Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/2db46dbe-ec03-3d51-b69c-cf354ab3940c.roa
File:                     2db46dbe-ec03-3d51-b69c-cf354ab3940c.roa (raw, json)
Hash identifier:          Qj5L3T1ky5w6uydk0lqI12Ob6VB1P/sMBPKwW63+t+g=
Subject key identifier:   51:00:BA:D9:D3:C3:05:EB:70:0A:7B:DB:8C:97:0E:10:F2:82:D2:B7
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584EB6E1A8B6057EE3362D5A90A0
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/2db46dbe-ec03-3d51-b69c-cf354ab3940c.roa
Signing time:             Mon 03 Aug 2026 13:00:12 +0000
ROA not before:           Mon 03 Aug 2026 13:00:12 +0000
ROA not after:            Sun 01 Nov 2026 14:00:12 +0000
asID:                     55246
IP address blocks:        216.110.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b6:e1:a8:b6:05:7e:e3:36:2d:5a:90:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Aug  3 13:00:12 2026 GMT
            Not After : Nov  1 14:00:12 2026 GMT
        Subject: CN=01a5b09c-73b4-420c-9b4a-135a548c0dd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8b:08:5c:c0:97:28:c1:90:33:d7:7d:07:5b:
                    65:a0:d7:3e:d9:01:db:30:33:45:e8:3e:71:bd:f3:
                    ac:1d:33:1b:b2:c3:60:b0:23:7a:0f:86:2e:f8:91:
                    fc:58:07:45:5f:23:45:3e:af:80:11:f3:7c:70:8b:
                    64:10:cb:7e:85:40:dd:e0:b2:22:5a:ac:6d:03:7a:
                    8b:23:00:0c:29:3b:b1:f2:44:1a:11:df:32:80:d4:
                    97:ce:5f:cf:e9:4b:6a:95:03:e0:f7:30:94:02:8b:
                    02:61:75:31:fa:06:76:73:12:c7:e7:61:2b:be:17:
                    75:7e:07:4b:d6:1b:06:62:7a:7f:6b:84:24:00:6a:
                    b1:27:7d:f8:1e:e5:b7:ef:9b:05:5d:ac:5f:a8:12:
                    bd:9c:e0:0a:5f:ae:f7:a4:83:40:12:d0:1a:d1:3b:
                    56:52:f0:f6:f5:1f:1c:3b:3c:8b:f0:30:52:6b:75:
                    32:8c:fc:d4:ad:8b:41:96:3a:f4:a5:cb:50:3c:94:
                    3c:49:e8:06:04:8f:24:f4:c7:5b:8d:4e:bb:8d:58:
                    69:d1:1b:4b:64:ff:f7:5c:78:1b:13:33:44:4c:d9:
                    10:6e:b8:bf:32:87:ca:e4:ce:cd:db:63:34:31:22:
                    49:ce:c2:dd:64:d5:bb:46:8a:55:7f:e6:02:ee:ca:
                    f9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:00:BA:D9:D3:C3:05:EB:70:0A:7B:DB:8C:97:0E:10:F2:82:D2:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/2db46dbe-ec03-3d51-b69c-cf354ab3940c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.110.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:72:03:35:dd:d8:f8:c3:35:bb:05:0a:66:7c:d5:ee:d5:56:
         59:eb:78:36:19:8b:8e:9e:a5:c0:07:e2:4f:8c:49:98:c7:ab:
         e6:de:24:00:03:a2:63:ce:3e:98:13:dd:fc:7d:cb:1a:f9:17:
         3b:70:ba:93:c5:fb:d5:87:2f:b3:fb:dd:a7:ae:42:2f:6b:eb:
         cf:24:8b:9b:48:d0:38:d6:db:3d:74:bc:d7:8d:34:cc:a9:dc:
         86:0c:11:c5:9d:19:2f:14:1f:19:3b:46:3d:e9:d2:c4:32:32:
         d6:00:78:5f:57:65:d8:ab:ef:c0:49:c0:91:82:1b:30:a1:a7:
         bb:18:f8:76:66:a9:a3:bd:4f:71:21:bf:4f:de:86:83:cc:b1:
         b6:7e:1c:76:d0:bb:15:68:4d:12:b5:55:40:97:a5:31:82:0a:
         db:81:07:6e:20:e4:71:a8:60:d5:3e:5a:ea:d2:32:b7:5a:7f:
         37:e5:94:18:88:b4:c0:46:9b:6a:8d:3f:90:16:f3:47:14:2b:
         5e:78:14:6e:8e:cb:d4:ba:a9:64:1f:cd:6f:78:c6:d5:f2:58:
         e7:6b:86:9d:0c:db:fc:b9:19:ab:ca:e3:47:b7:95:0e:5b:b8:
         e5:7c:ef:e6:87:a8:69:2b:21:4c:c5:77:b8:0d:98:5d:f8:00:
         80:d0:2d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:31:44 2026 by rpki-client