Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0426ee1e-c925-39bb-b48e-4ca686717e3d.roa
File:                     0426ee1e-c925-39bb-b48e-4ca686717e3d.roa (raw, json)
Hash identifier:          VPe/qLU1K0FPGQC0Hiqe6vNILvuWkDkiLolVd4ae6Ik=
Subject key identifier:   C7:D5:2A:8C:9A:C6:18:70:FD:4A:BE:86:7E:70:C0:6A:86:50:4D:1F
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584F3CE28AB122C991FB12C95000
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0426ee1e-c925-39bb-b48e-4ca686717e3d.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     62651
IP address blocks:        216.131.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:8a:b1:22:c9:91:fb:12:c9:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=fdd21607-d85a-464a-87b4-1d90dc230c28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b2:5b:d2:1f:1e:22:8c:02:d3:c3:99:51:08:
                    2b:46:9f:95:f0:07:ba:e9:7e:1f:b0:70:7e:2a:1d:
                    5a:98:93:7c:0c:0b:5f:cb:a4:34:25:9a:54:5c:91:
                    4b:6b:f4:3b:93:d1:18:2c:27:ec:ef:95:9b:f1:65:
                    56:b5:3a:8a:41:bb:52:de:51:1a:61:47:cb:2c:ed:
                    76:4d:e6:e4:34:76:9e:68:1a:e2:60:7e:23:de:c3:
                    1d:79:2a:01:06:b3:b7:a7:57:2d:71:99:b2:ee:be:
                    51:b1:5c:69:48:f4:2f:8b:10:d2:ab:5f:1f:19:53:
                    0f:54:f6:5e:bb:11:88:ef:1e:95:b2:bb:48:f3:88:
                    b2:1b:c9:f9:77:7b:e6:de:01:30:15:9e:c9:fe:96:
                    28:91:8e:da:88:9a:84:bf:5e:95:4e:fd:fe:fc:c6:
                    57:d4:42:19:cf:6f:69:b1:91:65:f6:50:e5:d7:7a:
                    17:c9:0e:43:d7:b1:1e:e8:2d:2b:ac:d9:de:21:32:
                    34:e1:59:74:6d:25:56:58:69:3b:25:f2:57:ca:92:
                    c5:fd:c0:28:35:98:57:66:36:0a:c9:85:68:57:d1:
                    85:a1:99:aa:31:81:08:0c:55:16:69:0c:11:5a:8d:
                    7a:3b:17:c8:11:f5:b3:6b:f5:ad:61:79:48:24:a0:
                    4d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D5:2A:8C:9A:C6:18:70:FD:4A:BE:86:7E:70:C0:6A:86:50:4D:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0426ee1e-c925-39bb-b48e-4ca686717e3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.131.72.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:46:aa:eb:e4:03:ee:b5:f9:c4:44:d1:c0:fa:b7:b8:83:b3:
         4a:d6:bf:cc:94:a3:ea:32:9b:e6:a5:04:e8:db:5b:bc:b5:4f:
         50:b3:67:77:a4:08:ac:81:14:5e:19:7d:e0:d2:36:31:f3:f9:
         10:36:03:8f:35:5f:65:bb:33:b3:01:cd:ca:37:bd:8d:13:86:
         b0:97:a9:ca:6d:1e:7c:12:8f:bc:a1:c6:d0:11:d8:0b:dc:0d:
         fc:bc:f2:cf:de:53:f4:ef:28:6b:17:c3:df:25:8a:5b:69:d3:
         11:5b:4c:10:0b:c2:ad:d7:ef:76:a7:44:29:41:05:55:8f:d1:
         3f:ba:d1:60:7c:ab:7a:93:7d:b3:3d:73:f1:0c:fd:43:29:ab:
         28:00:eb:30:c4:a6:9e:08:a1:3a:26:b1:03:08:55:0a:5b:7a:
         04:13:fe:b8:83:54:9f:1a:9a:da:6b:e7:04:68:1a:ff:68:75:
         46:b1:b4:8d:d5:dc:9b:a9:98:e1:47:70:40:3c:8b:8d:42:28:
         13:18:9f:8f:a7:70:da:f3:97:8d:44:8c:73:5d:41:ca:33:8d:
         61:97:9a:35:c1:4b:9e:f0:71:23:15:9b:44:64:91:63:d3:6b:
         d2:dd:59:56:64:3b:c9:bf:07:3d:a9:04:62:d6:2c:c8:68:f4:
         a2:ad:41:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:24:24 2026 by rpki-client