Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/016473cc-01cd-3366-bfcf-35691cae283c.roa
File:                     016473cc-01cd-3366-bfcf-35691cae283c.roa (raw, json)
Hash identifier:          zKbSxBWx6qKFkzSUeAt2qR6p9idAgzp2CRmy3zBa2EA=
Subject key identifier:   76:B9:F9:F7:A7:0D:D3:0A:81:68:71:0A:63:F5:F3:AE:BB:4A:49:17
Certificate issuer:       /CN=9a696f17-cb36-4b2b-be82-47f0c467096d
Certificate serial:       010D0C9F4328584F6F22E75DF84EEC3019505300
Authority key identifier: 38:65:43:C4:A4:97:8B:F1:CC:D7:67:C1:50:02:FE:EF:BC:D4:AE:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/016473cc-01cd-3366-bfcf-35691cae283c.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     46632
IP address blocks:        199.33.104.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:22:e7:5d:f8:4e:ec:30:19:50:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a696f17-cb36-4b2b-be82-47f0c467096d
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=ba607c23-af34-46de-a486-311948302f0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:f5:41:b9:06:8e:2a:86:f9:b9:26:e4:9d:6a:
                    2c:2a:41:b9:48:30:37:6a:3d:6f:59:a0:ec:6e:4e:
                    cf:fd:4f:da:59:ce:74:73:d8:72:b7:96:9c:b7:08:
                    81:a4:2d:e6:3d:8a:f1:52:71:3b:9a:fe:ef:4d:2d:
                    28:89:df:70:52:98:31:60:97:2a:fe:3d:f4:6f:44:
                    da:80:5b:8e:0e:cd:3c:b5:98:02:5a:00:51:19:bc:
                    11:6f:73:73:24:2b:1a:0e:c7:98:72:36:56:44:0c:
                    dc:55:62:d0:77:47:48:b6:6f:d2:c8:a9:1e:ed:a8:
                    9c:b1:79:52:f3:22:d8:16:f7:9a:f0:6a:1f:03:bb:
                    7d:9d:12:25:35:9f:b1:53:d8:6d:41:d6:86:03:9a:
                    b9:b4:83:e0:f1:92:12:57:c1:8b:ae:1a:d6:fb:88:
                    d5:a9:90:30:e9:60:b9:a9:b6:43:52:18:49:09:25:
                    9e:3a:b1:c0:e0:ed:b2:59:22:45:f7:36:e4:bc:9f:
                    2e:d8:51:b0:3a:a4:ee:bb:38:e3:0f:44:48:10:97:
                    2a:cc:d8:31:04:c9:f5:4b:df:2d:20:c6:2b:01:29:
                    ac:6e:3e:b5:74:e7:fa:15:95:02:3c:88:54:4c:be:
                    18:da:62:c2:2e:2b:af:e5:89:8e:45:85:05:36:51:
                    b0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B9:F9:F7:A7:0D:D3:0A:81:68:71:0A:63:F5:F3:AE:BB:4A:49:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/016473cc-01cd-3366-bfcf-35691cae283c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.crl

            X509v3 Authority Key Identifier:
                keyid:38:65:43:C4:A4:97:8B:F1:CC:D7:67:C1:50:02:FE:EF:BC:D4:AE:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.33.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:16:95:48:a6:d5:c3:45:d8:8c:e6:9f:7e:30:4f:98:18:42:
         7c:24:58:ee:db:0a:6f:ef:4d:38:dc:91:2b:b2:15:a5:11:dd:
         56:71:85:60:ff:44:48:aa:42:0b:18:36:4a:f1:c0:c7:5f:68:
         c5:39:5b:1a:38:5d:97:9d:aa:e9:f4:55:ab:f4:90:2d:5e:25:
         d8:25:a1:64:ee:5d:a8:c9:ed:8f:d9:2b:44:cf:09:cd:ac:8c:
         42:7a:d2:ea:14:3c:99:b1:28:66:d4:67:08:1b:1d:be:af:43:
         40:f0:98:0d:82:ae:42:d7:f4:af:c4:5f:d9:a6:23:6a:26:47:
         dd:8f:9a:30:f3:bc:66:34:83:86:96:c0:ef:90:7e:9b:86:7c:
         03:8d:a5:5a:e8:70:30:c7:2b:e7:8f:eb:d7:e4:e5:ab:6e:56:
         11:75:ab:86:69:31:c5:59:cf:71:22:5b:e5:e6:1a:f5:09:d3:
         eb:46:48:01:8f:10:0b:a0:6e:aa:91:46:d3:6c:51:01:8b:80:
         18:66:f3:1c:b8:30:19:dd:01:4a:28:a6:8c:cc:75:60:a5:05:
         51:9b:66:4c:16:02:bb:37:c8:d4:f4:32:a1:88:30:04:a9:d0:
         25:37:f9:90:a6:e2:72:f4:76:5f:56:3a:cf:93:a5:8c:11:83:
         7b:9e:77:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:30:17 2026 by rpki-client