Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/850e8d96-3713-3330-a09f-44ed58d840bf.roa
File:                     850e8d96-3713-3330-a09f-44ed58d840bf.roa (raw, json)
Hash identifier:          Y8dNMC/XQi0J8Yoov5FyImWIBBtVC33j9GmYGbVZ57o=
Subject key identifier:   BC:BA:67:D6:EA:E5:E1:CD:1A:95:E9:03:4F:99:17:15:51:5B:7F:C5
Certificate issuer:       /CN=a4e67936-c857-487d-93df-2dff7fa79988
Certificate serial:       010D0C9F4328584F02422FD42724A4DBA570AA00
Authority key identifier: 16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/850e8d96-3713-3330-a09f-44ed58d840bf.roa
Signing time:             Sun 30 Aug 2026 13:00:11 +0000
ROA not before:           Sun 30 Aug 2026 13:00:11 +0000
ROA not after:            Sat 28 Nov 2026 14:00:11 +0000
asID:                     19940
IP address blocks:        216.16.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:02:42:2f:d4:27:24:a4:db:a5:70:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e67936-c857-487d-93df-2dff7fa79988
        Validity
            Not Before: Aug 30 13:00:11 2026 GMT
            Not After : Nov 28 14:00:11 2026 GMT
        Subject: CN=7934c2a5-a675-4c8d-a2ff-aed6f6ba1a7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:0c:8e:bf:b4:a7:f4:41:16:c2:da:39:df:0b:
                    0d:d4:1c:aa:05:3c:ff:73:3d:61:7f:25:9a:b4:18:
                    ad:73:48:3c:58:7c:d4:2b:0d:b7:8e:95:da:80:97:
                    b6:05:5a:50:a3:e2:30:41:2b:36:c8:cf:74:ae:2d:
                    b3:ce:59:e7:36:bd:df:d9:fa:08:1c:05:2c:cd:64:
                    ee:d8:36:f3:a8:b0:6d:ea:f5:c1:6d:d1:09:92:64:
                    00:2a:d5:04:92:52:66:a7:ff:e2:f3:fe:cd:75:d1:
                    41:74:15:d5:94:02:f3:98:ea:ce:22:56:5a:48:6a:
                    16:4a:e8:73:5b:8c:0c:96:9e:e1:0b:b4:98:a9:cf:
                    e3:cc:a9:02:48:42:56:fd:f6:c8:6e:5f:d9:69:9d:
                    8f:52:35:81:97:7b:5e:56:80:ea:b9:be:a6:0d:65:
                    7b:4b:00:96:ab:bc:88:47:7f:e3:34:86:a7:ad:20:
                    c5:8d:e9:0e:31:09:eb:5f:27:fe:a9:07:e4:02:67:
                    29:2b:c0:d9:e3:ab:61:82:78:77:c2:cd:03:a7:0a:
                    fc:d0:45:65:87:26:da:77:b1:27:79:fe:40:4d:ca:
                    e4:52:96:48:ad:16:f6:67:2b:76:1f:76:32:d9:ce:
                    d9:35:18:ac:aa:cb:e2:e1:87:9e:65:44:2e:a1:2a:
                    ad:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:BA:67:D6:EA:E5:E1:CD:1A:95:E9:03:4F:99:17:15:51:5B:7F:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/850e8d96-3713-3330-a09f-44ed58d840bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl

            X509v3 Authority Key Identifier:
                keyid:16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.16.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:a9:56:e7:5d:9f:cc:00:a2:dc:a0:c7:e9:bf:f7:3b:ea:32:
         07:0e:e3:81:99:0d:43:54:a7:c5:b3:59:58:83:83:4f:bb:8f:
         fd:11:bf:ed:bb:e2:90:e8:f3:70:ad:bf:57:15:88:8a:43:e0:
         e9:c3:03:33:2c:5d:fe:bf:e5:8f:ac:a0:22:c9:f5:da:2e:79:
         8f:44:40:d5:6d:be:8c:7d:1f:ea:80:37:c4:cf:f1:1a:b2:cc:
         a0:ad:8a:97:f7:25:b4:dc:04:e9:ba:6c:21:a0:00:9e:89:81:
         e4:31:77:13:7d:af:e0:75:d3:d8:c9:95:93:51:2d:31:0a:4b:
         4e:4a:23:67:97:62:db:c7:14:56:33:79:5d:f8:dc:35:0f:ba:
         01:8e:c5:b6:27:6c:4c:29:94:bc:e1:2c:47:ee:d8:88:ef:0c:
         06:7e:ff:cc:1e:49:41:95:39:26:f4:61:5a:ad:cc:d4:04:84:
         92:68:a5:56:eb:ed:d7:b2:42:3a:77:f7:30:c8:bf:e4:8c:d4:
         73:ac:bb:f6:c0:f3:46:7a:b3:6a:dc:20:a8:4c:4c:12:85:b5:
         d0:b5:a8:02:e5:2f:f4:8d:f4:d3:40:65:bc:46:d1:16:a1:5c:
         3c:7e:ad:41:ac:53:74:34:09:44:2c:0f:60:9d:70:18:84:4c:
         09:cf:44:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:46:27 2026 by rpki-client