Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c732f1a1-a4d1-4822-8730-10a209755167/b93e562d-2881-3bc7-b23f-74418e8a5662.roa
File:                     b93e562d-2881-3bc7-b23f-74418e8a5662.roa (raw, json)
Hash identifier:          Oye5BXxooxbhcP8Qzob+21nyHCvhJ/uyKyfsvUWm0S4=
Subject key identifier:   29:23:09:74:F6:BC:44:05:3F:27:70:AA:9D:92:F6:F8:08:E4:EF:A1
Certificate issuer:       /CN=c732f1a1-a4d1-4822-8730-10a209755167
Certificate serial:       010D0C9F4328584EEEB754F2638267B2DF31C380
Authority key identifier: B1:C2:D6:1A:E8:39:38:C1:60:C3:AB:2F:11:83:19:4F:4B:22:37:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c732f1a1-a4d1-4822-8730-10a209755167.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c732f1a1-a4d1-4822-8730-10a209755167/b93e562d-2881-3bc7-b23f-74418e8a5662.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        216.241.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c732f1a1-a4d1-4822-8730-10a209755167/c732f1a1-a4d1-4822-8730-10a209755167.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c732f1a1-a4d1-4822-8730-10a209755167/c732f1a1-a4d1-4822-8730-10a209755167.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c732f1a1-a4d1-4822-8730-10a209755167.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:54:f2:63:82:67:b2:df:31:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c732f1a1-a4d1-4822-8730-10a209755167
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=ea9fb6d2-a1fb-45c9-a219-ab0e5294c02a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:85:2f:27:d9:30:8f:de:2c:64:bf:25:73:ab:
                    3f:ed:00:ba:a4:ff:fa:aa:f3:82:75:f4:2f:3f:df:
                    a1:f7:d5:a0:ac:c3:3a:97:b7:12:95:dc:59:f0:fe:
                    94:91:eb:28:8c:8a:3b:8f:f0:0e:66:c1:a0:bc:57:
                    5e:c8:7b:3e:b6:aa:01:29:b3:bc:61:ec:08:1f:e9:
                    cf:f4:e3:54:bd:52:3f:0f:ab:4c:63:19:1e:37:2c:
                    6d:ba:b5:7f:f8:8f:56:17:ff:73:50:26:81:67:71:
                    82:47:5b:7d:5c:33:7a:70:b0:d1:39:7f:dd:fe:9d:
                    e3:53:08:91:73:3e:7e:5d:5a:15:d0:b7:54:7b:c8:
                    e3:99:c6:e7:c2:21:91:81:55:c8:3d:be:ad:9d:98:
                    0c:23:b3:a0:95:0c:09:e1:ba:a2:f6:f5:07:96:a3:
                    cd:05:dc:fe:71:57:9d:7c:b1:c7:07:8b:0a:c8:b0:
                    b8:fa:5d:b9:1d:78:dd:0b:ae:a2:77:54:18:a3:62:
                    0a:30:c3:93:64:7f:ea:32:f4:1e:32:d3:21:56:ff:
                    95:11:47:b9:11:51:36:be:fa:83:30:61:7b:0c:a8:
                    f7:97:99:36:9e:e9:67:d4:14:aa:84:d8:a5:7f:7f:
                    1c:6e:40:66:21:79:ff:6a:f0:de:98:6f:2d:ef:b9:
                    42:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:23:09:74:F6:BC:44:05:3F:27:70:AA:9D:92:F6:F8:08:E4:EF:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c732f1a1-a4d1-4822-8730-10a209755167/b93e562d-2881-3bc7-b23f-74418e8a5662.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c732f1a1-a4d1-4822-8730-10a209755167/c732f1a1-a4d1-4822-8730-10a209755167.crl

            X509v3 Authority Key Identifier:
                keyid:B1:C2:D6:1A:E8:39:38:C1:60:C3:AB:2F:11:83:19:4F:4B:22:37:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c732f1a1-a4d1-4822-8730-10a209755167.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.241.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:37:c9:6d:48:6d:4a:11:a6:95:69:60:a5:36:33:5c:eb:1f:
         5a:21:9d:c6:43:a1:f4:5d:9f:2e:52:af:93:a0:4d:ae:86:87:
         36:b2:36:a8:61:a9:51:ab:ff:b6:fa:48:89:0a:83:8a:31:a1:
         15:3b:79:a1:a4:6d:5c:79:e6:1d:52:1c:f4:4b:c5:45:63:08:
         5c:41:9d:18:bd:e9:29:79:c0:19:a2:3f:35:e5:52:fd:aa:49:
         73:0b:40:ee:c1:3e:c0:c6:f5:c4:a8:aa:76:26:36:83:2e:a3:
         67:8b:a4:f6:b4:c6:42:1b:a5:fd:7c:e5:4c:5b:d7:bf:d5:4c:
         82:7c:81:8c:5f:c1:ab:c3:73:41:b8:a5:6b:f2:55:96:67:54:
         8f:ca:5d:26:73:89:31:cc:64:c1:bc:17:50:9c:ca:ae:d5:02:
         c5:32:0c:11:8b:7e:bc:d4:e8:f5:ea:65:43:07:27:6a:6c:da:
         77:0a:58:57:85:0d:0f:c9:1a:8f:05:55:85:2b:44:dc:43:1d:
         f2:39:51:5d:38:27:ad:79:ce:e4:52:7f:95:f5:d6:25:c3:5f:
         a9:c7:95:e5:85:72:af:1b:10:62:90:43:f4:ae:4d:fe:b8:05:
         7a:52:d2:1d:9b:ec:8f:72:dd:71:6e:2c:39:f6:50:d0:5a:25:
         62:c0:0a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 01:31:50 2026 by rpki-client