Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/a40d3bd1-55fe-3d2d-9718-22326d30b380.roa
File:                     a40d3bd1-55fe-3d2d-9718-22326d30b380.roa (raw, json)
Hash identifier:          SiNzZLZBT/3jTi6gyR5opqz7Qgb+vr02zEOdcwBDMIg=
Subject key identifier:   7B:43:84:EA:8A:11:6B:3B:76:87:8F:26:FC:65:68:C2:DF:7C:A9:C0
Certificate issuer:       /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
Certificate serial:       010D0C9F4328584F6F22E2C73D01377BE5FD1CC0
Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/a40d3bd1-55fe-3d2d-9718-22326d30b380.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     394391
IP address blocks:        216.210.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:22:e2:c7:3d:01:37:7b:e5:fd:1c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=90730fda-f534-42c9-9cec-2120cb6b8444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ce:98:b6:53:42:08:5f:a2:f5:aa:09:d0:e1:
                    04:75:d0:68:5d:6c:71:0a:f2:6f:c6:f1:f7:88:d6:
                    8b:99:8b:73:82:26:21:1e:18:e6:09:5f:a2:a1:82:
                    03:2a:a2:4e:f8:41:df:3c:7f:e5:ec:ae:73:d8:76:
                    3d:65:3b:28:f2:65:49:30:ce:29:86:64:01:76:d4:
                    71:b0:c9:39:1d:87:8d:25:52:32:81:b8:ac:aa:96:
                    01:13:ef:aa:9f:7f:f2:8a:4c:08:6e:54:06:68:91:
                    76:c5:64:ce:87:cc:4f:41:06:6e:4d:3f:65:6c:8e:
                    99:96:04:8c:16:ed:e3:ec:9f:17:17:b3:dd:f3:2b:
                    90:34:a7:f3:c8:62:23:30:8e:40:df:05:74:9b:72:
                    d2:e1:d1:b3:ad:92:8a:0a:39:93:98:34:63:51:07:
                    4d:96:c7:4e:8c:1b:32:9d:ab:f5:a1:bf:fc:c0:1d:
                    cd:dc:3d:f3:ba:b8:88:87:03:05:5b:96:dd:c1:84:
                    8d:1e:90:f9:06:10:c7:a0:69:d2:0b:e3:69:3d:17:
                    b7:41:12:dd:6f:97:a4:6c:ae:8b:4a:6a:dd:29:64:
                    20:41:9a:7c:3c:78:10:6a:d5:ca:95:58:d1:ff:f6:
                    b3:f0:a7:09:72:ed:43:25:42:83:82:1f:a5:d4:ec:
                    a4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:43:84:EA:8A:11:6B:3B:76:87:8F:26:FC:65:68:C2:DF:7C:A9:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/a40d3bd1-55fe-3d2d-9718-22326d30b380.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl

            X509v3 Authority Key Identifier:
                keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.210.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:ca:36:c9:ed:e4:92:83:3b:18:38:75:e5:ca:2d:9f:e5:90:
         25:6a:85:0b:78:09:84:f2:a8:d3:2c:b8:05:9d:e2:f6:50:8c:
         77:b1:44:6d:8d:6c:05:46:f7:5c:3a:7f:49:50:4a:7c:c8:20:
         f1:58:dc:a8:54:bb:a6:da:2b:49:61:36:7d:98:92:fe:c7:5d:
         99:0d:e0:51:e1:c3:cd:52:b6:7b:8a:89:bd:b1:81:22:21:74:
         eb:5a:35:c5:d0:34:4b:25:48:05:88:ae:45:8a:64:07:f3:e8:
         4a:1c:57:61:8b:65:1c:84:7d:25:02:1b:81:ed:be:7b:26:17:
         5e:ec:1c:42:b3:3f:64:f3:65:4f:64:f1:4d:35:b7:38:3d:7b:
         ec:ea:d1:f4:a4:d2:85:13:7d:a8:d0:17:63:66:7e:b8:ba:df:
         31:1c:2e:de:09:9c:61:93:b8:b3:a5:4f:7f:a8:11:07:03:09:
         9e:e9:06:05:45:f0:3b:27:a1:0e:da:05:2c:6a:3d:a4:ee:11:
         4a:b2:3e:db:d6:15:35:39:ae:fc:de:35:f0:5e:93:92:31:21:
         63:24:71:51:25:3f:32:38:b6:44:49:9e:ac:26:28:ab:7d:9d:
         86:bc:e7:5a:3f:c4:3c:46:7a:4b:1c:06:96:1e:f8:61:02:e3:
         80:3a:06:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:39:56 2026 by rpki-client