Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b8e562b5-d648-3596-b35f-5b44e3a0a9b9.roa
File:                     b8e562b5-d648-3596-b35f-5b44e3a0a9b9.roa (raw, json)
Hash identifier:          4nrAjPoKgBmRsC61DKDZFg3kUeUw8/qhsklO11wiBKI=
Subject key identifier:   66:EB:A4:1A:63:41:1B:38:B1:65:96:5B:46:0A:13:69:6C:3C:82:C8
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584DBD05A187929362B74C8B2980
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b8e562b5-d648-3596-b35f-5b44e3a0a9b9.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     393249
IP address blocks:        209.87.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:a1:87:92:93:62:b7:4c:8b:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=01104384-7ae0-42c4-9c59-38001353141c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:19:db:70:9d:9c:6c:ca:a1:b7:4b:2c:59:5c:
                    77:15:45:9f:dd:56:84:af:14:5e:dd:63:1d:5d:e3:
                    46:59:9d:1e:17:7f:39:3d:d0:7b:6d:2b:34:cd:6f:
                    84:c3:2e:5e:74:1e:a9:5d:b3:ba:c2:e2:cc:f4:a2:
                    23:b8:29:37:18:8e:3a:4f:8d:3b:11:2f:b6:94:46:
                    ca:8f:89:9a:7e:88:e4:93:fd:5f:3a:1a:49:cd:98:
                    ad:d3:09:9e:79:0c:bf:d5:a1:f7:cb:04:dd:fc:87:
                    ec:0e:db:ef:8c:54:da:1f:39:b3:85:cd:62:75:1a:
                    fb:5e:c1:c5:45:1d:ec:c5:62:6e:fd:ce:d0:63:a0:
                    cd:a0:1a:f5:0b:29:56:7c:6b:6e:f9:6a:2c:2b:cd:
                    0c:1a:3f:f5:da:07:44:ca:2e:2d:bc:38:58:da:58:
                    fd:82:13:7b:db:cc:5a:ee:02:05:d5:b6:61:75:61:
                    8c:ca:11:d4:7d:46:00:ee:12:91:01:13:74:6a:a0:
                    17:c6:fa:75:68:cc:bd:e4:16:4b:d7:e8:28:13:22:
                    f9:55:3b:44:ca:3b:5e:df:78:42:6c:44:c3:e0:4b:
                    fb:5d:ac:f6:dd:47:d8:3c:85:6c:70:3b:7f:db:b4:
                    97:11:a6:ae:ae:ea:83:e1:88:50:69:f3:b2:68:02:
                    58:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:EB:A4:1A:63:41:1B:38:B1:65:96:5B:46:0A:13:69:6C:3C:82:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b8e562b5-d648-3596-b35f-5b44e3a0a9b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:8e:d5:ca:5c:5f:1f:ae:b2:d9:e3:b3:c9:68:2d:54:4b:56:
         43:99:96:9b:68:a2:1c:be:82:69:0e:15:1a:2d:8b:af:a2:14:
         91:74:d0:79:8a:72:67:2f:ab:d7:6e:2a:53:0f:25:b9:8a:95:
         3b:6d:31:90:23:e2:3d:37:48:6c:1e:f8:9c:23:e6:53:cd:1b:
         f2:d3:de:a4:9d:73:d9:d0:73:d7:36:0d:93:aa:c6:de:b9:c4:
         73:1f:15:c4:8f:a4:cf:3a:a9:c4:aa:d9:67:fa:8f:bc:76:d5:
         54:be:48:fd:aa:c5:cb:b0:5b:a2:6a:48:dd:25:e1:2e:b9:5d:
         d7:52:ba:cf:f4:0e:00:ab:23:da:57:f7:b0:a5:62:a6:37:88:
         6f:8b:dc:e1:49:cb:20:59:50:d2:98:a9:a0:30:a9:dc:36:2c:
         17:1a:99:c7:e0:13:f2:d4:bb:de:ba:9f:c3:49:f2:00:65:77:
         48:9c:b2:8d:d7:fd:6a:51:76:5d:98:f6:ab:0f:1f:8f:25:09:
         cc:de:80:52:ab:27:1a:0e:f2:74:94:cc:74:3e:f5:20:9c:36:
         88:20:b4:4d:3f:bc:6a:e8:7f:a0:75:dc:4a:9d:90:2e:1f:d0:
         d9:ef:e3:c3:2c:ab:33:fe:e2:b2:76:e6:bb:b4:3f:f0:8d:b5:
         04:31:a2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:57:20 2026 by rpki-client