Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/7f659af6-1d84-34e3-9205-6190389bd336.roa
File:                     7f659af6-1d84-34e3-9205-6190389bd336.roa (raw, json)
Hash identifier:          8G3JX7fIGiClgp+rnh/1izhqhIm5QzedW10O6DXwxG4=
Subject key identifier:   12:AB:2F:A5:FD:45:15:3C:94:1C:71:BB:31:F4:D0:95:EB:17:73:63
Certificate issuer:       /CN=a3b6948d-3ee1-4153-9c40-1cd7465bea2b
Certificate serial:       010D0C9F4328584F4975324EB2A48B4FD7979300
Authority key identifier: 90:8D:6E:3D:A8:3C:E5:E7:6B:D5:3D:68:92:0F:67:5B:A6:D6:3E:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/7f659af6-1d84-34e3-9205-6190389bd336.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        216.205.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:32:4e:b2:a4:8b:4f:d7:97:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3b6948d-3ee1-4153-9c40-1cd7465bea2b
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=dae74683-ad82-4f0f-9e9d-496a13516c94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e7:4a:d1:56:18:c9:20:ec:0d:62:cf:b6:41:
                    86:cd:32:d5:40:59:b8:e1:03:cf:a6:d6:f5:ed:c5:
                    8e:2d:d1:07:04:81:d0:98:e1:2a:01:77:c1:7a:69:
                    1f:f4:51:63:c4:4f:cc:df:1d:14:c9:f1:72:15:ac:
                    64:4c:d9:1c:c9:9d:e5:17:f4:6c:00:3f:27:81:e3:
                    96:a8:45:4b:bd:35:01:5f:2b:f9:29:16:cc:d1:fb:
                    46:75:78:59:72:3d:11:6e:27:33:8e:2a:34:69:f2:
                    4e:f9:6e:93:47:a8:44:51:68:e0:85:03:54:f8:8c:
                    c4:c0:96:cf:07:b7:18:28:ba:17:c5:1d:00:07:45:
                    ed:69:05:56:51:03:35:22:c6:17:8e:cc:dd:74:8c:
                    0b:c7:01:52:6e:ad:0d:2a:c2:b6:df:75:d2:b0:c6:
                    af:bd:de:2f:d6:a0:30:20:17:2b:5c:e1:a8:20:09:
                    2f:3e:a3:a4:ab:95:f2:fe:0f:d7:ab:5a:df:19:f3:
                    f2:84:4c:4d:cd:b7:7b:03:22:de:0f:b0:bf:99:7b:
                    c9:44:7b:78:b5:d3:aa:17:17:1e:39:75:ae:f7:9b:
                    c9:a7:1e:3e:5e:b4:d9:39:cd:ff:52:db:44:48:59:
                    b5:9c:8d:37:c4:09:d6:f8:50:98:8d:c6:9d:84:66:
                    47:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:AB:2F:A5:FD:45:15:3C:94:1C:71:BB:31:F4:D0:95:EB:17:73:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/7f659af6-1d84-34e3-9205-6190389bd336.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.crl

            X509v3 Authority Key Identifier:
                keyid:90:8D:6E:3D:A8:3C:E5:E7:6B:D5:3D:68:92:0F:67:5B:A6:D6:3E:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.205.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:88:46:e1:bd:e6:5d:ef:69:78:bf:4b:e5:48:7e:0e:3a:bb:
         d0:49:1c:6b:eb:5d:fb:06:86:b7:80:d3:21:d0:06:b6:74:0f:
         90:56:2d:3b:f9:5d:b0:17:14:1b:7e:62:f5:b7:db:e9:8f:f6:
         25:bd:a8:28:6c:9d:c4:e0:d6:a5:8b:78:60:ed:d7:0b:14:1b:
         f6:21:fd:27:30:2b:74:39:81:52:69:7d:1d:52:49:73:fb:82:
         1a:31:a2:9a:5a:18:22:5f:15:64:fa:d4:25:da:8f:4e:68:62:
         51:fb:2e:2a:96:33:6d:e8:ff:0a:04:8c:63:6d:c1:a2:d6:9e:
         5a:20:c3:7c:f9:f1:45:ca:09:65:75:0f:aa:14:9a:e2:8b:a9:
         ca:f8:07:17:83:db:04:78:66:72:7b:64:35:b1:1d:92:f0:0e:
         36:89:80:ca:9d:62:bb:9c:9f:4e:2e:cb:5c:ef:75:19:31:7c:
         3d:61:66:4b:04:c7:9b:80:43:f5:f6:7f:b6:61:a2:86:88:f9:
         5d:2b:51:58:42:d9:fd:3d:04:09:63:69:97:74:00:35:0e:57:
         08:ad:94:5f:0e:bf:58:f1:7f:21:b1:aa:e0:10:2e:c6:45:f3:
         c9:c4:34:25:65:ec:1b:67:72:f4:3d:3f:d6:6b:a0:56:3b:81:
         60:73:78:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:47:01 2026 by rpki-client