Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/d9564cf3-d7ef-3635-bc69-8897ba801ef9.roa
File:                     d9564cf3-d7ef-3635-bc69-8897ba801ef9.roa (raw, json)
Hash identifier:          +yQV9QBJBNir1Kqw9Qn+k6o6N+r5/aqn3h9GH/+2Kpg=
Subject key identifier:   08:A0:39:F1:A3:2D:D5:60:B3:24:65:45:AA:35:98:3C:99:00:31:76
Certificate issuer:       /CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
Certificate serial:       010D0C9F4328584FBAA122F5CBC675D30F905700
Authority key identifier: 3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/d9564cf3-d7ef-3635-bc69-8897ba801ef9.roa
Signing time:             Wed 04 Nov 2026 14:00:13 +0000
ROA not before:           Wed 04 Nov 2026 14:00:13 +0000
ROA not after:            Tue 02 Feb 2027 14:00:13 +0000
asID:                     58182
IP address blocks:        216.52.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:ba:a1:22:f5:cb:c6:75:d3:0f:90:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
        Validity
            Not Before: Nov  4 14:00:13 2026 GMT
            Not After : Feb  2 14:00:13 2027 GMT
        Subject: CN=5776d207-5f46-4363-bbda-93c6b7e29c01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f8:40:59:88:d5:90:be:56:04:8f:71:a5:06:
                    ce:8b:6e:d3:aa:72:34:60:e1:fe:9d:1e:4e:bb:bf:
                    71:dd:73:23:fb:ee:0f:fc:3e:b0:ad:30:9d:43:de:
                    91:3b:a2:ca:c9:09:fa:87:77:b8:fb:d7:88:44:a3:
                    38:3f:c5:8d:84:f1:f0:94:b5:b5:84:34:10:97:4e:
                    36:e0:e8:e1:c5:d0:ed:3a:d6:5c:13:f9:1c:ad:5c:
                    c7:47:7e:59:e8:60:fb:2f:05:b8:c5:9f:f9:1e:5a:
                    8d:50:65:d9:7d:35:91:b6:27:b4:44:4c:f8:d3:bc:
                    bf:81:be:f5:75:e5:e6:b7:6f:25:ea:b5:32:6b:63:
                    25:97:ad:d0:a1:9b:b3:1f:93:df:42:99:11:de:21:
                    f8:6d:3e:a6:b0:22:f5:66:20:f1:3c:17:04:23:6f:
                    62:05:42:83:b7:22:f0:b4:a5:a2:46:3e:83:ef:1d:
                    36:2d:09:1c:ba:88:ef:c1:8e:21:8f:ad:5f:f7:d4:
                    58:fe:f0:2e:5e:6e:57:3b:7c:f2:da:82:78:67:0c:
                    58:19:78:be:5a:15:fe:5a:ad:0c:be:29:2c:34:ae:
                    53:52:23:a1:73:96:81:fd:6a:75:26:b2:71:72:85:
                    7f:89:de:ae:e8:c3:66:c3:48:2b:52:a0:6d:77:a2:
                    03:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A0:39:F1:A3:2D:D5:60:B3:24:65:45:AA:35:98:3C:99:00:31:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/d9564cf3-d7ef-3635-bc69-8897ba801ef9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl

            X509v3 Authority Key Identifier:
                keyid:3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.52.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:d2:0b:0e:c5:1f:11:55:62:30:d2:71:91:7d:ea:99:c0:1b:
         e0:f8:c8:cd:ee:c2:b5:01:55:85:92:25:4f:51:3f:2d:ed:f4:
         e8:66:db:6d:ee:32:36:24:2d:9b:7a:1c:b9:d9:30:96:99:72:
         f5:20:86:bc:90:47:9e:30:72:f5:25:4e:89:85:58:77:e9:37:
         28:30:61:11:40:e5:ba:ce:56:e3:5b:e1:01:bc:c3:c0:68:1b:
         95:63:0c:b7:0c:b1:40:4e:34:0b:63:7c:5b:36:7f:d9:9a:61:
         e0:05:ba:3b:d6:24:b5:16:24:c6:68:7a:0b:65:dc:4a:40:e5:
         18:9d:8d:c6:96:7f:4e:c7:ac:ad:0a:c3:cf:36:cf:b1:44:35:
         74:ab:47:33:e7:d2:0d:6b:4f:ee:bf:fd:06:f1:18:13:89:20:
         01:99:8d:2b:05:14:00:9a:db:7a:5b:30:ee:09:21:b9:05:51:
         13:2c:95:08:3e:d2:1b:a7:1d:b7:42:b0:b1:f0:d0:45:85:3f:
         78:75:d0:8a:fa:8a:40:a0:f1:b6:ee:4f:7b:e7:66:0a:2a:f9:
         ef:7f:e4:75:d8:7f:c9:4a:f0:e8:f3:82:fc:e4:ab:92:43:4f:
         67:82:ff:8a:94:2f:d0:51:ec:f3:53:63:ca:14:55:fa:21:25:
         8f:d8:88:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:31:08 2026 by rpki-client