Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/9c16d76e-128f-35aa-bf54-a9444ddb5a09.roa
File:                     9c16d76e-128f-35aa-bf54-a9444ddb5a09.roa (raw, json)
Hash identifier:          vpndO3jdIgP2U7DdK4Dfkz3Lj7sR4yrUQXSQ6tX/2OM=
Subject key identifier:   F2:74:A0:36:A1:56:07:72:27:89:25:86:DE:63:D6:E4:AC:C7:A8:A6
Certificate issuer:       /CN=b8281a0a-00f2-4aac-b311-e961a7ccedfb
Certificate serial:       010D0C9F4328584EF71765F540F67F03357F3880
Authority key identifier: 35:F0:01:B3:B3:0C:23:08:EB:B9:0B:7C:D8:2E:1C:79:63:0A:8F:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/9c16d76e-128f-35aa-bf54-a9444ddb5a09.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     30687
IP address blocks:        216.38.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:65:f5:40:f6:7f:03:35:7f:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8281a0a-00f2-4aac-b311-e961a7ccedfb
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=3dfd58bd-164f-4a9f-8dc9-c077092e9554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:91:e1:a1:d5:c7:44:e1:07:2f:dc:d6:73:29:
                    f2:56:4e:a4:72:b3:1f:ad:e6:31:d9:08:8f:ad:d9:
                    7a:17:bf:32:e9:d9:4c:51:e9:71:ba:c7:3e:d0:8c:
                    81:f4:6d:cd:cf:8b:92:6d:4b:d5:27:8e:95:e3:69:
                    46:e9:69:6a:c9:27:f3:71:0a:e6:9e:56:82:49:71:
                    a3:f6:cf:6a:97:ba:ab:37:9d:bb:83:d3:38:62:7c:
                    83:17:c0:b6:c8:db:da:96:ae:3d:58:0c:b0:5b:9b:
                    e5:8b:7a:f3:65:17:69:c8:bb:e7:45:a2:b2:1d:72:
                    61:37:75:40:70:69:d5:26:99:26:e7:25:37:26:11:
                    01:25:24:7b:f0:a2:02:f5:10:1f:b3:00:14:f5:cf:
                    69:1f:93:fe:c1:04:59:f5:2e:a1:7b:d3:45:4d:34:
                    7f:9e:8b:de:d5:14:6b:36:c3:ee:fb:74:81:22:62:
                    f2:ba:eb:2a:ad:be:75:50:08:ac:e3:de:13:bd:5d:
                    c7:bb:84:c2:a4:52:b5:3e:74:f3:ff:34:82:07:3f:
                    90:4e:3f:84:f1:ed:c5:a1:ff:3b:e4:50:5a:f1:a6:
                    dd:a1:f7:0d:67:19:a5:c6:53:7b:93:d9:f4:72:9b:
                    1c:2f:68:bc:ae:d5:00:c4:bb:cc:83:97:45:bb:b0:
                    71:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:74:A0:36:A1:56:07:72:27:89:25:86:DE:63:D6:E4:AC:C7:A8:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/9c16d76e-128f-35aa-bf54-a9444ddb5a09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.crl

            X509v3 Authority Key Identifier:
                keyid:35:F0:01:B3:B3:0C:23:08:EB:B9:0B:7C:D8:2E:1C:79:63:0A:8F:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.38.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:24:c4:5c:f0:bf:f2:c4:7d:95:a2:b5:c6:3e:78:ac:de:2a:
         99:1c:a6:75:dc:b8:28:05:a0:2d:c5:40:a8:4e:ae:9e:f4:78:
         24:f5:cc:25:b2:39:c4:0d:cf:11:c8:7c:44:22:12:94:f3:3b:
         77:5a:2c:e1:3d:a1:da:0c:4d:46:7a:7c:bd:a8:4e:46:a7:0c:
         b3:4a:9d:89:12:f8:76:8d:11:fc:fa:3d:f9:31:86:c9:3c:55:
         b7:37:70:83:0a:32:4b:3f:2c:b4:74:b2:1a:0d:a3:05:0b:2f:
         04:10:b2:31:39:e3:46:36:a6:50:60:6d:79:ad:7d:89:3d:24:
         60:ea:b9:57:2f:cb:02:7b:8a:b1:21:9f:3e:05:b0:39:8e:d1:
         d1:84:d2:ad:87:1d:c3:dc:cc:82:21:59:8f:1a:77:3b:10:af:
         3f:71:aa:e1:1e:5b:68:79:dd:0d:b5:21:93:db:94:fc:a1:f3:
         cd:14:99:73:8f:5d:eb:79:86:e2:16:4c:88:5d:de:a3:14:bb:
         67:bb:fe:32:28:dd:b8:a9:8e:41:88:1a:e2:66:2c:ce:55:33:
         c3:b0:dc:1f:7f:7e:d5:21:5a:aa:a1:da:3a:b8:de:2d:94:1c:
         ed:97:80:02:eb:b5:4f:8b:e5:82:9e:e8:21:66:a5:dc:77:40:
         e4:a2:17:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:11:39 2026 by rpki-client