Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/16390db2-43fa-3a3b-9e44-3392d9250055.roa
File:                     16390db2-43fa-3a3b-9e44-3392d9250055.roa (raw, json)
Hash identifier:          5iEhh4VZneOxCH2yd8JI+sBfFBYMEVooJwvOL+Yuqnc=
Subject key identifier:   91:49:15:BF:DE:3C:1E:76:DF:92:D3:1F:E3:FC:91:E1:19:4B:47:AD
Certificate issuer:       /CN=69686900-f201-4b2c-a1c7-afb725abe47f
Certificate serial:       010D0C9F4328584F4987623553B11235EEBEE540
Authority key identifier: 46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/16390db2-43fa-3a3b-9e44-3392d9250055.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     21541
IP address blocks:        208.186.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:62:35:53:b1:12:35:ee:be:e5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69686900-f201-4b2c-a1c7-afb725abe47f
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b8883bb9-2846-4375-8444-a40b4b01e9b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:44:85:3e:98:24:57:db:67:60:44:ea:08:96:
                    a6:f1:43:86:e1:2d:82:76:27:40:e2:c3:3f:32:c2:
                    bb:96:6c:7a:80:d8:27:06:1e:35:eb:28:e4:6c:d1:
                    3d:ae:b4:fe:60:ff:0c:db:5d:0e:a2:84:5c:52:a1:
                    ed:b3:55:ed:3f:e4:96:d8:e0:58:59:45:b1:6c:01:
                    48:70:f7:85:f2:da:76:c2:14:30:73:21:da:e4:89:
                    a2:16:4e:97:23:f9:d1:06:a4:9b:46:71:7a:da:7d:
                    51:47:bc:b2:4e:3f:61:f7:01:f4:68:9a:f8:40:19:
                    06:7e:51:af:c6:74:6a:4f:ca:62:e6:bb:49:f6:98:
                    f7:62:8f:63:39:45:71:28:e3:73:8e:b6:e9:c1:89:
                    40:ae:05:dd:ea:01:3d:3e:72:de:d4:51:7f:8d:59:
                    c7:ce:34:6b:2c:b7:ff:f9:ed:ad:8f:86:a3:2a:39:
                    34:24:5f:37:69:1c:b5:e8:12:d2:60:f5:13:a9:ac:
                    1d:35:5a:a9:60:63:b6:e4:81:d7:be:fd:8b:54:2f:
                    43:dc:2f:d5:d7:4b:13:d7:65:06:7f:ec:e8:ca:44:
                    55:3e:b7:73:ca:5d:e4:52:fe:6d:92:b6:5b:18:67:
                    d7:b1:15:90:59:64:22:41:e7:92:fc:55:84:09:a9:
                    6e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:49:15:BF:DE:3C:1E:76:DF:92:D3:1F:E3:FC:91:E1:19:4B:47:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/16390db2-43fa-3a3b-9e44-3392d9250055.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl

            X509v3 Authority Key Identifier:
                keyid:46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.186.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:02:c6:50:bd:a8:f0:24:2c:5c:45:64:59:0d:b6:48:d3:34:
         c5:a7:49:c7:94:2c:75:1d:a0:a3:71:78:81:13:59:4c:8f:c4:
         d7:96:f6:f8:78:79:54:98:91:e2:bd:3a:92:98:42:3a:23:2d:
         a1:8d:91:a1:c3:92:26:67:42:91:d4:6e:ad:c2:7b:c6:e6:b6:
         81:e8:df:a6:94:11:03:5d:0c:cd:c5:5c:a8:e6:db:70:ee:a8:
         8c:84:91:d5:fc:aa:8d:ea:4e:8b:8b:5e:9a:a2:62:cc:99:45:
         a7:52:3e:d3:78:b2:77:d6:f1:9e:46:af:e3:44:32:6b:c5:1f:
         dd:72:ee:b4:67:f2:b2:54:82:e7:bd:18:fc:ab:7f:3e:88:50:
         76:09:8f:8a:98:a1:8b:ed:2c:ef:d0:7f:5d:9a:3c:4f:48:d5:
         b7:51:68:f7:87:f2:27:c1:04:44:14:ba:a2:c4:7d:f1:94:2b:
         4f:88:68:b4:58:3c:90:a8:07:2d:75:86:92:b3:35:71:8d:67:
         2f:f6:7e:a4:d7:7d:26:4d:55:5a:8e:b0:b6:bf:d9:36:b0:61:
         02:ae:8b:92:b0:69:15:f6:2d:2c:5c:42:11:dd:c7:2f:fa:b5:
         8b:da:15:49:ff:09:61:fb:a3:19:81:83:f6:75:d9:57:8e:3c:
         2d:2a:6c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:10:40 2026 by rpki-client