Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/e522edec-898b-3d34-a0cc-add272b2192a.roa
File:                     e522edec-898b-3d34-a0cc-add272b2192a.roa (raw, json)
Hash identifier:          rrbxBcmadSEmUp0P6h300cg3gi9XoTP2jC5OMu981ug=
Subject key identifier:   0B:F6:C1:8B:B7:B5:DB:50:C5:7D:05:F6:4D:3A:03:82:30:0C:5C:19
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F4328584F4977374F1520081FF6FC7A80
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/e522edec-898b-3d34-a0cc-add272b2192a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     401415
IP address blocks:        216.106.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:77:37:4f:15:20:08:1f:f6:fc:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=44ff96c6-75f3-415f-962d-f2dad65d3922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c9:7c:18:4a:00:be:f6:ca:4b:5b:bc:3f:35:
                    af:8d:c7:a1:51:4e:9e:cb:41:fd:6d:c0:1f:04:ff:
                    db:05:92:99:a0:05:20:22:28:c0:06:72:fa:4b:44:
                    87:6e:d7:ab:4c:81:3c:dc:64:ca:e0:b5:c2:d3:ca:
                    03:37:36:7f:df:42:7c:2a:2f:45:2b:38:4c:4b:0f:
                    ca:6f:57:9d:c8:2b:ad:dc:e0:16:98:dd:a7:e3:5d:
                    e3:de:e0:96:dd:79:f9:e5:e2:53:26:9e:06:ae:e6:
                    2d:45:f4:a4:8e:33:57:df:b5:c2:fd:0d:dc:37:50:
                    62:b5:4b:28:95:ff:fb:b4:82:72:ab:d9:f7:f5:f1:
                    d0:8b:af:b3:7a:60:64:64:fc:f2:03:e1:cc:c5:94:
                    fe:86:38:f1:18:6b:26:07:d7:d4:cc:fb:21:8e:fa:
                    89:90:50:ee:74:7d:d5:5f:56:3d:ec:fe:18:d0:38:
                    0a:76:69:8f:15:2f:e2:d1:0f:db:48:28:74:c4:2a:
                    d0:44:1d:3b:66:21:c2:75:4e:68:13:60:0f:76:f7:
                    be:02:41:82:65:89:7b:8a:07:16:79:ba:14:63:20:
                    1f:12:66:80:16:26:ba:d9:21:72:54:9e:2d:5d:d6:
                    91:c9:ca:95:86:5c:e4:10:b1:49:27:36:aa:16:ef:
                    02:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:F6:C1:8B:B7:B5:DB:50:C5:7D:05:F6:4D:3A:03:82:30:0C:5C:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/e522edec-898b-3d34-a0cc-add272b2192a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.106.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:da:7a:00:35:b1:1c:53:a3:ab:a7:61:1d:ed:dd:b9:cb:ac:
         e5:7e:d8:da:0a:17:45:88:bd:f3:b9:bf:b4:66:85:7c:24:6c:
         62:a7:40:e7:68:0a:24:82:66:c4:42:40:63:47:01:b1:79:fd:
         c9:0d:ee:fc:54:26:b5:e9:60:7e:0d:cb:92:2a:76:c6:93:4e:
         4d:f0:47:5f:ad:6d:be:25:28:58:4f:fc:31:06:c4:87:03:be:
         22:d1:3c:c3:44:0a:b0:de:19:d7:a7:7e:10:96:4e:f2:3c:96:
         28:3e:77:73:21:1a:7d:dd:18:d9:84:ff:60:08:1c:72:21:11:
         e6:d6:96:32:a4:a5:19:09:07:ea:21:8a:de:d8:e7:f3:6e:5a:
         89:60:a3:83:ad:6a:07:bf:a7:19:1c:21:18:98:7e:7b:d2:04:
         8c:8a:b6:a5:f0:27:26:18:ac:e3:d0:ec:1a:b6:d9:10:30:10:
         a9:21:5a:7d:62:1a:1d:32:75:6f:52:e5:fb:75:9a:a2:e4:e2:
         eb:26:d0:0a:0f:49:3e:15:f9:bc:e8:11:45:59:b2:b8:a4:4c:
         f1:60:93:c5:af:4f:cc:08:7c:d4:a9:e5:5c:da:c2:58:9f:f6:
         1e:3c:0d:72:7d:01:fd:b0:ef:4a:48:47:86:fa:5f:9f:89:d2:
         33:fe:c5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:24:47 2026 by rpki-client