Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce440a32-2e1e-4948-9661-7ae2aa059c20/b1fb16a3-bfd3-3c73-93f4-56c6567e67d7.roa
File:                     b1fb16a3-bfd3-3c73-93f4-56c6567e67d7.roa (raw, json)
Hash identifier:          zxVZC0TEmrVRIWtcKnRd0f2sNU00rjkPoBD7ms2u+aU=
Subject key identifier:   70:CA:0C:34:AD:E8:6C:93:8A:20:D5:1A:38:6E:9C:81:EB:02:D8:5B
Certificate issuer:       /CN=ce440a32-2e1e-4948-9661-7ae2aa059c20
Certificate serial:       010D0C9F4328584F1CC7AACD9D9657345D24D780
Authority key identifier: 8E:A5:2B:D0:10:F2:A4:82:49:D9:0F:64:B8:29:2C:9A:6B:58:F6:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce440a32-2e1e-4948-9661-7ae2aa059c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce440a32-2e1e-4948-9661-7ae2aa059c20/b1fb16a3-bfd3-3c73-93f4-56c6567e67d7.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     13319
IP address blocks:        104.192.232.0/22 maxlen: 24
                          199.167.116.0/22 maxlen: 24
                          199.246.168.0/23 maxlen: 24
                          209.87.224.0/19 maxlen: 24
                          216.106.96.0/20 maxlen: 24
                          2607:f0b0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce440a32-2e1e-4948-9661-7ae2aa059c20/ce440a32-2e1e-4948-9661-7ae2aa059c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce440a32-2e1e-4948-9661-7ae2aa059c20/ce440a32-2e1e-4948-9661-7ae2aa059c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce440a32-2e1e-4948-9661-7ae2aa059c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:aa:cd:9d:96:57:34:5d:24:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce440a32-2e1e-4948-9661-7ae2aa059c20
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=a346e307-01bd-4bdd-8689-c7dd451f19c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:af:cd:b5:25:0f:d9:93:34:c0:aa:48:cf:f9:
                    68:39:ee:93:80:82:c1:f4:c0:6e:9f:83:0d:5b:82:
                    2f:07:86:4f:59:ec:ff:48:ea:8b:57:2c:be:96:90:
                    05:bc:71:3c:84:6c:3a:ef:aa:92:f5:58:ed:3f:9a:
                    7b:96:01:f5:a2:84:a5:b4:0d:26:13:4d:4f:53:7b:
                    eb:ad:8f:c5:5c:25:dc:a9:fb:ee:d3:01:62:12:09:
                    d7:10:c8:f8:57:d0:28:9a:11:e9:66:b9:db:9c:95:
                    37:e5:4e:71:1e:87:35:b6:ce:e7:c1:c9:2a:0f:42:
                    ba:5b:4a:ca:6c:ac:ae:3e:66:4c:a3:f7:77:b0:4c:
                    05:55:d1:0e:6b:12:6c:3a:50:b4:75:ab:e7:b7:84:
                    51:10:39:ca:8d:db:96:f2:c7:0e:b3:cc:56:ba:29:
                    69:da:3c:c1:db:ac:a3:e4:1c:e8:5e:82:0f:9e:97:
                    20:de:b9:66:0c:37:d0:70:6a:f7:e7:e1:31:91:c1:
                    e7:c2:b7:c7:cd:6c:a2:f3:fa:f4:c7:d8:7d:1e:f5:
                    65:c0:6b:93:bc:8a:50:13:6a:61:af:28:cf:14:08:
                    fd:bb:8d:59:b2:be:47:dd:2a:94:be:ab:db:59:2c:
                    24:43:53:ee:34:0a:a4:73:d3:fd:80:f2:24:46:c0:
                    b1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:CA:0C:34:AD:E8:6C:93:8A:20:D5:1A:38:6E:9C:81:EB:02:D8:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce440a32-2e1e-4948-9661-7ae2aa059c20/b1fb16a3-bfd3-3c73-93f4-56c6567e67d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce440a32-2e1e-4948-9661-7ae2aa059c20/ce440a32-2e1e-4948-9661-7ae2aa059c20.crl

            X509v3 Authority Key Identifier:
                keyid:8E:A5:2B:D0:10:F2:A4:82:49:D9:0F:64:B8:29:2C:9A:6B:58:F6:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce440a32-2e1e-4948-9661-7ae2aa059c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.192.232.0/22
                  199.167.116.0/22
                  199.246.168.0/23
                  209.87.224.0/19
                  216.106.96.0/20
                IPv6:
                  2607:f0b0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:cc:d9:fc:83:4e:d3:96:3f:05:9f:33:42:15:8f:40:93:fa:
         42:36:a1:64:11:92:fa:8b:60:0b:85:96:25:a5:75:a4:a8:6b:
         c3:bc:9e:f2:94:fd:08:ad:77:0d:3c:c3:04:d4:55:8f:f7:d7:
         1f:d1:df:0e:7b:31:45:e4:a8:68:85:e7:6b:91:b5:4e:76:67:
         25:be:1e:01:d0:a1:07:61:3f:de:e1:9f:47:96:ae:88:e7:85:
         d1:91:06:3d:11:ca:ec:f5:01:ab:f9:3d:f9:33:8d:34:09:f4:
         0c:9a:28:68:56:fb:e8:a0:7f:4c:01:2f:6a:9d:0d:0f:50:79:
         c0:a6:96:2d:72:9f:e9:d2:b7:e9:c4:b6:e2:a7:eb:b3:50:b0:
         dc:06:c9:71:dc:77:f6:02:ec:d7:2d:2c:cd:37:08:71:eb:c3:
         63:be:70:f6:45:64:a7:41:73:3f:93:03:d3:7c:95:bf:d4:69:
         b6:2e:52:aa:a2:b5:2e:6f:de:6e:eb:ce:9e:f0:89:f6:96:07:
         57:13:1b:4d:5a:ab:60:b8:c0:b5:9c:ad:56:38:28:82:b2:7f:
         20:3a:44:2f:9b:15:18:50:4d:0e:e5:dc:5e:95:54:64:50:62:
         1b:56:76:72:ce:ec:a6:7b:28:74:32:65:32:28:2b:73:b6:70:
         be:d2:a1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 18:00:12 2026 by rpki-client