Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/2009ebc9-d4a1-38a4-a8d7-4b0858e107cf.roa
File:                     2009ebc9-d4a1-38a4-a8d7-4b0858e107cf.roa (raw, json)
Hash identifier:          UPgCfzkWrxiunRuWgw3dgPpbu+Cn03a5F+L5+Qv+tXA=
Subject key identifier:   14:F5:41:FC:BC:A0:E5:5F:46:8C:76:0E:29:4A:99:A8:47:BA:CA:DE
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584EDC920B1348D9FD7D47415A10
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/2009ebc9-d4a1-38a4-a8d7-4b0858e107cf.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     25899
IP address blocks:        216.110.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:0b:13:48:d9:fd:7d:47:41:5a:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=b1cad2d4-9b03-4ed1-975b-7f232ba90879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6c:b8:87:c9:db:c2:c8:93:31:e3:e4:7e:b9:
                    2f:ff:68:37:17:d7:eb:4d:34:1e:e0:69:42:d9:75:
                    4e:73:5c:01:c6:60:b9:11:a1:3f:e3:01:a8:87:40:
                    e2:26:85:69:30:0b:29:7f:b5:7f:92:8c:da:fb:0a:
                    4a:5e:49:0b:86:0f:02:a5:bc:fd:c5:bf:42:1d:81:
                    3b:59:e6:c5:d7:8e:c2:5c:19:a2:9d:13:93:4a:5b:
                    27:60:03:31:42:1b:a1:3e:5a:bc:28:06:23:66:0b:
                    82:4c:0b:43:ce:87:f0:50:51:ea:5e:69:4e:42:ab:
                    05:fc:db:35:80:c6:0d:39:31:ad:f3:a8:b0:3a:52:
                    9c:f9:b0:34:57:bd:ae:fc:ae:57:a4:e9:38:7e:38:
                    50:ed:f7:89:9e:11:63:50:d2:49:14:9b:f8:60:b1:
                    42:e8:08:7c:38:3d:7b:02:ad:c7:21:da:d5:63:cb:
                    87:85:d2:98:66:6f:b2:04:49:b4:c5:78:4e:26:63:
                    d1:94:7d:8a:66:0c:75:e4:be:37:43:4f:66:ab:73:
                    bb:5e:14:ef:ad:2c:99:fb:07:60:a6:51:c7:82:44:
                    b8:3b:b9:c1:b3:73:fa:6b:33:ed:7c:db:27:cb:af:
                    df:b9:81:48:77:d6:22:4c:45:30:9e:e5:1a:91:23:
                    2b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F5:41:FC:BC:A0:E5:5F:46:8C:76:0E:29:4A:99:A8:47:BA:CA:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/2009ebc9-d4a1-38a4-a8d7-4b0858e107cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.110.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:3e:15:ff:e9:28:5a:59:1b:32:ac:33:b4:6f:b5:3d:b3:a2:
         70:2d:2e:27:f9:bc:d5:fb:26:35:22:46:78:b4:9a:71:40:e7:
         63:a2:92:fa:58:d1:ea:c9:62:ce:1c:b4:21:a9:43:2b:fb:30:
         73:0e:31:66:c0:f8:34:93:7f:4c:99:11:b5:8b:8b:f3:48:98:
         5d:d9:34:83:af:6e:9c:1c:c3:e8:3c:95:ac:72:10:d6:40:39:
         77:85:10:9b:68:81:fb:79:05:33:82:b3:55:9a:4f:d8:73:bc:
         19:ab:63:14:52:c3:9d:69:17:26:55:9f:48:c7:07:1b:ca:91:
         f5:a5:5b:16:36:29:9c:ff:94:30:24:a3:bd:00:51:8e:45:0b:
         d7:1b:ea:b8:fc:b8:68:b5:cf:19:f1:a4:e8:09:3b:85:d7:7c:
         ee:fe:66:e1:54:5a:de:e9:80:dd:c1:0c:ec:af:69:82:d6:7c:
         09:da:9d:9d:06:86:24:17:c0:91:54:53:02:4b:d9:13:ef:bd:
         93:e3:43:52:03:f4:ef:32:c6:c3:eb:4f:1f:f5:b9:df:81:89:
         43:23:31:ae:91:f3:69:4f:8d:6f:9a:23:4d:3f:a9:d0:3d:d3:
         34:f2:d8:8d:2f:34:fb:71:f1:10:ab:38:da:68:f8:52:00:da:
         4e:2e:e0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:31:37 2026 by rpki-client