Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6686f512-a65f-35c8-87af-4d26e6b1ccfc.roa
File:                     6686f512-a65f-35c8-87af-4d26e6b1ccfc.roa (raw, json)
Hash identifier:          cjhr2daU2IwcM+kzf1/mdhnOonPTX70FgtXvMYFSjhg=
Subject key identifier:   F3:82:E4:14:37:08:FC:85:8D:DF:A5:A7:A5:FE:9B:15:1E:E1:E0:29
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584F497D1CBEB1D6F8CDE1D62700
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6686f512-a65f-35c8-87af-4d26e6b1ccfc.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     15169
IP address blocks:        216.58.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7d:1c:be:b1:d6:f8:cd:e1:d6:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=47128cde-7c65-4203-8a11-2d9483392719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:94:80:3d:dd:8c:b7:84:04:84:06:17:83:8e:
                    d9:bf:6f:ee:d5:d5:0d:89:88:49:7e:2f:fb:a7:1f:
                    65:cf:f7:ce:5b:19:26:7b:82:09:b2:ea:d5:e0:4e:
                    66:5b:9c:0a:fa:a0:67:25:f2:52:c1:24:56:f4:f4:
                    6f:f7:e1:14:a4:bd:28:4a:7c:a6:a8:f8:42:63:fe:
                    e7:0d:4e:f9:df:ad:e2:e2:a5:04:fa:64:01:5d:96:
                    88:b9:82:e4:0b:67:b9:8f:4b:e6:ce:09:30:21:cf:
                    05:f4:8c:18:9d:ec:25:19:62:13:e9:85:6e:b0:d9:
                    93:08:33:d4:41:65:69:62:23:03:ed:51:0c:15:c4:
                    2c:ab:14:aa:67:0d:4d:e6:44:db:69:3f:50:a5:0a:
                    03:8e:aa:85:b8:b6:42:b1:88:4a:f6:b3:01:49:5d:
                    2a:94:40:a6:59:dc:3e:44:6e:a2:05:c9:7d:08:7b:
                    d5:85:d2:1f:9c:a6:aa:31:06:fb:a0:ff:15:02:43:
                    12:f0:ed:b7:45:9b:3b:82:22:8e:9c:89:83:71:cb:
                    45:db:b1:f3:b0:15:9b:82:51:47:be:0a:41:d0:e6:
                    38:39:cd:14:69:cd:24:b0:46:b6:ee:d3:10:09:74:
                    aa:3d:e1:d1:a4:92:b6:8d:c0:5e:63:04:51:5e:02:
                    34:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:82:E4:14:37:08:FC:85:8D:DF:A5:A7:A5:FE:9B:15:1E:E1:E0:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6686f512-a65f-35c8-87af-4d26e6b1ccfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.58.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:35:5a:2b:f6:d9:f5:16:42:a3:dc:36:ab:d4:e5:f0:d1:98:
         2c:49:f6:f3:53:ff:23:b3:17:8d:1f:8a:ad:4a:17:1b:cf:37:
         21:8a:a3:e4:8c:f7:45:4b:38:26:d4:0b:95:f4:2b:f8:b7:2d:
         08:45:74:93:d6:94:06:59:22:41:b3:d6:ac:ae:66:f7:36:8b:
         86:ea:4a:ee:87:73:8f:9f:04:de:d4:9d:b0:8a:d9:64:36:79:
         b6:d2:cd:30:36:51:f1:ba:76:43:3a:d0:3e:3b:e5:94:3a:b5:
         16:9d:a6:27:a7:72:fb:e9:70:48:f5:b5:8b:d1:1f:02:26:29:
         8a:28:f2:93:fa:ba:18:b5:91:5d:04:af:0a:f5:a8:ff:9c:e4:
         b7:a9:70:02:0d:a2:8c:18:c7:5c:a5:21:fd:f8:f4:6a:c9:16:
         31:ca:46:cb:e8:a5:4e:02:5d:f9:dc:32:8c:47:83:2e:33:7d:
         21:1e:7e:6e:ff:65:4f:2c:69:74:c2:49:18:88:3b:98:bd:2f:
         c5:f0:b2:df:e9:61:f2:98:a9:89:7f:4f:7a:67:7e:d3:1e:bd:
         24:0f:95:fb:e0:d2:e8:2b:57:89:58:6b:bb:56:d0:fb:aa:76:
         9a:15:f9:78:42:69:96:ed:a3:c2:db:fb:22:16:3c:4f:b3:5d:
         ae:85:c3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:47:50 2026 by rpki-client