Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/a848bdbe-7e3b-32ef-9261-e15421402776.roa
File:                     a848bdbe-7e3b-32ef-9261-e15421402776.roa (raw, json)
Hash identifier:          +hNB61zRw815RQddz2Mw0cJRyFB+f3ZzpD731PiUP1k=
Subject key identifier:   D3:98:F3:8C:35:E2:81:CD:DD:90:17:81:0B:AC:78:F8:C1:15:1D:13
Certificate issuer:       /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
Certificate serial:       010D0C9F4328584E5E7A079F8C83AB05C7643600
Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/a848bdbe-7e3b-32ef-9261-e15421402776.roa
Signing time:             Thu 02 Jul 2026 21:00:12 +0000
ROA not before:           Thu 02 Jul 2026 21:00:12 +0000
ROA not after:            Wed 30 Sep 2026 21:00:12 +0000
asID:                     54027
IP address blocks:        216.186.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5e:7a:07:9f:8c:83:ab:05:c7:64:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
        Validity
            Not Before: Jul  2 21:00:12 2026 GMT
            Not After : Sep 30 21:00:12 2026 GMT
        Subject: CN=4caf6a54-2740-4ca4-8510-ca8e4bcb4b43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:bd:15:e1:fc:4d:57:96:f3:b5:9c:44:5e:15:
                    e9:38:50:44:e6:52:0f:59:52:ff:37:2e:df:b7:39:
                    17:a3:ae:93:d3:90:95:e9:c0:a7:3d:48:f1:89:6a:
                    ce:3b:34:ba:0f:8c:98:31:93:28:21:5e:9f:4f:a1:
                    44:c4:7c:10:48:aa:cb:ab:f9:93:c6:3d:f7:4d:91:
                    fb:43:83:83:6f:c4:a8:ed:ed:f3:e2:10:80:a0:08:
                    44:e2:ac:a3:90:35:43:77:77:c1:cb:79:35:b3:ea:
                    70:68:fc:44:f9:39:38:99:76:cb:f3:ad:f5:57:74:
                    02:f1:6c:16:eb:70:79:74:a1:eb:10:e0:06:d7:5b:
                    7c:57:e7:6a:7b:dd:fa:a7:08:db:cf:80:e9:c8:ee:
                    a0:7c:64:20:f1:20:a2:0d:43:50:d2:e5:10:54:56:
                    2c:9f:b9:db:ad:c6:3c:17:fc:1f:b3:a7:b4:db:4b:
                    84:32:66:07:9f:68:6f:b9:05:1c:0c:7f:30:3c:8f:
                    bf:2e:60:73:12:e0:e4:50:db:1b:79:47:b9:7d:65:
                    23:26:1a:f1:fb:b6:8b:e4:79:99:eb:d6:a9:82:d5:
                    9e:90:d8:66:a4:07:ef:4b:60:6c:73:c1:58:55:61:
                    8f:56:e6:4c:9d:8d:02:be:82:89:bf:3d:e8:79:76:
                    ab:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:98:F3:8C:35:E2:81:CD:DD:90:17:81:0B:AC:78:F8:C1:15:1D:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/a848bdbe-7e3b-32ef-9261-e15421402776.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl

            X509v3 Authority Key Identifier:
                keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.186.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:50:3c:4c:9d:e9:96:21:5d:5e:23:a5:eb:e2:bb:d2:12:a4:
         0a:e3:4c:d6:82:9b:23:a8:5d:18:03:18:64:a8:53:fd:ca:52:
         55:48:9a:ab:08:44:73:50:cd:67:e2:8e:69:e8:3e:5f:74:30:
         4f:af:a4:3b:65:c3:f9:22:be:8e:d4:de:87:13:0e:d3:62:cb:
         1e:51:9d:17:92:48:02:21:75:56:23:eb:96:3d:d0:f4:c7:dd:
         2e:56:09:8a:bf:05:6e:1d:01:04:09:c3:b2:98:39:e7:2d:42:
         5d:39:d4:1e:5e:23:fe:4f:ea:dd:69:85:77:f1:62:0b:f7:a5:
         2d:de:54:60:fe:66:c7:4a:27:b6:8c:f8:5e:b5:b0:15:8f:ee:
         65:c1:58:e9:9a:d3:ac:df:15:97:09:de:19:52:9f:69:bb:bf:
         96:88:50:38:1b:3e:2c:91:03:db:34:e2:21:39:8d:26:40:e5:
         8a:1d:d0:9c:45:85:7d:c0:9a:5c:c5:a3:c0:c9:41:e7:54:25:
         b2:ac:a8:56:ed:b3:ca:c9:f4:99:7f:35:78:56:92:1e:0a:e7:
         87:d7:3a:22:ad:12:90:75:e5:83:6a:43:2a:59:8e:ab:78:31:
         e9:e3:fe:bf:ed:88:e6:77:28:db:67:50:21:21:35:62:60:12:
         92:33:7b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:13:04 2026 by rpki-client