Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/f4307296-d6e2-3e0a-900c-57982b864b86.roa
File:                     f4307296-d6e2-3e0a-900c-57982b864b86.roa (raw, json)
Hash identifier:          GU+M9ucsavLXgPv1sxIfAHnx17P+0SjD5yJyy+2A8Fc=
Subject key identifier:   DB:3A:6F:E6:52:6C:6D:1B:3C:F6:F9:6B:4F:1E:D3:5D:FB:AD:6A:47
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F4328584F35E7C9383D746EFB19DD91C0
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/f4307296-d6e2-3e0a-900c-57982b864b86.roa
Signing time:             Fri 18 Sep 2026 01:00:12 +0000
ROA not before:           Fri 18 Sep 2026 01:00:12 +0000
ROA not after:            Thu 17 Dec 2026 02:00:12 +0000
asID:                     13760
IP address blocks:        216.170.82.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:35:e7:c9:38:3d:74:6e:fb:19:dd:91:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Sep 18 01:00:12 2026 GMT
            Not After : Dec 17 02:00:12 2026 GMT
        Subject: CN=d988928e-3d78-4f13-af73-33ef79e944ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6f:37:f9:35:0a:3d:b3:b3:d7:b7:17:d0:46:
                    5d:57:77:18:03:e1:be:c4:b5:66:56:e5:e3:cc:b0:
                    98:d9:5b:5d:35:74:e5:55:41:b4:0a:e4:86:1e:0a:
                    74:34:07:d9:9a:7f:2d:23:10:58:ae:1b:0f:8a:50:
                    ed:2d:11:48:b8:34:35:27:3b:9a:e2:84:42:ec:b4:
                    e6:72:7d:f2:53:83:af:ac:cd:91:66:9f:e3:4d:48:
                    fc:c8:fe:6b:b1:f2:5d:e9:74:76:18:07:b0:79:6e:
                    9f:98:cb:bd:9c:12:46:bd:47:38:35:d3:ca:94:18:
                    ee:9a:5f:6b:83:0e:01:12:b9:34:42:b4:2c:10:c7:
                    00:79:ac:3c:d7:9f:4e:f1:bd:79:22:46:b9:0e:08:
                    c6:4b:ee:af:3f:43:74:7b:6f:c6:9d:ee:c7:9c:8a:
                    c6:8c:5b:18:e1:c2:64:11:91:5e:a8:b2:20:dd:fe:
                    17:31:96:98:57:e6:90:fb:cf:c3:7e:68:70:5b:9c:
                    af:47:f7:fe:f2:ba:30:ef:37:01:cc:57:3a:30:af:
                    6d:e2:04:36:17:3e:5c:c6:a7:a2:cd:13:33:23:7b:
                    5c:b4:d8:04:fc:42:ed:0c:24:db:48:53:27:ec:c8:
                    a9:76:e1:9d:d4:17:dd:7d:3e:35:a1:63:ad:f3:3c:
                    3a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:3A:6F:E6:52:6C:6D:1B:3C:F6:F9:6B:4F:1E:D3:5D:FB:AD:6A:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/f4307296-d6e2-3e0a-900c-57982b864b86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.170.82.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:c0:6b:d6:5e:e9:93:0c:5b:22:3a:a8:7a:fc:ca:59:67:34:
         9e:4b:77:41:5b:3c:9e:19:40:32:d3:03:1b:bf:75:49:fe:f7:
         e5:f9:8f:08:3c:e8:98:9b:c5:5b:cf:fe:8c:91:91:35:c7:e0:
         20:77:72:06:ed:c9:2f:ac:df:98:e8:67:69:27:1f:f1:99:f0:
         fa:7b:cb:db:af:6f:dd:11:41:21:4e:34:fd:60:90:f4:07:5d:
         0d:8b:5c:7b:10:95:3a:15:92:c4:79:ea:e9:04:e6:f0:2c:fc:
         c4:26:ce:84:3b:74:ae:ef:8f:47:ed:78:18:c7:e7:45:1d:4c:
         aa:71:b7:2c:ae:e7:94:4f:3d:12:4f:28:05:be:6e:f6:a7:c7:
         54:77:91:0e:05:fd:90:f9:e2:be:72:90:2d:68:c5:55:0e:10:
         40:6e:e9:80:db:48:84:08:3e:51:49:3e:1c:dd:a7:af:c4:24:
         f6:c4:f8:f5:6f:a0:b7:22:84:3a:56:1c:77:fc:8b:f7:30:58:
         f3:0b:13:7b:81:45:1c:c2:d5:5a:a8:4e:68:37:a4:18:fb:a5:
         9d:ff:d1:b2:81:9f:1a:a2:62:29:95:36:95:58:f9:87:99:95:
         8c:5e:cb:be:26:35:2d:89:2d:4e:5e:d3:69:9e:ea:2b:0e:62:
         b9:bb:a0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:31:52 2026 by rpki-client