Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/4477095d-17c4-3ed6-837a-9d23141a099f.roa
File:                     4477095d-17c4-3ed6-837a-9d23141a099f.roa (raw, json)
Hash identifier:          wkWQfMcnPTVky9YtpT2IlLztXsb0QG19GEJcyhzM5jk=
Subject key identifier:   E2:B6:C9:33:D3:8C:33:CF:27:A6:C2:A8:73:A2:11:DA:B0:CF:4A:28
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584F42781CD0FAC69E328689CDB0
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/4477095d-17c4-3ed6-837a-9d23141a099f.roa
Signing time:             Tue 22 Sep 2026 13:00:12 +0000
ROA not before:           Tue 22 Sep 2026 13:00:12 +0000
ROA not after:            Mon 21 Dec 2026 14:00:12 +0000
asID:                     16417
IP address blocks:        216.71.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:42:78:1c:d0:fa:c6:9e:32:86:89:cd:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Sep 22 13:00:12 2026 GMT
            Not After : Dec 21 14:00:12 2026 GMT
        Subject: CN=46043534-9ccf-4f14-b646-d4c7d648ab26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:cb:e3:d7:20:ed:8e:71:d8:48:9c:de:63:30:
                    ae:ce:64:28:f5:a4:ca:f2:f0:91:3e:7b:95:86:13:
                    ed:30:ca:0d:4d:1d:7c:0b:5d:47:42:f4:d4:c2:8d:
                    1e:e9:e1:69:2a:0c:bd:d9:ea:a7:cc:fe:b9:b4:2d:
                    9e:78:71:95:82:80:48:e0:d2:3a:d8:fd:75:42:40:
                    02:d0:ec:24:b9:88:ed:50:fb:e4:dd:b9:09:df:63:
                    20:f7:6c:87:40:0b:2f:3f:84:bc:72:46:48:f3:db:
                    24:1d:6d:7d:99:57:06:02:42:9f:77:80:26:1b:b6:
                    e5:f0:12:4c:c1:e2:4b:97:2a:11:ce:a4:e0:93:d4:
                    60:1a:9b:ed:fa:10:e4:9b:98:97:42:ca:30:e8:ed:
                    d8:44:56:80:38:57:7f:f0:3a:14:07:69:09:a5:19:
                    d0:6d:3f:b2:50:95:cc:60:35:c9:6a:d9:fd:14:90:
                    b6:22:c2:c5:cf:24:98:0a:8a:22:3b:33:18:c1:e9:
                    a5:67:11:1e:9e:ee:b3:5a:17:61:46:0a:db:d2:94:
                    d2:03:be:50:ff:de:53:f1:e6:1a:3a:71:d9:5b:c5:
                    33:59:69:79:cf:40:e7:7c:eb:33:66:b5:c6:b6:0d:
                    64:00:50:0e:89:2f:a2:ef:d1:32:7b:d2:3b:24:d2:
                    6f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B6:C9:33:D3:8C:33:CF:27:A6:C2:A8:73:A2:11:DA:B0:CF:4A:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/4477095d-17c4-3ed6-837a-9d23141a099f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.71.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:1d:51:39:5b:51:5c:b1:a4:c7:4a:44:78:0b:c7:25:56:52:
         fb:e1:0b:01:92:4a:cd:6c:39:8e:8c:b4:31:a8:33:44:85:1f:
         dd:8d:d0:ae:11:f4:f9:6d:6a:ed:29:ad:c2:20:8f:2d:27:70:
         52:ec:97:f7:9c:44:9d:5d:0b:64:45:ea:5e:d1:b3:25:0b:4f:
         98:77:36:81:d1:3b:ec:78:de:87:6d:ea:29:19:ed:b9:be:2c:
         ee:fc:29:59:e7:b8:55:df:c5:f4:b4:73:89:38:6c:2d:05:12:
         7e:18:ef:e7:ca:b5:0a:ac:1b:82:0e:ba:07:a3:e0:c4:39:2f:
         fa:8f:48:70:c7:d9:91:8c:41:95:02:12:bf:f0:50:24:0e:b7:
         ab:1e:41:58:98:9c:6c:70:22:32:69:02:02:f9:e5:1c:3e:3b:
         de:ce:a5:af:0c:d0:6e:66:27:08:3a:37:df:47:3f:7b:0f:bc:
         a6:99:bd:ed:f4:d5:c0:a7:c7:52:22:e2:9a:c2:9a:61:7a:74:
         84:8e:c7:89:fe:c4:67:cd:39:6e:55:45:e3:55:db:db:fc:83:
         20:94:dd:b1:87:ee:2c:80:8f:a4:a9:6f:71:c7:52:f1:0b:0c:
         90:0d:ab:07:69:1f:35:d5:67:65:7f:bc:48:77:73:ce:7e:46:
         00:4f:65:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:21:39 2026 by rpki-client