Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8807ecca-80cd-32ab-a6d2-8f40ef9ca668.roa
File:                     8807ecca-80cd-32ab-a6d2-8f40ef9ca668.roa (raw, json)
Hash identifier:          GzyIyvbbD76e7vewaeTGp7kFTkffognGaHHcn9zS7U0=
Subject key identifier:   AD:57:68:0E:E2:66:40:C7:71:46:93:43:A5:19:16:45:05:69:61:3A
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584F4C3D869400FA3FFC16DD5A00
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8807ecca-80cd-32ab-a6d2-8f40ef9ca668.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     36492
IP address blocks:        64.9.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:86:94:00:fa:3f:fc:16:dd:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=700b164c-aaac-413d-a9f4-2ecaf79c20a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c0:f6:b3:26:d1:a2:63:f3:ff:e8:c8:db:b1:
                    65:70:52:2d:28:2e:0d:43:14:94:d6:44:de:4a:fc:
                    8d:81:46:2b:c3:cd:3b:b2:91:5c:44:cf:bf:2b:51:
                    07:31:ab:1d:d3:fe:e6:ae:69:4e:3f:36:53:ef:84:
                    1e:c1:91:ed:0a:2a:81:89:a1:59:6a:be:8c:49:bd:
                    c2:7b:72:04:4f:ae:15:9c:d6:49:68:50:8e:c0:b4:
                    9b:cd:53:fa:b0:37:6c:e3:b5:f9:e1:7f:12:5f:76:
                    00:82:35:f9:5a:1a:28:44:fb:cc:af:9c:90:47:42:
                    ec:78:ab:e3:30:87:47:df:54:f6:49:ee:58:07:20:
                    ae:37:94:77:91:a0:ec:41:14:1e:2e:a1:05:51:f6:
                    41:bd:d9:72:20:6e:23:46:d5:eb:2e:24:58:d4:f0:
                    ba:a1:bb:ce:da:90:53:20:4e:03:f2:94:3c:38:d9:
                    bd:6c:97:63:93:9e:a8:3f:d1:00:17:aa:f9:5b:0b:
                    f1:9c:5b:33:b0:95:12:11:76:4f:d3:54:31:94:80:
                    2e:42:42:67:fa:4e:df:7d:20:f4:71:d5:29:fc:fe:
                    15:c5:81:93:7c:f6:27:bf:a2:e2:d6:72:a3:80:dd:
                    5a:59:42:8e:f6:e1:b4:17:37:8e:2c:72:49:8a:b4:
                    4c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:57:68:0E:E2:66:40:C7:71:46:93:43:A5:19:16:45:05:69:61:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8807ecca-80cd-32ab-a6d2-8f40ef9ca668.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:22:61:2d:59:e1:c6:ed:fd:b4:b7:e1:45:61:a2:01:bb:6b:
         44:7e:c6:18:d5:3b:5d:2b:18:21:7f:01:40:fc:79:ae:aa:e8:
         60:03:1f:2a:ce:6c:0b:97:a4:ab:35:91:0d:8e:51:98:f8:99:
         e3:57:1a:ba:4d:3d:ec:00:4d:fe:45:9f:7d:56:21:c9:79:a8:
         11:2b:a5:aa:19:7d:5f:ba:18:0f:80:20:33:09:c8:2d:f2:87:
         40:96:24:5b:1f:c6:fa:90:d3:51:5b:16:22:ea:c5:0a:29:6c:
         a9:17:ef:d4:81:a8:9e:12:d3:ef:47:ad:e5:e9:e3:9f:81:0e:
         68:ff:23:f1:6b:da:24:90:fc:65:49:13:c7:aa:de:1f:7d:d6:
         37:d1:25:ad:7e:e0:ab:5d:a2:b3:ae:10:8e:ba:98:9a:90:84:
         e6:1a:f5:ba:93:3a:15:0e:e0:d8:9f:f7:42:a6:67:b5:11:3d:
         10:48:bf:88:cf:a1:21:50:79:7b:04:86:d3:0a:81:3e:d1:44:
         b1:d8:ca:f8:35:e9:8e:b1:a2:19:b8:06:c5:87:83:69:67:a2:
         11:32:48:b3:a1:28:11:39:45:44:a9:d0:35:7f:aa:4a:65:13:
         b1:be:c2:2d:be:2b:82:0b:bc:dd:3f:8a:17:4c:ad:96:4a:db:
         f3:87:b1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:24:46 2026 by rpki-client