Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/16e55f52-0a7d-3e51-b2cf-828786085499.roa
File:                     16e55f52-0a7d-3e51-b2cf-828786085499.roa (raw, json)
Hash identifier:          VdLH/AFb3ggQk3ElQuC94jyw8AdTuERLh9kc4vrtG0s=
Subject key identifier:   32:C0:B6:C1:D7:08:56:B2:21:87:BE:EC:BD:24:F6:A2:8B:6C:4D:CB
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584F4972B6D0058E34E2F2CD4B00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/16e55f52-0a7d-3e51-b2cf-828786085499.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     20001
IP address blocks:        168.91.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:b6:d0:05:8e:34:e2:f2:cd:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=413d5728-3281-478a-8cb9-db0502e15edf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1a:f7:f0:0b:b8:1b:a6:8b:3f:9e:dc:82:2e:
                    57:1e:bd:93:05:4c:60:d5:eb:7f:54:6b:4e:16:19:
                    cb:e1:da:13:ea:6f:a6:8d:99:21:56:f1:0d:07:5e:
                    09:a7:5e:6c:36:5e:6b:48:c4:f3:ad:5b:f4:51:f2:
                    4f:13:73:d7:ad:c5:6c:71:3f:f0:c2:b5:92:a5:60:
                    bd:ba:8f:81:aa:83:84:5c:75:bf:f7:ae:a2:14:2d:
                    00:81:9c:7d:29:88:7f:18:bd:ef:10:dc:6a:4f:cd:
                    17:0a:10:c0:39:41:79:b8:f2:3b:3a:c4:f7:64:7a:
                    d5:02:cf:dd:fd:24:8f:cd:48:fb:aa:b7:28:9e:ae:
                    b5:b9:71:a8:13:10:fb:fd:90:3f:d9:d2:3c:aa:46:
                    60:bd:d7:29:d8:78:d1:ac:f2:68:d3:94:1b:18:56:
                    d5:e4:e9:cc:d7:87:50:eb:ab:a3:d9:cf:ea:cf:5d:
                    50:b5:2c:14:2d:98:5c:bc:71:20:d4:91:1d:96:ab:
                    fe:e1:e6:33:6f:d1:71:5b:68:ea:8b:dd:98:6d:71:
                    8e:16:25:9b:11:9a:c1:0b:01:7e:92:0f:18:7d:bf:
                    76:23:f9:bd:5a:39:e7:9e:1e:2e:52:2e:48:58:c9:
                    ee:fd:9e:29:f6:81:10:ba:d4:b8:58:1b:d9:1a:9b:
                    8a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C0:B6:C1:D7:08:56:B2:21:87:BE:EC:BD:24:F6:A2:8B:6C:4D:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/16e55f52-0a7d-3e51-b2cf-828786085499.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.91.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:0a:47:80:bb:96:a0:ee:f1:9d:3b:e1:3d:ea:a9:1d:86:48:
         51:71:ca:3d:3f:12:2d:1c:ff:e9:ec:52:ee:de:e7:ec:c4:87:
         19:71:21:f0:e5:ba:7c:0f:c9:dd:ef:c3:71:73:1c:0d:9a:0a:
         3c:22:af:06:99:4d:fa:56:7e:93:ea:c0:0d:e1:ee:f2:60:1e:
         68:e4:2d:8c:22:09:d3:2b:35:ac:3d:de:cc:75:c7:81:2f:da:
         f8:41:a1:de:64:3d:97:8d:57:2a:f2:c1:ed:df:a0:ae:21:e1:
         dc:37:80:4e:29:c1:b2:74:74:69:4a:d9:b8:3a:b3:c6:60:53:
         20:28:27:48:da:98:8a:ee:a2:be:43:45:e1:a6:9f:96:94:f5:
         d1:33:fa:93:3d:d1:82:7d:b7:e7:af:03:5a:ed:f4:d2:e7:38:
         7d:ab:f7:8a:68:c6:c1:d5:ff:f6:ed:52:4f:b4:53:09:dc:2d:
         a3:a4:a9:6b:a6:6d:ad:90:5c:4d:9a:82:98:19:26:68:dc:f3:
         70:1f:59:32:44:29:31:e6:67:54:8c:44:98:2d:14:32:34:b1:
         34:38:8a:05:07:7e:92:73:c3:be:5f:b7:8c:6f:11:65:a8:74:
         b9:85:06:7c:c3:43:52:f5:78:49:a7:ff:25:3f:9d:63:3e:97:
         cb:7a:0c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 13:48:38 2026 by rpki-client