Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/c72c3f9f-6ae9-35bb-8f0e-2a4435c03f8a.roa
File:                     c72c3f9f-6ae9-35bb-8f0e-2a4435c03f8a.roa (raw, json)
Hash identifier:          l56fvidTJe0xlEOSjjPO1pElxzpD3/Oabm92w0cE3E4=
Subject key identifier:   5A:4D:9F:56:BE:57:63:2F:B1:F9:27:51:F9:D0:29:A0:64:7B:56:3D
Certificate issuer:       /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
Certificate serial:       010D0C9F4328584F03A791D5C468555AFF98DD68
Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/c72c3f9f-6ae9-35bb-8f0e-2a4435c03f8a.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        209.169.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:91:d5:c4:68:55:5a:ff:98:dd:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=65981aca-aaec-47d9-bca5-cb01f73c0dca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5f:98:79:6d:f5:56:14:e9:fb:bd:a5:2c:e6:
                    36:15:00:5f:8c:a7:c5:8b:f5:bf:a8:fe:ce:8a:33:
                    72:37:8c:b0:62:8c:ac:2f:9a:df:87:e4:da:14:39:
                    65:21:4f:3f:73:46:54:f0:9f:be:a8:9a:32:4c:ea:
                    9e:df:05:c3:26:e4:fc:80:01:20:de:1a:d1:79:2e:
                    92:d6:8b:5d:8a:e2:dd:9f:d1:72:e5:2b:8c:87:23:
                    fd:82:26:d8:ee:9b:46:06:d1:6e:fb:12:f2:f8:b1:
                    05:da:47:05:98:63:99:72:ef:7f:11:d1:74:23:e9:
                    48:2e:b9:f3:3e:06:ed:02:43:0f:19:42:65:82:91:
                    86:96:f0:b7:95:95:70:cb:e1:db:26:ca:30:06:eb:
                    54:4c:97:3e:4a:39:35:53:5b:32:1e:d0:32:4c:24:
                    b4:72:d9:92:20:bc:90:e6:68:5b:0c:f6:0f:df:67:
                    3e:06:6a:bd:d0:02:01:8f:62:a8:66:a0:f3:d7:e3:
                    3f:6e:ab:90:f3:bb:e0:80:ab:c4:75:87:f0:40:35:
                    47:14:c9:b7:3d:21:b8:68:aa:6f:66:8a:99:65:89:
                    32:9c:fb:8c:cb:3d:85:36:58:0e:b4:67:13:46:66:
                    22:0b:93:d9:7e:be:1e:26:e2:af:23:39:95:5b:e0:
                    19:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:4D:9F:56:BE:57:63:2F:B1:F9:27:51:F9:D0:29:A0:64:7B:56:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/c72c3f9f-6ae9-35bb-8f0e-2a4435c03f8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl

            X509v3 Authority Key Identifier:
                keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.169.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:96:76:a0:29:8e:8d:9f:df:b1:df:0a:f6:fc:a8:5a:4f:4e:
         ae:df:42:b9:de:b9:24:58:a2:1e:12:81:bc:b7:25:0a:cd:36:
         12:82:82:76:40:67:74:03:6d:46:98:01:d6:2d:c1:0e:d4:a5:
         91:54:a5:6a:37:71:b2:8f:7f:62:ce:cd:d0:e7:00:25:af:d3:
         6b:4e:00:ed:3b:e0:9a:cc:1f:45:ca:06:00:73:0d:21:94:10:
         51:c9:89:6f:a9:48:fc:20:83:27:d9:ad:24:32:5e:33:99:cc:
         be:6f:16:d9:19:7c:ff:88:7e:76:5d:21:5e:1b:90:4c:5a:a3:
         e1:9a:e2:8e:a3:35:1f:46:f7:ca:32:53:61:6c:31:c9:3e:2b:
         bd:8a:41:34:96:8d:b9:1e:b5:5f:3b:88:8b:bd:02:40:3e:77:
         fc:2e:b5:1e:57:1b:2f:1b:85:92:6a:2d:97:c9:5a:ee:e9:72:
         d8:76:12:1c:b0:8e:7f:67:87:55:83:59:ba:5b:89:6f:d2:87:
         19:5b:20:8a:58:18:d0:c1:2c:92:6f:f5:52:10:42:1d:4b:80:
         ef:b5:30:f6:4d:7c:77:1c:6b:ee:6d:57:32:fd:29:96:47:80:
         4c:5d:2d:ca:c4:3c:fe:c5:d1:c2:7d:51:a6:54:55:bc:e5:9b:
         68:c6:0f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:53:45 2026 by rpki-client