Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/65d11a05-2769-3f82-a107-6def6f4c6ffe.roa
File:                     65d11a05-2769-3f82-a107-6def6f4c6ffe.roa (raw, json)
Hash identifier:          CbW5nEI1VivabFB5TRP1qhFovuObIM1V7s+Ff53zQTs=
Subject key identifier:   8A:A7:DE:B1:F0:7F:65:71:93:59:82:C5:C6:09:60:C2:46:3E:E7:70
Certificate issuer:       /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
Certificate serial:       010D0C9F4328584F03A791BDEAB72F4417230DD0
Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/65d11a05-2769-3f82-a107-6def6f4c6ffe.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        209.169.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:91:bd:ea:b7:2f:44:17:23:0d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=9550fff3-1cc4-40ce-ba8d-399ba89d923d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f7:e0:c4:33:e8:bf:52:21:1b:d5:d7:81:18:
                    2c:b4:cc:7e:e3:0f:e6:42:32:cc:e5:2e:c3:2c:20:
                    ea:16:7b:9b:0c:6f:f1:a4:b6:8e:72:5c:e5:00:4d:
                    92:b0:a2:72:1e:9d:84:0a:5c:80:09:2c:7e:5d:1b:
                    10:1f:70:cb:aa:42:c5:95:41:14:d0:03:b8:b5:b1:
                    91:7e:6c:db:76:42:62:56:1a:94:a6:19:2b:82:39:
                    6b:b0:68:4f:7a:7e:1b:26:cf:64:99:e2:18:9f:55:
                    a6:e5:a9:9b:ce:b1:6c:99:56:6c:25:f8:b3:7c:53:
                    ad:8b:3b:4f:a0:5c:53:b0:be:87:5f:31:15:f1:97:
                    88:13:f1:6b:32:11:b7:cf:fd:e3:d4:8a:91:6b:6b:
                    5c:a9:2a:f5:92:79:4f:12:2d:f7:58:bc:47:03:74:
                    cc:65:e1:18:f8:d7:c8:5b:ef:31:5b:97:4d:e8:37:
                    6f:2d:9f:17:67:30:ed:fa:25:4e:70:d2:52:01:c4:
                    0b:38:10:42:e9:0b:75:87:fb:40:7b:24:b8:fb:25:
                    9f:28:ed:08:76:6d:0d:9d:e5:42:a0:63:85:5f:b2:
                    83:6b:40:50:5d:32:c0:c7:8d:7f:e5:94:43:ea:b0:
                    45:a0:46:1c:6b:2d:a1:97:7e:d4:bc:81:ee:c8:9b:
                    16:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:A7:DE:B1:F0:7F:65:71:93:59:82:C5:C6:09:60:C2:46:3E:E7:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/65d11a05-2769-3f82-a107-6def6f4c6ffe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl

            X509v3 Authority Key Identifier:
                keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.169.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:69:7c:85:94:04:be:c5:14:d6:52:5a:1a:e4:1b:2e:f1:df:
         16:ce:9b:ec:f2:8f:8a:5c:91:5f:a4:41:ab:7a:27:cb:08:c6:
         b5:fe:13:a3:4d:a1:64:be:43:27:04:eb:6e:c2:d6:e3:0e:8f:
         14:2f:87:7f:b5:95:ed:af:76:57:42:e7:c3:31:c5:25:d4:97:
         58:40:0e:39:df:e6:2b:fd:3f:1e:e1:63:e5:e3:f8:23:01:49:
         a0:d0:f9:ee:ef:94:d2:5e:de:4b:9e:b4:b6:0e:d4:d2:fe:b6:
         72:1c:39:7a:f5:de:fc:0e:d3:28:52:dc:dc:de:45:08:1f:b8:
         42:0f:8f:53:58:63:5a:ce:42:2c:20:5b:60:be:f8:05:ee:5c:
         65:7a:82:40:6e:a9:46:73:8d:81:2b:81:02:09:05:ed:33:d1:
         20:20:07:22:31:ef:83:b2:d5:12:59:d7:c3:bb:78:f3:0c:92:
         24:11:b6:20:0d:55:d0:8f:03:0b:32:0f:75:ac:3f:da:97:23:
         00:15:6c:25:10:f9:55:f9:77:88:f6:b8:08:22:d7:4d:e2:85:
         5e:43:e3:ad:60:8c:59:89:7b:c0:4e:cf:ea:97:8d:83:f1:07:
         72:00:8d:91:53:c3:42:ae:12:0b:e3:87:d6:86:cb:34:70:22:
         b5:5d:56:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:40:25 2026 by rpki-client