Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8b9e3415-00f8-3ce1-a444-7742c64818b7.roa
File:                     8b9e3415-00f8-3ce1-a444-7742c64818b7.roa (raw, json)
Hash identifier:          VwEnB4x5Z/Dq26jDJpRWdHXtoRQNz49IAgytP+ImtCo=
Subject key identifier:   7C:85:3D:75:73:65:FC:7A:EE:0C:1C:EC:9F:69:94:A9:D3:0E:05:6B
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F4DA28FFA7E8486ECF0C70DC0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8b9e3415-00f8-3ce1-a444-7742c64818b7.roa
Signing time:             Sat 26 Sep 2026 13:00:12 +0000
ROA not before:           Sat 26 Sep 2026 13:00:12 +0000
ROA not after:            Fri 25 Dec 2026 14:00:12 +0000
asID:                     39600
IP address blocks:        216.132.112.0/24 maxlen: 24
                          216.132.126.0/24 maxlen: 24
                          216.132.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4d:a2:8f:fa:7e:84:86:ec:f0:c7:0d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 26 13:00:12 2026 GMT
            Not After : Dec 25 14:00:12 2026 GMT
        Subject: CN=cb289db6-45a6-4b72-b264-e40f9d4bb987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:67:1b:fb:74:b0:e7:61:83:5a:be:66:1b:c3:
                    cc:7b:fa:47:4b:66:07:b5:64:47:22:a7:b3:39:84:
                    8d:64:eb:7f:47:1f:8d:82:01:8e:62:17:2a:43:cc:
                    ae:4e:28:10:a8:5c:1b:4c:0e:24:3a:11:83:2b:1a:
                    f8:7f:36:22:45:29:0f:3c:70:5a:66:5e:8a:5a:0e:
                    a9:e2:d1:2a:63:7f:55:bd:75:be:4f:73:95:cc:95:
                    e8:12:70:2c:45:d3:4c:89:e8:a7:15:dc:de:52:41:
                    61:eb:1d:26:b9:76:cf:e2:88:89:a5:14:44:1a:ff:
                    9e:1b:fb:02:45:5c:f3:6c:e6:66:e6:1e:24:54:15:
                    5d:f1:2b:97:78:8b:fc:98:52:11:32:a7:29:c2:4e:
                    25:cc:8b:5b:2a:a1:b6:19:6b:df:dc:7a:08:04:11:
                    c3:44:97:cd:50:a8:a4:69:ba:96:ea:21:41:29:58:
                    48:f1:03:da:25:e6:5c:02:8f:6a:43:ed:20:a0:e4:
                    e1:bc:b9:8a:e2:e2:89:1c:14:9f:c2:83:54:b3:ba:
                    00:84:71:0f:b9:42:41:c0:59:9a:9f:78:54:c5:a9:
                    19:38:f3:50:dd:13:40:a8:25:0e:0e:bb:6c:73:b4:
                    6a:b6:77:9b:46:3c:7a:ba:81:cd:32:d0:15:0a:49:
                    70:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:85:3D:75:73:65:FC:7A:EE:0C:1C:EC:9F:69:94:A9:D3:0E:05:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8b9e3415-00f8-3ce1-a444-7742c64818b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.132.112.0/24
                  216.132.126.0/24
                  216.132.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:f5:aa:bd:50:80:cc:a7:f6:59:8f:fb:20:f8:7e:cb:e7:b1:
         74:c2:36:78:b3:a0:57:3a:2f:e6:bd:da:34:56:7f:ee:af:82:
         ed:08:6d:a7:87:12:00:97:56:e3:de:55:8e:7b:ee:cf:81:c4:
         57:aa:40:bf:9b:89:b1:62:6c:49:04:47:77:fc:c5:55:30:8f:
         f4:5c:35:44:89:a1:7c:fb:07:bc:03:03:7c:2c:dd:f8:4b:c3:
         c5:cf:a1:7e:97:5a:b7:63:0f:52:31:47:85:e8:e1:6f:42:0f:
         fb:bc:b6:56:94:ac:45:98:61:c6:52:20:c1:d0:3e:a9:44:07:
         5b:f6:30:b5:9c:00:08:55:07:7e:c3:8d:1f:a1:79:c6:0e:fa:
         ef:96:62:57:d5:cd:fe:86:12:08:7d:73:3f:28:fa:f0:64:78:
         b7:2f:bd:5f:86:f9:94:fa:72:ef:93:70:e6:29:9e:81:9c:a7:
         2a:5d:67:87:62:e9:75:93:ac:19:a1:e8:e9:f4:57:f3:81:40:
         d3:38:5d:51:a3:11:cc:52:0a:08:38:26:13:c1:d1:f8:46:47:
         0c:8b:a5:0b:ed:5a:7b:6b:b2:b0:81:c6:f3:b6:b6:c9:58:e3:
         1e:db:4a:b8:9f:ad:19:59:5a:b0:44:2c:a9:57:a9:b9:e4:5e:
         58:3d:d6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:59:26 2026 by rpki-client