Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/8faa25dd-2ba9-4d53-af3d-8717d35fed4a/3149010a-0dc4-3499-a781-f034110c1f22.roa
File:                     3149010a-0dc4-3499-a781-f034110c1f22.roa (raw, json)
Hash identifier:          I68VWRA/DbyKYmSbkPP5tNae0QoBg/GngtBU9FKmY2U=
Subject key identifier:   2D:4A:2A:D2:76:3D:84:60:25:CC:98:D6:50:0C:0C:65:4E:EB:44:3E
Certificate issuer:       /CN=8faa25dd-2ba9-4d53-af3d-8717d35fed4a
Certificate serial:       010D0C9F4328584F6292B88E0F37DFBE6340F3C0
Authority key identifier: 58:99:27:19:76:18:DC:03:54:15:C3:88:3C:2F:AE:E1:71:0A:0C:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/8faa25dd-2ba9-4d53-af3d-8717d35fed4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/8faa25dd-2ba9-4d53-af3d-8717d35fed4a/3149010a-0dc4-3499-a781-f034110c1f22.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     53366
IP address blocks:        216.47.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/8faa25dd-2ba9-4d53-af3d-8717d35fed4a/8faa25dd-2ba9-4d53-af3d-8717d35fed4a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/8faa25dd-2ba9-4d53-af3d-8717d35fed4a/8faa25dd-2ba9-4d53-af3d-8717d35fed4a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/8faa25dd-2ba9-4d53-af3d-8717d35fed4a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:b8:8e:0f:37:df:be:63:40:f3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8faa25dd-2ba9-4d53-af3d-8717d35fed4a
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=b1044b01-6348-445d-8d33-d4c43037fe8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2f:c9:f6:e6:5c:41:2e:b8:d2:c7:e6:c2:9a:
                    56:4d:8a:b1:da:5f:88:fc:f0:51:9d:21:5b:77:e8:
                    5d:86:f0:b1:d1:88:75:1c:61:b5:c4:d4:d6:c8:a9:
                    d3:d5:16:c0:58:a9:93:8e:73:bc:39:aa:02:35:cf:
                    02:b9:a3:37:a9:9f:b3:a8:e0:c8:f7:90:8a:d6:22:
                    c3:cf:90:68:2f:cf:d2:98:b4:2c:84:53:99:71:22:
                    40:dd:91:09:39:91:66:61:f2:82:45:16:a4:2a:e3:
                    52:80:5a:23:72:a5:b8:06:05:44:48:46:81:04:4a:
                    71:e1:4c:ae:c3:ca:03:37:2c:87:c4:64:13:a6:d7:
                    6a:2f:e1:82:14:47:b9:78:db:a2:88:e9:b4:d6:ef:
                    3d:dc:cb:df:7e:fa:17:f4:b2:81:73:03:e4:d1:77:
                    e6:f1:e4:87:ca:ae:6b:69:bc:01:30:7c:de:80:bb:
                    13:1d:36:c0:00:a5:2e:e1:6e:93:af:19:07:47:8b:
                    59:4e:70:ed:68:0d:2c:9a:f4:ae:1b:9f:d7:bd:d5:
                    80:4d:cf:77:1e:d9:4b:9a:06:c0:b4:99:84:08:eb:
                    7f:d6:62:ff:7b:60:4b:93:2f:7b:c2:aa:6e:ee:c7:
                    7f:0b:5b:07:a9:82:75:f0:36:56:6c:5d:80:94:47:
                    39:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:4A:2A:D2:76:3D:84:60:25:CC:98:D6:50:0C:0C:65:4E:EB:44:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/8faa25dd-2ba9-4d53-af3d-8717d35fed4a/3149010a-0dc4-3499-a781-f034110c1f22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/8faa25dd-2ba9-4d53-af3d-8717d35fed4a/8faa25dd-2ba9-4d53-af3d-8717d35fed4a.crl

            X509v3 Authority Key Identifier:
                keyid:58:99:27:19:76:18:DC:03:54:15:C3:88:3C:2F:AE:E1:71:0A:0C:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/8faa25dd-2ba9-4d53-af3d-8717d35fed4a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.47.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:ae:d4:20:78:5d:ec:2c:db:33:46:d4:17:ff:3f:34:da:21:
         ff:8e:ef:11:5b:c7:08:1c:49:7b:f5:08:ee:8f:5d:7b:67:e0:
         5d:7f:d2:88:10:ca:29:5f:92:4f:9e:d9:3f:08:e5:c4:cb:b7:
         29:76:69:bb:6d:0c:69:8d:60:6a:cf:a2:ad:59:63:2d:a3:82:
         7b:c7:4a:48:c8:e0:a5:88:d1:26:f9:ad:d8:8e:30:1a:ce:e7:
         f2:68:2e:3d:ea:c5:f2:05:41:0b:2a:89:65:57:64:4f:a4:1f:
         87:ca:39:a0:0c:c4:a2:b3:9f:fe:0d:f4:41:23:9d:fe:a6:06:
         08:93:9e:b3:cc:04:a7:38:49:34:f6:1f:19:3e:ba:0b:e6:33:
         1f:d6:c4:2e:9c:0d:f2:5c:11:84:80:34:02:68:a3:d4:5b:ac:
         b1:68:0d:2b:37:73:66:57:c5:eb:8d:3a:f1:05:c1:6e:0f:82:
         f9:1a:02:c3:36:ab:80:57:a3:28:22:99:8f:41:fb:c7:1d:7b:
         89:1f:ea:e8:52:00:89:0a:95:a9:16:c2:2b:d2:73:42:94:f8:
         8a:e0:ac:81:84:f5:8d:15:f2:bb:6a:7e:60:37:3f:de:ee:69:
         a1:23:10:dc:ba:3c:66:f8:19:48:43:40:9b:85:df:31:66:e6:
         18:c5:a1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:28:17 2026 by rpki-client