Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/dba748ab-ee1a-3add-a02c-d2c40da7de37.roa
File:                     dba748ab-ee1a-3add-a02c-d2c40da7de37.roa (raw, json)
Hash identifier:          l9pHNG7C99qYrPq0jNUFMdfIVXpT2L2yAg0TC9g3KEc=
Subject key identifier:   06:47:01:51:38:64:6E:FA:58:64:BC:50:12:3E:BE:DF:19:A2:57:C8
Certificate issuer:       /CN=0d51e326-4804-4f59-a629-20153f71b7fe
Certificate serial:       010D0C9F4328584F7782DCFF7B047E59A33C6F00
Authority key identifier: 4F:61:30:98:54:87:15:71:83:5C:5E:4A:A6:08:88:25:64:23:38:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/dba748ab-ee1a-3add-a02c-d2c40da7de37.roa
Signing time:             Sun 11 Oct 2026 13:00:12 +0000
ROA not before:           Sun 11 Oct 2026 13:00:12 +0000
ROA not after:            Sat 09 Jan 2027 14:00:12 +0000
asID:                     16509
IP address blocks:        216.230.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0d51e326-4804-4f59-a629-20153f71b7fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0d51e326-4804-4f59-a629-20153f71b7fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:77:82:dc:ff:7b:04:7e:59:a3:3c:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d51e326-4804-4f59-a629-20153f71b7fe
        Validity
            Not Before: Oct 11 13:00:12 2026 GMT
            Not After : Jan  9 14:00:12 2027 GMT
        Subject: CN=8c14a302-7924-4978-aaef-7e683d9a396e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:7a:f5:f5:36:ea:89:c4:26:7c:87:b7:38:fe:
                    9b:4e:8c:76:e6:8d:17:9f:13:b5:09:b9:58:01:bf:
                    a1:f8:bc:39:9f:4e:ca:a8:6b:a8:a7:37:9f:29:f6:
                    e2:20:56:c5:8a:79:a3:9f:58:9c:3d:f9:ef:20:49:
                    df:07:8d:33:26:36:3a:e9:8b:7b:f7:a1:81:82:20:
                    9b:ea:ce:77:60:b7:d7:2f:61:aa:16:78:ba:a4:18:
                    07:b0:1c:2d:97:6d:6a:6c:e4:21:07:93:9e:5c:c0:
                    b4:20:1a:a8:f8:d3:70:b9:ea:c9:23:66:8a:0f:df:
                    3a:e9:b6:8c:31:c0:a3:4a:31:61:64:fa:03:a1:95:
                    0f:59:1b:38:69:48:99:c2:19:4a:63:d7:05:b7:24:
                    b1:ef:a6:0b:6a:49:ab:85:aa:e0:ff:f8:fa:e6:d5:
                    de:9b:1f:95:14:2e:95:1d:0e:d9:47:74:27:28:e0:
                    b5:a2:53:d3:07:d2:f1:2d:2e:25:21:2d:cb:8e:96:
                    4b:6f:29:46:e2:9a:89:c2:19:2f:4b:98:87:52:60:
                    31:b2:9f:ac:6a:e2:9a:b0:42:9f:de:b1:6e:c7:5c:
                    45:3b:fa:90:e4:3b:e0:f7:78:67:7d:e0:83:9f:76:
                    c5:88:f1:1a:3c:36:85:17:41:cd:62:0c:0e:e2:24:
                    34:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:47:01:51:38:64:6E:FA:58:64:BC:50:12:3E:BE:DF:19:A2:57:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/dba748ab-ee1a-3add-a02c-d2c40da7de37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0d51e326-4804-4f59-a629-20153f71b7fe.crl

            X509v3 Authority Key Identifier:
                keyid:4F:61:30:98:54:87:15:71:83:5C:5E:4A:A6:08:88:25:64:23:38:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.230.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:0e:94:f1:4c:58:cc:f7:15:51:53:d6:d6:64:59:5a:55:bc:
         be:a6:94:e0:21:4f:e2:ce:89:43:ff:f0:eb:7e:e8:9b:1c:13:
         60:93:7a:77:4a:3c:b5:97:13:20:7b:da:dc:17:b3:df:47:2d:
         4a:df:9b:53:81:97:58:8b:60:19:ad:c2:f2:0f:19:af:7a:6e:
         0b:9d:86:a7:44:4e:08:7c:52:ce:4e:a3:1d:dd:b4:21:87:49:
         d2:07:4b:a1:9d:32:08:6b:45:32:24:b7:df:ff:29:08:c7:92:
         85:6d:27:aa:9e:18:e3:e0:fd:3d:63:6e:0a:d1:74:90:29:57:
         70:76:7a:00:b0:5c:b1:df:25:af:03:9c:59:81:ad:5d:53:b1:
         75:23:49:05:48:93:ea:bd:da:a2:db:17:c7:ed:6a:49:a4:1a:
         97:1c:3a:6d:a7:79:cf:aa:61:ce:bc:42:31:6f:b0:cb:e6:c0:
         3f:08:a2:e7:b2:ce:75:10:1c:8a:ef:34:73:fa:64:22:1a:bb:
         c4:24:11:6c:ff:1e:7c:ff:1a:37:34:bf:de:60:a1:5f:c5:1d:
         55:91:76:2e:37:b6:bf:03:2d:81:52:36:fa:f6:92:10:cc:09:
         66:c2:4b:e9:31:46:bc:20:14:76:89:f3:d1:c0:ef:d8:48:3c:
         84:be:8d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 00:51:21 2026 by rpki-client