Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/dc8b8bb7-bf26-318e-ba0d-9240d51138c9.roa
File:                     dc8b8bb7-bf26-318e-ba0d-9240d51138c9.roa (raw, json)
Hash identifier:          iwM753kfV6RFoTGnpzuvPxmB8oFFQoUYuiAhuvnJmlQ=
Subject key identifier:   D1:6D:C4:7E:99:A8:5C:B8:D9:C6:23:EE:14:A8:2D:07:2F:3E:20:67
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584F4972FEE5B22B0A22FE4C0500
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/dc8b8bb7-bf26-318e-ba0d-9240d51138c9.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     23473
IP address blocks:        216.171.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:fe:e5:b2:2b:0a:22:fe:4c:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=c3e8e29d-c1a5-41ad-9565-4c5479549742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c3:28:25:cf:03:d1:4d:6c:dd:85:d1:56:44:
                    31:64:0d:bd:b1:0c:60:8c:a4:cb:f1:f9:5b:d3:f2:
                    11:31:78:13:34:e1:cc:33:2b:5f:3e:52:48:6f:73:
                    27:24:57:c1:4b:af:36:05:fc:5b:d9:10:9d:2f:ce:
                    0f:94:16:94:a7:0a:1f:c2:32:c4:d8:d2:e6:d8:7d:
                    0e:47:71:2b:4e:8b:4a:08:0a:fe:4b:ee:97:18:5e:
                    21:15:d2:79:17:fd:c8:ff:89:10:d2:0d:0e:c2:b0:
                    45:c4:83:5a:1d:de:52:f8:b4:c1:5c:3b:03:cb:91:
                    d8:bf:3b:d4:84:39:d9:a5:17:13:20:c9:60:af:82:
                    4c:c8:84:25:9e:e7:46:35:4f:3c:ca:c8:28:f6:4d:
                    d1:cb:af:11:5f:a6:d6:b6:9e:8c:c0:8e:3a:d4:13:
                    d5:2a:a4:34:fb:e4:a1:7b:d9:b3:5d:9a:c0:8d:88:
                    b6:54:7c:ca:2e:15:ed:f8:2f:9d:9c:4e:2d:72:ed:
                    4e:c3:4f:4b:61:db:2e:bf:64:f0:8d:03:22:4b:f0:
                    b7:ec:78:68:7d:53:aa:07:8d:7c:80:3b:f8:c0:a7:
                    95:ff:b0:30:32:eb:94:39:45:fd:d9:5a:03:d7:b9:
                    73:62:18:da:b7:71:94:86:03:af:37:59:04:62:3a:
                    cb:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:6D:C4:7E:99:A8:5C:B8:D9:C6:23:EE:14:A8:2D:07:2F:3E:20:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/dc8b8bb7-bf26-318e-ba0d-9240d51138c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.171.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:0f:5e:cb:a9:a5:4b:02:84:51:a0:19:2a:50:3c:f8:65:38:
         2c:dd:aa:85:0b:c6:e8:c0:40:2a:97:67:fb:ef:b8:41:bc:0e:
         ef:5c:4c:aa:dd:3c:64:0f:a0:a0:14:4a:69:e2:87:22:38:ae:
         17:ea:fa:78:eb:85:94:63:f7:ef:cf:b7:d7:84:58:ec:10:a4:
         86:c5:0e:21:b3:db:c3:ed:01:bc:88:ff:4a:90:76:39:63:37:
         24:10:10:81:8a:31:d6:6d:aa:8b:ca:61:a6:3d:c0:47:f6:76:
         09:b4:f0:ee:80:5a:d5:19:bb:b6:a6:58:0d:10:61:4c:89:c4:
         3c:48:a1:9f:bd:62:0f:df:eb:2f:ae:ef:ac:df:0b:7e:c2:d3:
         b0:6b:6e:5b:3e:20:58:b6:6c:54:b9:c2:c9:18:d3:84:c7:ca:
         c1:b8:48:6f:21:bc:30:0d:87:fa:69:e1:eb:a6:9b:fc:70:d3:
         23:9e:32:68:ca:c0:56:c7:23:85:45:71:6f:16:4d:3e:ca:3f:
         29:f6:ef:08:fe:73:0e:a6:2b:c3:9c:50:83:34:8a:a1:d8:aa:
         ed:f3:6c:e8:12:d5:02:57:55:b7:2e:b6:1b:16:19:09:52:4d:
         17:06:7b:5e:89:ba:60:16:ac:84:38:2c:ab:3a:30:cf:cf:5b:
         f6:06:56:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:16:15 2026 by rpki-client