Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/8091efe8-79f3-3f71-b06c-f8011ffc4c4e.roa
File:                     8091efe8-79f3-3f71-b06c-f8011ffc4c4e.roa (raw, json)
Hash identifier:          QC1jxzs/h7DH5ZCjmYw7TCbmF8EcmuIhNRNfQOd3Gqg=
Subject key identifier:   0E:61:E7:A2:33:D9:3E:10:E7:7A:DE:4F:C3:9F:B2:36:87:EE:BD:F1
Certificate issuer:       /CN=67d0730c-5dbd-466b-a70c-5267ec1b7359
Certificate serial:       010D0C9F4328584F655D73B27BB4ED9E8B5127AC
Authority key identifier: 1D:C7:82:52:8E:1E:44:22:99:92:03:4E:5F:7D:7D:CC:A1:B7:AE:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/8091efe8-79f3-3f71-b06c-f8011ffc4c4e.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     14618
IP address blocks:        216.99.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/67d0730c-5dbd-466b-a70c-5267ec1b7359.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/67d0730c-5dbd-466b-a70c-5267ec1b7359.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:73:b2:7b:b4:ed:9e:8b:51:27:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67d0730c-5dbd-466b-a70c-5267ec1b7359
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=78d9ad0a-9bd2-48bb-a7f1-e59726d97eca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:62:df:27:17:f0:2a:28:13:14:0e:88:30:d8:
                    3a:87:68:3c:7b:f2:74:0d:f4:a5:fa:04:5b:5c:d5:
                    f0:3d:1a:92:87:14:af:ac:5f:13:16:6d:0f:24:27:
                    8b:bd:49:47:0c:7c:79:ae:1a:20:80:ac:5f:37:37:
                    64:5b:a3:e1:6a:35:dc:12:3b:28:3b:8b:df:40:59:
                    c9:c2:56:ae:a0:11:86:79:28:34:be:ca:6a:ae:7b:
                    ab:cb:16:d9:9b:95:06:75:3e:4f:de:97:16:e7:45:
                    20:86:a7:22:88:9a:20:97:24:42:5e:4a:f6:12:c8:
                    db:0a:1c:4a:8f:ec:1c:57:7b:81:ec:f9:13:2a:82:
                    0c:f2:5c:38:56:6a:63:50:53:d7:9c:df:64:89:d1:
                    60:72:fd:5c:6b:c7:f1:1c:d7:77:d4:d6:29:b2:0d:
                    ee:a2:39:98:fc:bc:e6:4d:0a:1a:20:40:0a:7e:1e:
                    82:f2:79:2b:bc:37:07:f3:9c:b5:86:e3:af:d6:fa:
                    72:eb:67:3f:e5:ac:b9:79:ff:a6:bf:50:f5:cb:32:
                    6a:15:bc:d5:a4:66:eb:1a:70:0e:c3:97:cf:30:4d:
                    48:79:b3:71:96:6e:78:a6:4f:88:2f:3f:a6:ad:87:
                    ad:ba:55:2f:e4:f1:69:2a:11:fc:8f:8c:f9:a9:b6:
                    e7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:61:E7:A2:33:D9:3E:10:E7:7A:DE:4F:C3:9F:B2:36:87:EE:BD:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/8091efe8-79f3-3f71-b06c-f8011ffc4c4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/67d0730c-5dbd-466b-a70c-5267ec1b7359.crl

            X509v3 Authority Key Identifier:
                keyid:1D:C7:82:52:8E:1E:44:22:99:92:03:4E:5F:7D:7D:CC:A1:B7:AE:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.99.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:73:ad:e4:f1:2c:21:4e:5b:45:e8:fe:4f:53:61:a8:5a:71:
         10:7f:3c:99:f3:c9:fa:27:dc:8d:08:a6:7b:03:f8:15:71:41:
         fe:08:4f:26:06:a4:58:20:e4:0b:8b:e4:43:cb:ef:c4:8b:63:
         c1:53:0f:dc:a1:ba:0e:a3:65:91:ec:db:fc:06:2b:d6:3e:fc:
         5c:ed:01:76:b4:0f:2a:70:ce:9c:ce:7f:3f:39:5f:8e:f2:f7:
         7d:13:c1:8d:ba:f6:a5:9b:e2:fd:d2:49:f7:79:09:e5:60:9a:
         73:30:db:6b:8b:cb:f7:43:29:9e:ad:7e:89:84:33:11:ac:d4:
         e8:ca:63:01:fb:a7:a2:19:b1:b4:69:2b:af:6b:0e:11:c6:6c:
         93:07:cc:31:af:a9:10:fc:ae:02:fa:c6:fe:69:1a:90:0a:bb:
         a2:4b:c4:2c:3b:61:bc:bc:c5:df:b5:18:de:5a:9d:ed:cf:99:
         c3:28:66:c8:de:ad:c3:c6:94:4a:f3:74:54:1c:76:62:6e:7b:
         0a:b5:7b:ee:21:83:25:34:b6:e8:cd:dc:b8:5b:b0:d8:3d:59:
         84:a4:e6:54:5d:e4:c9:5a:e3:27:18:b3:ee:cc:0b:e9:e3:64:
         f3:70:93:fb:9b:79:61:96:47:5e:bd:3a:a8:e8:c2:5b:a0:32:
         0b:f0:3a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:28:09 2026 by rpki-client