Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/eb0668be-27f2-4af1-904a-eae4b20a5b43/58c06ac9-3a9b-3dd2-9eee-e5427951dd43.roa
File:                     58c06ac9-3a9b-3dd2-9eee-e5427951dd43.roa (raw, json)
Hash identifier:          1fBbO19WT3wWKX+jVWyvyFl9IbM2hMmksPrHyuCF6sA=
Subject key identifier:   C8:AD:F8:3C:8A:22:D3:71:73:DF:DC:71:C3:8B:BE:28:01:26:27:87
Certificate issuer:       /CN=eb0668be-27f2-4af1-904a-eae4b20a5b43
Certificate serial:       010D0C9F4328584F2ABD051A36A751A2AD8DBF10
Authority key identifier: B6:ED:65:25:FB:50:47:27:7F:93:AE:46:68:85:E9:DB:95:10:A0:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/eb0668be-27f2-4af1-904a-eae4b20a5b43.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/eb0668be-27f2-4af1-904a-eae4b20a5b43/58c06ac9-3a9b-3dd2-9eee-e5427951dd43.roa
Signing time:             Mon 14 Sep 2026 01:00:12 +0000
ROA not before:           Mon 14 Sep 2026 01:00:12 +0000
ROA not after:            Sun 13 Dec 2026 02:00:12 +0000
asID:                     32922
IP address blocks:        216.180.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/eb0668be-27f2-4af1-904a-eae4b20a5b43/eb0668be-27f2-4af1-904a-eae4b20a5b43.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/eb0668be-27f2-4af1-904a-eae4b20a5b43/eb0668be-27f2-4af1-904a-eae4b20a5b43.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/eb0668be-27f2-4af1-904a-eae4b20a5b43.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2a:bd:05:1a:36:a7:51:a2:ad:8d:bf:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb0668be-27f2-4af1-904a-eae4b20a5b43
        Validity
            Not Before: Sep 14 01:00:12 2026 GMT
            Not After : Dec 13 02:00:12 2026 GMT
        Subject: CN=96d41042-4dc0-4767-b745-9e21a46fe821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:25:4f:e5:90:a0:f0:47:c2:ad:db:9d:58:61:
                    20:40:0f:63:69:41:1d:30:71:79:aa:1d:fa:db:7b:
                    b0:a8:05:9a:f9:90:97:6c:44:6d:ea:af:79:ff:61:
                    73:a1:b4:05:72:e2:d1:9e:5d:ef:bd:a3:38:fa:4f:
                    40:0e:b7:3f:8f:8c:e8:92:d0:73:a8:d2:06:b1:8f:
                    f3:70:d8:fc:75:9e:03:e6:00:7d:b0:c3:6e:3c:a2:
                    85:f8:5b:36:0d:74:d1:7a:a9:9d:21:e7:3c:3c:f2:
                    d2:38:ca:ea:83:5e:07:53:f1:6a:a1:a9:37:10:41:
                    ec:af:d3:d2:c2:1c:93:42:aa:33:af:5d:7a:06:67:
                    b1:32:58:df:5d:0e:ca:81:5b:62:bd:99:58:e2:a5:
                    fb:6e:30:10:fb:42:84:05:53:85:1f:40:c6:db:a6:
                    1e:03:f4:9a:e8:46:35:19:99:52:bd:97:90:87:af:
                    cc:d5:11:1e:3a:77:bf:19:cf:ad:fe:22:d3:13:5d:
                    8c:a2:e5:5e:7d:08:d0:62:6e:78:5f:6f:46:cc:01:
                    64:be:a9:5b:72:ce:33:fb:a6:ae:33:bd:d1:94:10:
                    af:07:9c:54:00:92:93:40:1a:be:dd:7d:b7:fb:bf:
                    5b:2a:79:17:9f:1c:46:3b:22:9c:41:a4:b2:b6:15:
                    12:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:AD:F8:3C:8A:22:D3:71:73:DF:DC:71:C3:8B:BE:28:01:26:27:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/eb0668be-27f2-4af1-904a-eae4b20a5b43/58c06ac9-3a9b-3dd2-9eee-e5427951dd43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/eb0668be-27f2-4af1-904a-eae4b20a5b43/eb0668be-27f2-4af1-904a-eae4b20a5b43.crl

            X509v3 Authority Key Identifier:
                keyid:B6:ED:65:25:FB:50:47:27:7F:93:AE:46:68:85:E9:DB:95:10:A0:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/eb0668be-27f2-4af1-904a-eae4b20a5b43.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.180.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:08:b8:64:2d:e4:a5:2d:c6:1b:9d:ba:cb:ab:aa:b4:9f:d7:
         fb:8a:45:ef:89:b3:d9:e8:da:51:3b:ba:f7:14:52:ec:74:7a:
         0f:e4:d6:d4:85:95:23:32:24:85:42:d8:c6:5a:9f:ae:5a:fb:
         58:97:3d:e7:87:fa:ff:b8:14:8f:02:45:a8:e2:7c:a8:b2:af:
         0a:f6:a3:d0:58:df:4c:1f:61:f3:4c:a3:66:eb:1a:dd:07:cf:
         31:e5:93:e4:17:48:98:39:5e:7a:75:cb:e5:0c:26:c8:a4:a7:
         ae:c0:58:bf:fc:f4:60:98:c9:b7:ae:40:32:07:1a:73:bc:9f:
         bf:15:ac:0d:9f:2c:77:89:2b:9f:c4:e2:45:e7:0b:85:a7:67:
         e8:79:99:84:8d:dd:ca:1a:50:b0:11:a5:71:e4:c4:c5:b8:2b:
         4f:d2:05:f5:ba:c5:8e:c6:ca:84:6d:98:a3:61:a4:a5:31:37:
         eb:4c:8e:f1:1b:dc:02:6e:10:f0:04:5f:83:b4:8f:04:8a:23:
         73:39:8d:86:a0:58:6d:c0:db:70:e6:3f:a6:e5:82:18:0e:b1:
         b0:1c:d4:ac:fe:97:3f:f8:5c:2a:94:14:1e:de:19:d8:89:51:
         5f:38:e7:33:3c:35:e9:18:36:e8:bf:b4:42:11:d9:c4:1e:96:
         b8:74:f2:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:58:10 2026 by rpki-client