:01:0B:74:1C:E3:73:E5:D0:BF:DB:C8:73:56:3C:FC:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1db69722-a6c0-373b-b0be-92aa14b7cd16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.213.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:bc:bc:f7:4b:3b:88:e0:33:66:30:06:2a:ed:38:d2:c5:3d:
         ca:25:ea:ad:e5:7b:29:c2:35:07:a3:d9:75:c5:ab:49:00:a5:
         16:87:2e:2b:d3:ec:13:37:65:37:67:03:34:9e:3c:93:49:08:
         78:42:e5:7c:e0:8c:ed:4b:5c:fb:79:a8:41:b0:20:26:36:1c:
         07:2b:8d:64:29:04:0d:68:4a:54:70:d2:7f:0e:ea:4e:23:c5:
         41:ff:35:d9:90:7a:4d:c2:cb:d6:a8:a5:0d:72:79:80:d6:b3:
         f3:12:ca:81:25:2b:34:08:12:10:83:eb:a7:93:c1:72:6d:3e:
         e8:f4:ee:a1:cd:71:24:57:9a:6e:fb:83:88:c2:f1:9b:ee:47:
         5b:34:43:14:28:0b:dc:d7:b6:c6:4d:91:e0:1e:47:37:33:a6:
         1e:6c:1b:1c:49:b7:75:3b:a7:58:db:dc:97:fe:be:c0:6a:e6:
         62:8c:15:9e:f5:91:2e:95:96:1f:76:35:16:0f:cc:cc:85:ca:
         96:77:b5:84:5a:4d:d8:c5:0d:69:a1:bf:15:fb:85:b7:de:d4:
         5a:22:4e:01:92:97:58:7d:7c:2d:88:00:7c:8f:1b:70:6d:d4:
         29:89:de:63:ab:aa:06:53:3c:8b:68:fe:b5:b3:16:9c:fb:78:
         be:77:ee:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:39:02 2026 by rpki-client