Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/921f8717-3d9f-37f5-9516-601ed7068724.roa
File:                     921f8717-3d9f-37f5-9516-601ed7068724.roa (raw, json)
Hash identifier:          OgpUHqsq9sdH1Nd+K9oLm9GeCDgIs7hI578Lgm5ojtU=
Subject key identifier:   A1:1F:4D:58:8C:A5:C0:95:46:3C:1D:8B:AD:EC:2E:BC:82:61:07:AF
Certificate issuer:       /CN=28d0c262-8ea2-444a-ab1e-6d07c3483e45
Certificate serial:       010D0C9F4328584F51D2A593FE41A799EB7CBC00
Authority key identifier: 7B:FD:21:C3:F3:A0:5F:FC:74:CB:DE:A6:8F:D9:34:04:EC:8B:08:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/921f8717-3d9f-37f5-9516-601ed7068724.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     15149
IP address blocks:        216.150.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/28d0c262-8ea2-444a-ab1e-6d07c3483e45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/28d0c262-8ea2-444a-ab1e-6d07c3483e45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:a5:93:fe:41:a7:99:eb:7c:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28d0c262-8ea2-444a-ab1e-6d07c3483e45
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=529474b0-ac7a-4d7c-916a-e481ba3fcb81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e4:a0:bc:f2:ff:a6:09:09:9d:3c:15:d0:7d:
                    25:28:73:ad:2b:7b:a4:0f:37:49:fb:2b:41:a1:c1:
                    3b:2e:eb:ad:44:41:bc:f8:93:7c:af:fa:1b:e4:7c:
                    f8:e2:d2:94:87:aa:78:57:1f:cb:6a:5e:34:cc:20:
                    15:a1:f2:e2:90:4d:6a:a3:65:93:4c:a9:ec:95:55:
                    37:bf:ce:22:c6:f8:d2:7c:79:df:08:32:72:ef:3c:
                    9f:32:a4:0c:3d:3a:54:90:74:7c:84:ca:2e:00:df:
                    a2:a7:49:8a:55:dd:5a:7c:fc:c2:67:df:38:d9:ad:
                    af:aa:62:23:2c:41:df:6d:3d:df:52:bc:ac:83:c4:
                    09:fa:11:0a:d1:bf:9e:a6:9f:1e:24:3b:c9:75:06:
                    8b:d7:99:86:67:2c:b5:ba:94:a3:83:89:c6:bf:85:
                    49:c4:51:24:52:ed:01:f5:10:7c:70:71:54:68:e1:
                    ae:5c:c8:5e:8b:9d:b7:b1:0b:fc:2a:9c:65:c9:13:
                    4e:92:f4:0b:0a:c2:5b:b0:f8:ee:4c:db:dc:a9:0d:
                    38:0a:97:44:f7:fe:12:33:99:47:17:e4:b2:68:e9:
                    ac:dd:ab:6d:81:e2:9f:44:e6:c8:11:06:47:93:aa:
                    31:37:c6:dd:71:16:85:39:ff:e0:7a:31:99:85:47:
                    4d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:1F:4D:58:8C:A5:C0:95:46:3C:1D:8B:AD:EC:2E:BC:82:61:07:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/921f8717-3d9f-37f5-9516-601ed7068724.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/28d0c262-8ea2-444a-ab1e-6d07c3483e45.crl

            X509v3 Authority Key Identifier:
                keyid:7B:FD:21:C3:F3:A0:5F:FC:74:CB:DE:A6:8F:D9:34:04:EC:8B:08:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.150.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:f4:5b:8c:1c:15:3f:4d:2e:de:c5:66:b9:ce:ac:6c:3b:78:
         d8:2c:1b:47:cb:53:3b:6a:7a:27:f5:c2:15:82:8c:ba:b4:5d:
         6e:1b:1a:55:d0:4a:44:fb:0b:79:3e:a3:b6:9c:75:91:d7:78:
         2b:72:4f:55:d8:86:c4:66:19:9d:2f:1f:a2:9e:7a:d6:e8:0e:
         b5:01:37:78:59:05:3f:2a:da:3e:34:ef:3f:0b:84:8d:ea:3b:
         b0:53:d8:5d:02:d4:b9:3c:cc:f6:0c:7a:5c:18:45:a9:71:ef:
         70:67:70:1f:dd:88:4d:07:92:86:98:98:2b:fc:61:92:9b:6f:
         3a:7c:4e:06:a8:c5:a0:18:48:ca:ff:1a:2e:73:a4:bc:04:88:
         fd:d5:ea:67:3f:7b:08:38:ba:70:15:1c:a7:50:c4:73:40:bd:
         a7:5b:19:31:fa:3a:05:d0:7b:d2:2e:a6:4f:a4:d4:47:90:0d:
         fc:e8:f8:97:23:0f:b6:86:5f:aa:17:b3:54:b8:7a:7d:1b:16:
         ca:8a:f6:66:c9:fc:32:71:ee:79:fe:a1:09:df:24:4d:1a:41:
         4a:1f:40:72:71:df:2a:c5:92:b8:6b:b0:53:53:b9:72:04:08:
         06:4d:cf:4a:7e:cc:e8:6b:af:b0:a5:7b:19:66:1d:ce:18:71:
         ba:dc:d1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:19:02 2026 by rpki-client