Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/06b897cd-c149-375a-a100-7b8ecde282a5.roa
File:                     06b897cd-c149-375a-a100-7b8ecde282a5.roa (raw, json)
Hash identifier:          sQxcIQNPgb3ewCiCzYUOXKXaOchziGNUCzz738SFisA=
Subject key identifier:   DE:1F:D0:40:3F:A1:A9:49:F2:B6:DA:C9:B9:DA:FF:9E:96:0C:DE:A3
Certificate issuer:       /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
Certificate serial:       010D0C9F4328584ED861DFF94B5598C6FA079700
Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/06b897cd-c149-375a-a100-7b8ecde282a5.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     13984
IP address blocks:        216.213.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:61:df:f9:4b:55:98:c6:fa:07:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=8bcc31be-91e8-4da9-8813-227e66b7f32f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:14:62:dd:6c:6a:48:d6:10:aa:96:3c:9a:59:
                    cf:c2:3b:3c:66:9f:6d:a7:14:0d:e8:00:48:e2:81:
                    30:dc:46:0b:ba:0c:ed:6c:05:73:01:50:b6:30:86:
                    f7:f5:a2:35:00:27:0f:e3:00:ac:25:d6:f1:1e:f8:
                    ff:46:05:35:b3:a6:5d:dc:63:b9:9f:0f:12:9e:b9:
                    6e:a1:c0:5d:be:6f:d4:96:9e:79:52:26:c0:ea:93:
                    e6:15:48:a7:e2:63:7b:36:05:dd:42:6f:3f:e7:93:
                    c5:d7:d7:e6:3e:29:94:bf:9a:7d:a2:54:d3:38:d1:
                    c3:f4:69:e1:72:fb:01:fa:b4:d3:7e:89:34:48:d9:
                    d3:6b:f5:a7:13:fe:50:43:15:15:96:ea:0e:9d:75:
                    71:58:8e:4d:3a:d2:79:66:e4:df:90:e2:14:1d:b4:
                    10:62:bb:02:69:fc:7b:bc:93:df:3b:c0:37:51:10:
                    e2:81:03:0f:31:41:5a:53:7c:2d:ab:87:1f:f7:7f:
                    5e:67:cf:2c:4e:c6:b4:d0:60:25:0f:33:ab:fa:10:
                    8e:b5:03:60:d6:1e:22:01:d0:0d:93:7d:c0:ae:4c:
                    02:ca:23:ed:59:42:b5:82:be:b0:fd:86:0b:f0:fe:
                    d2:1a:8d:8a:47:19:ed:6a:29:ea:cb:68:54:61:02:
                    22:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:1F:D0:40:3F:A1:A9:49:F2:B6:DA:C9:B9:DA:FF:9E:96:0C:DE:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/06b897cd-c149-375a-a100-7b8ecde282a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.213.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:c3:bd:12:6c:10:96:7b:81:46:c5:e9:c7:8c:11:9a:75:13:
         ba:a5:62:f2:8f:e9:f7:30:8d:4b:d2:52:05:f4:2a:8a:03:67:
         89:f7:ca:94:64:fb:c0:79:00:6b:fd:a8:f6:47:cf:da:18:c6:
         b2:eb:5b:be:f8:8a:30:8e:12:82:fe:cb:35:76:14:2e:dd:ae:
         07:6c:64:de:8f:3e:78:1b:9a:b4:79:95:64:05:4e:40:a8:25:
         3f:19:7a:e2:c1:79:c5:d2:3b:34:05:e0:6f:b2:04:5b:cc:7d:
         cc:99:06:d2:40:d1:96:5a:fc:d2:5e:37:be:2f:a7:a9:d7:61:
         9c:88:8a:78:19:b9:82:1c:87:2c:e1:f7:84:37:ba:58:7e:91:
         3d:22:8e:d3:c1:8b:77:28:28:54:85:f1:9f:26:eb:03:54:96:
         35:fb:c1:a4:8f:c0:f1:0e:d6:bc:6a:82:de:b2:80:05:c9:1f:
         f7:18:03:3c:36:1b:69:54:14:8d:23:09:1a:b6:94:d8:c4:ce:
         08:91:ec:bf:9a:28:d5:1f:27:18:1a:8b:ef:da:18:17:1c:60:
         49:87:55:ab:fd:0f:be:7f:49:c5:f5:98:e4:4b:73:11:f4:f7:
         94:0b:c8:dc:53:48:c6:b9:4a:12:ee:c3:02:85:97:d3:70:3b:
         49:bd:76:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:30:45 2026 by rpki-client