Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/17a3fcba-33aa-3b78-a608-0eecf0c2eecd.roa
File:                     17a3fcba-33aa-3b78-a608-0eecf0c2eecd.roa (raw, json)
Hash identifier:          O4TrA9dIVKPIresPErJkXDv0FUeblE3E/GsWA+xdh4k=
Subject key identifier:   EE:4A:1F:6E:7D:98:2A:9C:65:B0:FB:FE:9D:82:CC:2A:FC:4A:54:01
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584EEEB75C8AE9BC6F9DD897F400
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/17a3fcba-33aa-3b78-a608-0eecf0c2eecd.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        216.115.219.0/24 maxlen: 24
                          216.115.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:5c:8a:e9:bc:6f:9d:d8:97:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=a72467cf-68e6-4796-921c-1220dacb4418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:37:a0:3c:10:98:8b:92:3a:41:8f:19:2f:68:
                    59:6e:af:86:ed:41:ac:5a:c8:43:26:6f:c1:2a:b9:
                    1f:ab:e1:36:94:ca:58:38:b1:4d:ed:bb:6b:8e:3c:
                    50:4d:29:41:e3:70:b9:71:9b:be:fb:e4:cd:31:26:
                    ba:d7:9c:cf:d0:83:6b:22:ba:6d:46:8e:c7:fb:bd:
                    54:c5:74:35:4a:bd:18:13:f2:ca:78:ac:bd:63:f2:
                    82:83:79:8e:71:a5:4d:1c:93:90:87:68:67:48:c7:
                    a7:8b:90:e8:a4:eb:38:e0:b2:21:70:96:56:7f:72:
                    33:a5:6f:72:e3:0d:01:b7:45:80:52:dc:ed:c9:6a:
                    63:c9:c1:b8:f7:ca:47:ad:9d:b5:42:ef:6f:22:63:
                    a3:de:71:a0:54:bc:88:e5:cf:80:64:e3:95:cb:85:
                    75:b4:73:fb:c9:48:c2:58:6e:2b:68:ef:34:9a:23:
                    d4:a6:74:f2:9e:9d:c7:47:30:bb:ba:35:74:9d:e9:
                    a3:20:b4:8b:e8:4a:1d:d2:6c:07:0b:67:ea:f0:d7:
                    f7:c6:4d:bc:c9:56:72:91:25:ca:cc:88:51:7d:74:
                    cc:e1:5c:36:0d:d2:18:ea:9f:88:53:7e:51:8e:88:
                    a0:90:07:b8:c9:69:12:c7:fa:98:54:af:26:fa:e2:
                    80:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:4A:1F:6E:7D:98:2A:9C:65:B0:FB:FE:9D:82:CC:2A:FC:4A:54:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/17a3fcba-33aa-3b78-a608-0eecf0c2eecd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.115.219.0-216.115.220.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:af:63:a6:96:40:f5:8a:45:47:b1:29:51:da:64:3b:11:52:
         79:6c:84:41:c6:be:2b:0c:3c:94:f2:ee:38:9c:34:70:b4:c3:
         03:a2:d4:eb:b7:22:91:0a:46:ae:f6:e7:ee:1f:3b:5c:70:eb:
         bb:be:8e:ba:46:9f:33:d3:88:6a:cb:e2:fe:c3:ae:5d:9c:27:
         92:dd:98:2c:44:1f:84:69:73:64:06:50:0f:1a:1a:9f:e8:82:
         21:47:5a:2a:21:5c:3e:76:9f:71:4b:b1:59:0f:0f:67:b6:e1:
         eb:b9:3c:ca:70:4b:c8:d0:24:be:d6:24:b6:c1:14:cd:a2:c9:
         10:c2:d1:48:e8:39:74:64:45:9b:6c:9b:4f:fc:99:b6:a7:e6:
         95:83:a2:5b:97:85:6a:6c:a8:ed:53:f0:e4:96:6d:10:aa:b2:
         0e:3a:da:c0:52:6a:89:1b:2b:2b:11:ca:10:39:58:0b:c9:f5:
         19:b1:b8:0c:73:5a:5e:2c:07:7a:8c:55:ef:bf:29:ad:e2:70:
         de:de:88:97:68:32:25:6e:7d:28:88:0b:f5:1d:49:c6:b9:e4:
         dd:12:33:3a:38:30:a6:4e:52:8e:33:cb:1e:7a:2b:61:bd:9f:
         9b:15:c7:d5:a6:29:37:42:f0:3f:dc:c5:20:98:a3:61:a1:1d:
         fe:bc:ad:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 00:23:38 2026 by rpki-client