Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f8793fd3-187b-3877-aeae-4d4b5a21447a.roa
File:                     f8793fd3-187b-3877-aeae-4d4b5a21447a.roa (raw, json)
Hash identifier:          oN4O8OhDU/On5sh9OGlqj8sBCQ/KapBY87zXH3pqpW8=
Subject key identifier:   79:14:E2:AD:1B:6E:7A:E3:C0:1F:21:1A:44:D8:63:5A:BF:49:E1:EB
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584F3CE28428B6813BC45141B7A0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f8793fd3-187b-3877-aeae-4d4b5a21447a.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     22516
IP address blocks:        172.81.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:84:28:b6:81:3b:c4:51:41:b7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=97717965-7829-45c5-8e77-308b049df92d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:74:21:75:ea:da:2e:42:dd:66:fb:b2:ac:86:
                    dd:83:77:1b:f9:1c:4e:10:97:aa:ba:47:97:f7:73:
                    a4:0b:dc:4d:16:3f:0e:f9:59:79:4f:92:d8:2b:32:
                    75:f5:0b:91:7a:fb:fc:a8:02:ad:11:84:63:5f:7d:
                    8c:8e:8b:01:8b:3f:02:31:bb:a7:25:ce:4a:b1:b7:
                    04:37:83:2f:7b:b7:df:1c:ae:63:5d:8f:fc:3d:40:
                    97:f1:19:61:e0:30:52:c6:1a:3f:33:97:c9:4b:c0:
                    1c:33:d9:71:fd:ab:d2:90:95:a9:fa:db:5d:3f:fb:
                    57:56:36:5a:76:85:a9:fc:0f:6f:c2:d9:db:f3:7a:
                    cd:28:7c:a5:a0:ca:a1:bd:e4:94:4c:28:39:2f:b6:
                    cf:17:c9:c5:7f:de:89:c7:0a:6c:6e:f0:e0:2d:fe:
                    78:0b:99:e4:d1:99:19:80:e9:1a:9c:fc:29:d6:8c:
                    0a:5d:21:4a:3f:29:c2:f0:db:ca:07:83:a1:b1:81:
                    85:a3:6f:88:7c:6d:32:93:ad:49:d1:ef:1a:04:9c:
                    21:2f:01:d2:74:51:fa:f7:e9:40:59:bc:87:9f:f1:
                    80:9c:92:db:64:28:b2:de:0f:2e:0f:a4:39:f0:07:
                    94:6f:ad:b2:f5:30:a8:bd:64:4b:c7:9f:74:3b:bd:
                    60:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:14:E2:AD:1B:6E:7A:E3:C0:1F:21:1A:44:D8:63:5A:BF:49:E1:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f8793fd3-187b-3877-aeae-4d4b5a21447a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.81.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:1e:ed:47:2a:b5:a5:64:52:c5:73:c1:c4:87:47:87:86:1a:
         5f:4e:ac:3c:d6:7f:62:69:1a:e6:24:02:ac:26:7c:5a:38:5b:
         63:65:a2:14:7f:a6:e3:a4:28:39:d7:87:b3:1e:2b:67:c7:9f:
         e6:ad:c4:34:13:fb:b4:66:52:e1:c6:ce:76:5b:69:99:77:47:
         9f:f1:9e:8e:9f:01:a1:4c:82:27:81:a4:e7:44:ee:60:c7:14:
         a1:9a:92:20:56:f7:d9:c1:c2:96:48:49:16:bb:d8:84:0a:1c:
         bd:b7:25:99:48:4b:00:ab:e6:77:88:07:5b:9a:8f:8e:78:e4:
         c5:8a:4d:60:c8:58:64:50:6a:e8:f2:34:20:05:ba:77:9b:d4:
         77:a9:6e:87:cb:0e:ff:03:ec:c5:ba:b3:3b:ec:3c:98:10:71:
         d4:f2:63:fd:9d:0d:3c:ee:4d:5c:99:c5:35:8a:ad:69:c4:33:
         d4:fb:ee:2d:79:26:a3:a5:01:3f:de:ba:c0:1e:ae:d6:e9:87:
         aa:be:fb:cd:2d:a7:4e:83:63:b3:38:3f:97:bc:a2:c9:4c:b1:
         a7:1e:5f:9c:c2:82:f9:57:d4:f9:6b:94:ad:c9:c2:a6:8b:9a:
         6b:48:b9:28:ff:70:18:e8:21:ed:d3:06:10:26:b8:e8:07:fb:
         db:ca:31:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 05:46:25 2026 by rpki-client