Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/88968477-21f3-3588-901e-e56dfa23609a.roa
File:                     88968477-21f3-3588-901e-e56dfa23609a.roa (raw, json)
Hash identifier:          fRK6t5VzeQlbcCHzn0P++4Myxrpji1TPaYk2Gz3LqU0=
Subject key identifier:   B7:FA:A5:97:85:88:86:FB:BE:2F:4B:86:35:45:5D:16:47:05:0E:26
Certificate issuer:       /CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
Certificate serial:       010D0C9F4328584ECBD1D198C6D5BC14E8709580
Authority key identifier: DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/88968477-21f3-3588-901e-e56dfa23609a.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     16509
IP address blocks:        216.24.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:d1:98:c6:d5:bc:14:e8:70:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=7da7871d-7f8b-40d3-b733-c854dee6be5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ff:43:78:2f:80:d6:66:4a:e4:21:d7:ca:3a:
                    c8:ab:3a:56:b2:66:2d:d3:47:93:ab:1b:0d:53:b9:
                    9a:d5:f6:46:bd:e2:d6:1c:6c:8e:ef:39:c5:77:82:
                    9b:d7:21:3a:97:9c:7e:ab:bc:55:a5:30:8d:77:7b:
                    0c:2c:6b:e0:03:4e:e7:e7:18:15:6a:f3:7d:c3:dc:
                    6d:99:57:e5:2d:72:ad:a3:6d:36:c9:bd:bb:26:14:
                    bb:c1:69:9d:5f:d2:c7:3b:5e:23:79:1f:5a:93:ad:
                    9c:cd:7a:3b:92:5f:6c:23:5c:73:92:2d:f7:df:34:
                    8a:3b:b9:03:7a:48:ff:64:d1:b5:39:4d:d6:2f:0c:
                    04:d6:f9:d0:63:23:15:88:61:c6:ea:e6:9d:17:7f:
                    d4:66:27:5d:28:15:20:ec:dc:f5:f4:e6:c2:0e:6f:
                    14:57:28:22:f2:4e:d3:f7:44:97:c8:13:d0:90:c1:
                    0d:53:26:8b:1c:cf:73:da:6b:2a:56:dd:57:1d:25:
                    d7:c2:8c:8e:b3:21:f1:91:7a:48:2b:37:49:38:e9:
                    c4:da:1f:3e:70:8a:33:6a:0f:b2:72:84:3a:71:9d:
                    3d:9d:fa:1b:7f:cc:98:68:26:44:d0:cd:a1:e0:bf:
                    12:fb:f7:61:03:2d:83:cc:a1:e3:09:f3:54:fb:b6:
                    16:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:FA:A5:97:85:88:86:FB:BE:2F:4B:86:35:45:5D:16:47:05:0E:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/88968477-21f3-3588-901e-e56dfa23609a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl

            X509v3 Authority Key Identifier:
                keyid:DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.24.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:fe:e1:56:03:4e:b7:10:59:fd:c3:50:f9:a9:10:a8:bd:6c:
         04:92:ed:7a:40:6e:82:a9:6a:cd:e1:a2:03:35:9f:ef:93:0e:
         ec:c3:16:31:fe:47:5c:38:27:7b:78:0e:85:67:57:16:42:94:
         1b:57:b9:9d:5a:3d:95:81:c2:fd:76:17:e5:6c:5d:cb:29:7c:
         c3:b1:54:e6:a6:3b:13:5c:ba:59:e9:f0:83:40:79:2c:09:09:
         be:09:51:43:72:ce:75:44:f3:f3:a6:dc:d3:85:18:88:5a:14:
         a5:9a:58:15:c7:f3:5e:5d:1c:e9:c0:bc:da:e4:e7:02:a9:ea:
         9d:a6:05:66:99:6a:43:66:93:e7:4e:b5:85:7e:27:74:5a:a7:
         d3:7e:aa:c0:52:70:64:f2:d2:da:67:bc:bc:9e:c6:bb:31:e6:
         29:e7:5d:72:06:2a:af:02:e3:c3:e3:39:30:cc:d2:b9:2b:16:
         c8:a4:5f:70:b7:42:27:6b:d5:27:d3:a0:19:68:6d:eb:ef:e2:
         49:b5:97:b3:d0:b2:2f:ef:42:56:c6:35:3a:58:e9:8b:fd:f8:
         a9:e2:51:73:1a:7b:b8:29:82:ef:63:2a:a7:4e:82:b3:ba:45:
         6c:43:5f:0d:a8:32:66:74:12:62:e8:0f:41:3b:4d:5d:e0:47:
         a9:8e:01:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:49:24 2026 by rpki-client