Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76554884-d362-4eab-82d1-ed9e4c9b289a/f78e47d3-ef6c-3185-b8c6-7337a70ecef1.roa
File:                     f78e47d3-ef6c-3185-b8c6-7337a70ecef1.roa (raw, json)
Hash identifier:          YpfRp4ccmb8tNNXgcCAoWaz4i7mNx0vJGpI8g7RIIgE=
Subject key identifier:   DC:B4:97:34:BC:31:64:4F:02:0D:51:F4:CA:FF:54:5C:55:D1:91:C6
Certificate issuer:       /CN=76554884-d362-4eab-82d1-ed9e4c9b289a
Certificate serial:       010D0C9F4328584F498A67248B9562DF5ECF2560
Authority key identifier: 04:95:91:7C:FE:2D:FF:E0:7B:45:BF:CD:0E:72:A9:8C:A2:C4:25:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76554884-d362-4eab-82d1-ed9e4c9b289a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76554884-d362-4eab-82d1-ed9e4c9b289a/f78e47d3-ef6c-3185-b8c6-7337a70ecef1.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36363
IP address blocks:        216.170.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76554884-d362-4eab-82d1-ed9e4c9b289a/76554884-d362-4eab-82d1-ed9e4c9b289a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76554884-d362-4eab-82d1-ed9e4c9b289a/76554884-d362-4eab-82d1-ed9e4c9b289a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76554884-d362-4eab-82d1-ed9e4c9b289a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:67:24:8b:95:62:df:5e:cf:25:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76554884-d362-4eab-82d1-ed9e4c9b289a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=c6bf9dc1-b5ca-4296-8d97-15138d70b317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:28:ae:15:31:ef:e4:c9:94:2b:7c:ba:d9:bd:
                    8d:79:4b:1b:a0:0e:b4:17:5f:b8:59:03:f3:0e:04:
                    3a:46:b5:7b:0c:51:bf:d6:99:c2:ec:57:3d:ef:67:
                    c1:0a:1d:bd:7f:b0:bf:f2:66:66:9a:d8:1f:4b:44:
                    fc:e5:56:cd:40:56:ab:08:e1:30:fe:92:1d:a9:a7:
                    0a:af:34:c5:d0:23:c6:67:83:e6:aa:81:14:2b:33:
                    c1:b5:40:f5:82:90:03:a2:88:ff:46:16:d9:7f:83:
                    00:69:7b:2f:5f:f5:02:d9:48:25:49:20:5f:95:87:
                    94:72:c7:b7:5f:6b:e5:66:38:ad:ff:aa:7f:57:df:
                    47:28:75:39:f0:0d:b3:85:26:a4:95:b5:e5:08:db:
                    fd:97:ea:95:08:b6:c9:77:bd:5c:3a:d8:8a:38:d8:
                    9d:e2:d8:da:11:55:40:1f:8d:2f:3c:b6:dc:0b:84:
                    22:b5:66:2e:cb:5e:28:56:c8:da:7d:1d:09:b2:eb:
                    e8:28:15:a1:ba:5d:c9:11:03:e3:e8:78:06:4b:43:
                    53:8f:1c:40:eb:1d:58:88:f1:cb:46:db:c1:1f:c4:
                    03:1c:4b:3a:a3:a0:e0:c2:22:15:e7:ef:71:b8:7d:
                    f7:6a:9f:f3:3b:c8:68:85:1a:d1:fe:0c:b4:d3:e1:
                    3c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B4:97:34:BC:31:64:4F:02:0D:51:F4:CA:FF:54:5C:55:D1:91:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76554884-d362-4eab-82d1-ed9e4c9b289a/f78e47d3-ef6c-3185-b8c6-7337a70ecef1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76554884-d362-4eab-82d1-ed9e4c9b289a/76554884-d362-4eab-82d1-ed9e4c9b289a.crl

            X509v3 Authority Key Identifier:
                keyid:04:95:91:7C:FE:2D:FF:E0:7B:45:BF:CD:0E:72:A9:8C:A2:C4:25:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76554884-d362-4eab-82d1-ed9e4c9b289a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.170.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:db:aa:a2:b2:5b:74:e8:3e:dc:7d:55:64:21:7f:dd:7a:98:
         23:78:8b:60:72:61:d2:15:35:3b:ff:69:4d:54:f5:08:15:e0:
         f3:84:f1:9f:4c:f3:ad:78:fd:1a:f7:25:54:b4:cc:8a:c7:92:
         aa:91:4b:07:30:e5:f4:03:c8:af:92:41:6e:89:b0:21:9d:c0:
         ad:63:21:7d:b2:e2:27:a3:7a:d5:f3:df:27:75:df:21:a1:c2:
         b0:bd:d5:78:d9:ae:3d:c9:f1:8b:b5:3a:1a:e5:f4:57:cf:1c:
         31:86:4f:ea:15:01:71:5c:ad:8b:2a:5c:81:8b:eb:0b:7a:62:
         f3:26:95:20:bf:87:5d:61:39:ae:4f:97:12:7b:f1:d0:98:e3:
         a0:9d:5c:d7:4c:5a:2d:12:c3:67:48:bc:06:78:86:78:ab:3d:
         3d:8c:ae:5b:a2:87:c4:f4:f5:54:ea:2d:87:04:8d:5a:71:62:
         6d:e1:c2:bc:db:4e:f3:2d:ca:5b:6a:5b:36:e0:d3:4e:cd:76:
         42:8f:11:fa:34:15:a1:06:ce:72:47:3c:d3:e5:6e:eb:4e:fd:
         16:ee:18:ae:67:de:20:db:6d:f9:7b:6d:ad:16:43:96:5c:a2:
         f6:04:4e:c7:83:1c:e7:d3:cb:86:3e:26:ae:5f:8e:1c:93:3f:
         77:5e:75:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:45:06 2026 by rpki-client