Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/0c564225-5f3b-3938-aa93-4b0de923d8f8.roa
File:                     0c564225-5f3b-3938-aa93-4b0de923d8f8.roa (raw, json)
Hash identifier:          udOvYPfBPqmZZAmJcNDYEa+H9jgjAdYdAwH7zy1TVB0=
Subject key identifier:   A7:E0:6B:51:86:6C:32:46:25:81:4D:D4:5B:08:D6:49:E5:94:E6:F6
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584F43DD59166B357E050EC94780
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/0c564225-5f3b-3938-aa93-4b0de923d8f8.roa
Signing time:             Wed 23 Sep 2026 01:00:12 +0000
ROA not before:           Wed 23 Sep 2026 01:00:12 +0000
ROA not after:            Tue 22 Dec 2026 02:00:12 +0000
asID:                     30058
IP address blocks:        216.227.140.0/23 maxlen: 24
                          2001:49f0:d004::/48 maxlen: 48
                          2001:49f0:d010::/48 maxlen: 48
                          2001:49f0:d026::/48 maxlen: 48
                          2001:49f0:d047::/48 maxlen: 48
                          2001:49f0:d09a::/48 maxlen: 48
                          2001:49f0:d0d0::/48 maxlen: 48
                          2001:49f0:d0e5::/48 maxlen: 48
                          2001:49f0:d0f8::/48 maxlen: 48
                          2001:49f0:d126::/48 maxlen: 48
                          2001:49f0:d127::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:43:dd:59:16:6b:35:7e:05:0e:c9:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Sep 23 01:00:12 2026 GMT
            Not After : Dec 22 02:00:12 2026 GMT
        Subject: CN=9a27e72e-7b8c-407a-ada3-6b529d46fc2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:05:0b:21:82:96:d8:28:9c:9a:06:54:f8:9e:
                    5e:3e:fa:81:da:f3:1b:7b:d7:ce:7f:55:df:31:10:
                    91:90:00:36:c8:38:30:8e:ba:c5:5d:08:5b:bc:b1:
                    34:d3:57:0c:50:f9:bc:3a:9a:a8:cc:9a:21:07:96:
                    43:06:e1:9f:2a:f3:01:a2:ab:9a:65:8a:4f:a2:61:
                    78:4a:57:a5:4b:bb:7a:e6:0b:32:7e:79:8f:b8:10:
                    1d:2c:e3:37:f9:1f:33:e0:dd:f8:d0:3d:66:a6:e5:
                    d0:15:5b:1a:12:6d:3f:56:8e:44:02:1b:15:2c:2c:
                    dd:df:6e:73:24:d5:ab:5a:9f:7c:87:fe:a4:b0:ce:
                    f0:1b:ca:da:f5:d0:f3:ef:7f:61:f6:96:65:32:7d:
                    01:fa:f2:2a:44:6a:d3:d6:89:c7:c7:ac:d8:3f:a0:
                    99:bb:83:09:ba:36:a5:83:74:49:25:06:b7:09:09:
                    5d:0e:69:f0:54:aa:e6:97:b9:9c:5f:a5:7f:85:28:
                    c6:e9:e6:fa:a2:45:1d:2a:1c:05:7d:3a:91:6d:7e:
                    36:ed:52:93:58:10:65:11:25:d6:04:7e:d9:ef:9a:
                    d7:c2:92:4c:ad:7e:3e:03:d9:aa:ab:41:04:56:02:
                    ac:a4:5c:e0:f1:a3:37:42:f8:45:f1:13:29:af:1c:
                    02:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E0:6B:51:86:6C:32:46:25:81:4D:D4:5B:08:D6:49:E5:94:E6:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/0c564225-5f3b-3938-aa93-4b0de923d8f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.227.140.0/23
                IPv6:
                  2001:49f0:d004::/48
                  2001:49f0:d010::/48
                  2001:49f0:d026::/48
                  2001:49f0:d047::/48
                  2001:49f0:d09a::/48
                  2001:49f0:d0d0::/48
                  2001:49f0:d0e5::/48
                  2001:49f0:d0f8::/48
                  2001:49f0:d126::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:4c:ec:9a:dd:e1:d1:bc:70:0b:cc:b8:31:75:d4:a0:f2:95:
         f2:c7:0d:21:5d:54:2b:a8:ad:cb:2e:50:07:dc:66:47:fa:f4:
         4b:38:2c:ba:6f:e3:dd:97:8d:3d:4a:db:ab:fb:cb:2e:83:41:
         7b:01:ac:e7:04:17:23:ef:a7:2f:47:61:9e:b1:86:3e:67:ee:
         a5:db:85:61:02:24:d3:38:9f:ec:1a:d6:ae:b8:66:22:b0:6a:
         e8:86:7f:53:e6:04:10:11:95:3d:4f:a4:79:8c:20:21:50:d2:
         7e:d4:28:77:bb:af:91:15:96:21:70:cc:38:0e:df:43:4d:3b:
         a0:d9:ae:b3:e9:21:55:0c:30:26:67:3f:fb:c5:da:cd:b3:d2:
         c1:7e:cb:09:4c:dd:73:24:87:ea:ad:de:55:c6:f1:e3:ea:cc:
         6f:86:54:a2:e9:7b:0a:c6:40:1f:95:3e:e4:b7:7f:a2:e4:c3:
         93:52:76:aa:6c:1d:a0:a1:ae:0a:93:02:71:9c:c4:82:f9:cd:
         51:ba:3f:6a:d3:03:99:28:f9:34:e0:7b:68:98:72:26:3c:9d:
         22:71:f2:e2:f9:a0:91:98:06:23:36:9c:ee:08:e6:d2:2b:73:
         a5:6c:e8:60:08:8e:43:3e:3b:c1:71:08:fc:2a:04:23:a3:7e:
         ee:e0:05:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:33:06 2026 by rpki-client