Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/2d68a7fd-3dac-3b03-955f-a88fddcf8bbf.roa
File:                     2d68a7fd-3dac-3b03-955f-a88fddcf8bbf.roa (raw, json)
Hash identifier:          2SLIDGCCoLzlqyecWRTnxHZaH4bTpJw3XntN/aU1ihQ=
Subject key identifier:   71:D4:81:F8:8F:B4:2C:1B:4A:97:80:EB:40:37:2B:D0:AF:6F:6F:C6
Certificate issuer:       /CN=8fda0e10-f6bf-4c23-bffb-d4a9a7352355
Certificate serial:       010D0C9F4328584EA78846EC1734F134D0A96F40
Authority key identifier: 10:52:7B:7E:B8:F7:A6:F4:07:6F:CF:CD:5A:3F:12:E3:1D:D2:2C:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/2d68a7fd-3dac-3b03-955f-a88fddcf8bbf.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     2381
IP address blocks:        216.56.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:46:ec:17:34:f1:34:d0:a9:6f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fda0e10-f6bf-4c23-bffb-d4a9a7352355
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=96c3d9c1-8eb3-4b6a-9fd2-406c7f8f7bc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:62:25:5b:08:d3:d0:8c:e3:91:5e:54:24:f2:
                    f7:7a:ff:92:7e:c9:df:26:ea:e1:60:45:a1:05:a6:
                    9e:10:35:40:34:c7:59:9b:50:7c:9e:ed:f1:73:b5:
                    1f:2c:49:dc:e7:85:f8:0f:3b:fd:f4:1b:95:a7:7e:
                    2c:66:72:6f:d6:41:28:60:1d:c2:35:e4:22:99:0a:
                    3d:f4:cd:98:e6:c2:53:77:5c:dd:55:a6:71:0f:b0:
                    ac:c2:c2:ba:74:48:ec:35:31:d9:ff:ee:c1:56:c8:
                    b8:f9:bd:a4:66:d5:18:a6:6b:43:3a:96:22:dd:f1:
                    01:4f:8b:9f:cc:7a:9e:cb:21:8f:bb:5f:d0:a9:54:
                    45:27:64:60:46:3b:a3:c0:ec:ef:7e:01:0e:ba:db:
                    5d:4a:45:8c:9a:ac:1a:00:b6:bd:09:a0:ca:9b:38:
                    ed:8f:a3:a4:d9:7a:f7:67:15:b6:21:a8:5a:1a:d0:
                    80:d2:b6:99:20:ce:87:c8:7f:a3:2d:59:4a:1e:71:
                    76:a0:23:e9:c8:ae:4a:fe:38:fb:32:ad:61:aa:43:
                    f4:b2:f4:71:90:7a:fe:d5:86:48:c1:bc:9d:f0:ca:
                    5d:46:e8:3d:f8:86:76:a0:9e:c8:ca:78:4f:c4:89:
                    69:f1:47:ba:ce:7d:04:65:9e:71:7b:e0:69:0c:76:
                    b0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D4:81:F8:8F:B4:2C:1B:4A:97:80:EB:40:37:2B:D0:AF:6F:6F:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/2d68a7fd-3dac-3b03-955f-a88fddcf8bbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.crl

            X509v3 Authority Key Identifier:
                keyid:10:52:7B:7E:B8:F7:A6:F4:07:6F:CF:CD:5A:3F:12:E3:1D:D2:2C:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.56.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:8b:48:dd:d4:21:8d:9d:68:e6:c7:e3:c0:d7:05:3e:72:0e:
         fd:68:a3:d2:32:19:28:e1:82:24:be:86:03:9f:81:ad:d9:20:
         f8:4e:58:66:f3:d4:a8:b4:5f:05:b3:96:73:85:ca:52:60:d9:
         29:e5:93:eb:a6:06:e9:4c:a9:f9:88:2a:34:f0:57:32:a9:39:
         76:46:73:19:56:ad:86:e9:f9:97:49:de:43:7e:95:ce:b3:0d:
         88:e2:7d:cb:8f:f6:a9:33:18:bf:77:d0:32:7d:de:de:63:f4:
         3a:f0:98:1a:0a:81:aa:bb:71:d5:70:d3:f8:3e:43:6b:04:1b:
         0f:0d:c4:c8:62:66:ce:84:07:eb:c1:54:53:b1:25:ca:f3:21:
         e2:57:b1:03:5b:47:b9:e7:1b:89:87:41:ca:03:22:3f:dd:ce:
         90:31:b4:47:1b:8c:e6:a9:62:bc:87:a3:ad:2b:6d:f6:a1:18:
         16:f4:4b:df:78:09:ea:88:37:b6:d3:99:5d:86:ed:7b:d2:25:
         4f:88:75:ab:72:79:b9:5e:37:7e:24:92:52:c7:0e:ad:af:66:
         ac:1b:93:5d:3e:54:79:25:12:b3:84:bb:2d:fa:57:1e:63:83:
         ae:99:8a:35:96:1e:db:27:29:5c:a9:02:d3:8f:8c:a0:07:ec:
         bd:a9:a9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:00:44 2026 by rpki-client