Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/81147481-e43d-3c6e-b921-7a5d45ad8299.roa
File:                     81147481-e43d-3c6e-b921-7a5d45ad8299.roa (raw, json)
Hash identifier:          0e4POdWnuVl57Tywd0hfdie97s5IogipDohzWXLWyrY=
Subject key identifier:   B0:8F:18:F6:11:61:FA:DD:A4:57:F0:02:F9:B8:C3:78:AE:F8:BB:1F
Certificate issuer:       /CN=b8281a0a-00f2-4aac-b311-e961a7ccedfb
Certificate serial:       010D0C9F4328584E54B499F68786FE03D38BC900
Authority key identifier: 35:F0:01:B3:B3:0C:23:08:EB:B9:0B:7C:D8:2E:1C:79:63:0A:8F:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/81147481-e43d-3c6e-b921-7a5d45ad8299.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     30687
IP address blocks:        216.38.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:99:f6:87:86:fe:03:d3:8b:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8281a0a-00f2-4aac-b311-e961a7ccedfb
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=fb15f2e1-b820-4a01-b7f9-940235aca5dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:aa:fe:b7:53:65:b4:4a:ef:98:db:0e:d8:40:
                    42:8c:fc:13:29:7f:f2:e2:f7:f4:28:0a:b7:b2:3b:
                    41:d5:74:17:65:eb:fd:ef:b1:a9:28:cd:a6:37:18:
                    2f:17:0b:64:4a:d1:70:4f:c2:5f:51:f5:5a:ad:20:
                    8e:a6:0f:ea:6b:c1:ee:d7:84:dd:d3:77:d3:5d:35:
                    bf:4b:65:13:d9:d1:65:3c:d6:d2:de:45:d3:95:42:
                    bb:d1:ac:10:0a:87:e1:b8:ff:a8:53:04:a8:21:4f:
                    12:55:b6:c3:67:98:a1:79:1a:7f:d3:cb:14:62:d8:
                    05:8e:e7:61:1a:1b:96:f6:a2:b6:db:f2:41:32:e4:
                    d0:ed:fb:d6:01:dd:df:14:fb:27:88:de:b5:95:a8:
                    f0:27:8f:aa:72:ba:12:ed:43:d8:33:ac:77:64:01:
                    4d:e4:2e:dc:81:29:ca:37:c6:ad:58:2a:22:15:1f:
                    ba:0a:9b:0d:01:33:4e:e6:0d:86:e7:69:01:33:2f:
                    38:86:4a:a6:9c:cb:3a:ff:3e:d3:3c:b7:ab:a0:fd:
                    4e:be:34:eb:df:10:cc:2a:27:85:a9:01:c6:1f:53:
                    f4:b6:ee:e9:f6:bb:88:c1:0c:e4:d9:71:06:5a:3f:
                    dd:3b:38:0a:84:f4:c9:48:a8:5c:c4:ca:4a:87:50:
                    55:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:8F:18:F6:11:61:FA:DD:A4:57:F0:02:F9:B8:C3:78:AE:F8:BB:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/81147481-e43d-3c6e-b921-7a5d45ad8299.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.crl

            X509v3 Authority Key Identifier:
                keyid:35:F0:01:B3:B3:0C:23:08:EB:B9:0B:7C:D8:2E:1C:79:63:0A:8F:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.38.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:e4:e6:ef:bf:7a:9c:93:10:4b:a0:46:3d:30:0f:50:53:cf:
         c2:9e:2c:0b:b3:a1:d4:03:22:d0:b0:3a:b0:50:62:0a:1b:78:
         8e:dd:dc:7c:05:fb:67:4b:23:5f:38:cd:b6:c9:c9:e6:48:2f:
         ff:5f:93:84:9e:17:1e:7e:24:77:0b:9d:4b:f1:ea:07:a0:14:
         1d:3b:bd:99:67:c0:4e:29:91:80:ab:16:4a:c5:92:89:49:43:
         81:d6:5b:dc:52:e6:d1:00:c1:51:e2:83:96:45:05:67:dd:2f:
         79:ba:7c:0e:b0:3b:ab:d0:f2:53:1b:54:c3:ef:7c:dd:4d:4c:
         b9:34:79:d7:d7:53:e8:54:68:f1:19:1c:61:3c:2e:de:d7:ab:
         e5:f2:21:ea:70:03:a2:9f:d5:64:ca:4b:60:e0:7d:3d:4c:2c:
         d3:fe:77:b9:aa:bb:93:e2:8d:8a:d3:15:2f:4b:9a:28:6e:48:
         20:38:e2:76:61:65:bc:49:87:1a:33:ca:0a:57:f3:db:4b:62:
         6b:99:f1:90:cd:60:10:0d:81:e5:61:46:38:6e:93:ec:e0:b2:
         01:95:7a:53:b6:45:48:c1:55:49:4e:71:bb:61:62:94:ed:d0:
         eb:63:86:0b:80:83:04:0c:b0:78:9b:89:94:99:b9:6d:54:44:
         ae:99:af:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:28:08 2026 by rpki-client