Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/d246e918-2896-381b-a0e5-5a01393baf03.roa
File:                     d246e918-2896-381b-a0e5-5a01393baf03.roa (raw, json)
Hash identifier:          GKzm4AbwEAXNJ5Msz/dzGfp7sNd19beoUPSAC1aBcIk=
Subject key identifier:   97:0A:05:D8:57:DC:D9:01:7E:DC:13:8B:57:9A:8D:C2:05:BE:03:18
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584EEA8761FE3881C5550CAF5700
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/d246e918-2896-381b-a0e5-5a01393baf03.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     16696
IP address blocks:        216.120.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:61:fe:38:81:c5:55:0c:af:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=79c28bb5-50bf-48b0-9b93-90641fcc4af4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b2:a6:e8:67:2e:29:38:21:77:ab:f7:b3:e3:
                    37:b3:55:6f:a3:ef:6d:31:62:fb:6b:99:15:a1:2a:
                    d0:1c:1d:c5:b1:8d:e2:f7:58:e2:8b:6f:e4:03:d1:
                    11:55:7b:03:11:83:bc:1e:a4:c9:f5:02:70:ab:03:
                    31:e8:5e:25:88:65:d3:21:ba:e7:2b:79:ef:20:ae:
                    fd:77:68:69:7c:2b:08:a8:a7:91:96:e7:62:c9:35:
                    49:18:6e:1e:fc:71:f2:a2:8f:e8:e3:4c:7e:85:e3:
                    41:53:e7:ca:6a:cd:07:5e:f8:f5:db:b7:13:97:32:
                    41:c1:6f:0b:e1:f5:3f:01:50:f4:ee:b2:90:11:98:
                    f8:88:0e:65:6b:3a:81:2e:dd:bf:a4:0b:df:55:12:
                    d9:f7:2e:f3:4a:88:0c:11:06:93:85:9a:b5:27:ab:
                    f7:ed:e8:ca:f2:51:37:66:92:75:b7:e8:98:b7:ad:
                    62:7a:ed:16:0b:1e:1a:3d:80:7b:00:34:d6:62:47:
                    ad:23:1d:5f:98:7c:06:ac:67:9a:b5:e4:bc:ce:fa:
                    9f:91:e6:fa:44:b6:a5:71:12:0c:3e:b0:37:bd:e4:
                    c2:bf:5b:5b:f1:4e:fe:f4:78:bb:31:e4:6a:df:31:
                    ae:7b:8e:78:89:2c:5d:4a:b6:ed:da:b9:01:73:60:
                    bc:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:0A:05:D8:57:DC:D9:01:7E:DC:13:8B:57:9A:8D:C2:05:BE:03:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/d246e918-2896-381b-a0e5-5a01393baf03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.120.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:48:21:63:71:12:fb:46:ad:6e:5c:65:92:e4:f9:03:dc:ff:
         f0:92:36:89:62:a0:5e:4b:89:76:93:58:f2:96:aa:49:fa:67:
         d0:2d:6e:c2:90:fc:a9:93:e8:00:d1:41:5d:1a:1f:f0:af:c6:
         78:05:b0:87:c9:05:70:72:5d:ad:7d:9d:ac:29:f3:bb:3d:00:
         5a:81:ee:55:fc:5c:e3:21:e4:34:81:be:01:8d:e1:73:e7:3f:
         59:5e:80:38:45:35:fc:eb:21:f6:72:e2:bf:b9:35:60:bc:4c:
         04:05:c1:e7:e6:f9:31:a2:a9:28:ad:24:e6:89:51:2f:dc:ea:
         1d:6c:4f:8c:d0:e2:26:63:60:8d:e2:1e:e0:62:be:31:94:87:
         54:d2:dc:26:e5:f4:cb:0d:51:73:0d:7f:8e:e9:0c:bb:8f:62:
         99:5a:1e:1f:1f:3f:6b:93:78:a7:df:25:58:5c:95:e4:66:57:
         dd:06:79:ba:8c:1c:17:e7:ba:d1:d1:9e:f6:c0:04:51:3b:99:
         8a:40:4f:b2:6a:35:05:24:ef:75:d9:11:47:8b:c0:37:ac:73:
         fb:5a:86:b1:a8:e1:c9:97:1d:7e:29:36:f8:70:6e:b7:fd:e9:
         e1:c5:5a:ca:5c:5c:7f:2e:4d:45:79:e3:96:af:d0:e9:6b:b6:
         19:0b:fa:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:35:27 2026 by rpki-client