Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8396837a-f3b5-399f-a44c-be14bed14320.roa
File:                     8396837a-f3b5-399f-a44c-be14bed14320.roa (raw, json)
Hash identifier:          +ORuZ6MTVGZhhAp8MJns1JDA1M8eloNXDIw7PVdEa38=
Subject key identifier:   B4:5C:FC:B7:74:16:9D:FB:4F:CE:90:3D:3C:52:19:02:92:35:CC:A2
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EEEB76FC275E5A4D55E3FB080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8396837a-f3b5-399f-a44c-be14bed14320.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     16625
IP address blocks:        96.16.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:6f:c2:75:e5:a4:d5:5e:3f:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=9c50d4a0-3bab-4b7f-a115-c01156ab6d02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:2d:67:c0:b8:f5:f0:9a:3d:4c:fa:97:f0:de:
                    a5:b4:71:7b:23:18:63:4d:1c:f7:15:ab:72:4b:ab:
                    3e:a9:db:39:0c:53:35:2f:60:d9:39:d4:be:85:3b:
                    12:df:92:56:b2:94:a0:59:c8:6b:9a:2c:35:a0:6a:
                    41:87:0c:a9:d9:49:c2:0a:d9:4d:f3:35:ba:8d:f1:
                    94:9d:1e:d3:b8:f3:63:3a:7e:36:92:fb:0c:cc:b0:
                    ee:85:0c:97:5e:81:a9:92:ab:fc:6c:76:ab:00:77:
                    3c:a6:c7:29:b2:53:30:0a:16:89:1a:e9:b3:ad:e9:
                    8a:38:a5:1c:1b:ac:bf:0d:4d:d4:c8:70:74:74:9e:
                    ca:5d:a2:b4:49:90:69:7f:ee:18:22:c9:a0:97:b2:
                    99:4e:a1:ae:bd:a9:12:2b:73:e9:3f:02:68:65:0c:
                    90:29:c0:1b:54:26:1a:ca:e8:4c:12:0d:e9:5c:f4:
                    06:40:77:33:90:48:d3:d7:02:e2:b9:ff:85:ac:58:
                    44:cd:13:23:0a:16:ce:ce:16:cd:d7:72:6e:68:29:
                    b4:aa:aa:3b:fb:9c:41:90:ae:90:13:59:fc:a7:62:
                    47:67:f5:bf:8a:17:8c:f4:cb:5b:ee:e0:43:34:2b:
                    8f:b6:8d:e0:95:6f:35:e3:f2:1b:bf:e9:5b:cc:f1:
                    4a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:5C:FC:B7:74:16:9D:FB:4F:CE:90:3D:3C:52:19:02:92:35:CC:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8396837a-f3b5-399f-a44c-be14bed14320.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.16.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:d8:9a:52:cc:ca:4a:c5:c0:eb:a5:63:d0:2c:e4:fa:40:a3:
         ca:5a:2b:28:62:cd:45:69:e2:8a:14:3d:d1:35:15:67:19:d5:
         61:a1:55:88:e9:8e:cb:52:60:61:8a:f3:ca:9a:f8:b9:2f:43:
         0e:b2:a5:6c:f0:8d:36:82:18:59:4c:d6:5b:e0:7d:ff:f1:11:
         24:81:51:a1:33:4e:89:46:32:ac:cf:f9:9a:4f:5d:a4:7f:21:
         b0:dc:58:da:d2:b9:41:2c:18:5e:13:94:75:52:41:47:e7:be:
         38:0c:8f:bf:79:5c:d0:50:9f:68:d6:49:bc:96:e5:41:39:ce:
         62:a8:15:83:c2:da:7c:29:bc:8e:b1:5a:fc:09:60:fb:d9:ee:
         9a:9c:d1:47:db:87:ad:41:4a:59:3b:ff:0f:80:a0:11:4e:33:
         9c:1a:94:92:97:64:4c:14:c1:4f:c0:b2:92:9c:11:bd:ac:7a:
         9f:bf:7a:11:18:3a:ed:a2:f1:88:ad:eb:46:f7:9f:ef:6e:93:
         c9:01:e6:c9:65:e5:8e:02:88:79:ed:a1:ed:1d:4d:81:fa:09:
         1e:dd:dc:7a:2c:bb:25:cd:24:b2:45:66:df:42:f4:9e:33:87:
         bd:f0:16:bb:9a:77:df:40:5a:ae:6a:56:44:c1:9f:70:9d:18:
         d5:fc:69:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:29:37 2026 by rpki-client