Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1b1c5c78-e842-359d-a03a-5f789b80ce73.roa
File:                     1b1c5c78-e842-359d-a03a-5f789b80ce73.roa (raw, json)
Hash identifier:          Qc/oOcducEWxZ/qbSazfUXJ7kt6nlnBNn3PZhMcBpys=
Subject key identifier:   80:7E:3E:2D:3F:68:A2:BE:F2:E1:3C:5A:EA:44:12:94:40:B3:69:48
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EDC9241A6DDDE25D1F1E285C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1b1c5c78-e842-359d-a03a-5f789b80ce73.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     22840
IP address blocks:        216.66.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:41:a6:dd:de:25:d1:f1:e2:85:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=ce187d91-7b03-4f7a-b24b-ddee362071c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:49:e5:06:0a:45:c1:40:9d:25:31:fa:de:67:
                    6a:9f:de:dd:ab:14:da:ea:21:34:86:a8:e3:72:e2:
                    ea:d6:1f:e3:97:04:08:f8:b5:98:c5:3d:7c:30:b6:
                    b7:45:4c:e3:a8:2e:9d:49:8d:74:5c:75:7d:43:ef:
                    80:45:02:e4:1d:06:6a:4b:cf:f4:2d:89:df:a1:34:
                    75:13:b4:de:54:a9:fb:c9:c1:e1:d2:24:a7:fc:67:
                    4d:b7:b5:bd:41:17:48:0d:38:dc:17:4b:32:5a:e4:
                    ea:30:93:49:6d:f4:ca:ae:8e:16:36:29:eb:e5:d2:
                    20:25:0c:9d:c8:9d:d5:8a:ef:ec:92:74:3a:0e:0a:
                    52:c9:6c:ad:74:76:77:5a:eb:48:58:5c:3d:2a:ee:
                    e8:c2:91:86:50:19:ce:11:6d:f1:d2:1e:4e:e1:2a:
                    76:46:be:69:d9:53:d1:40:bd:47:31:de:9c:00:b8:
                    df:17:05:f2:c1:3c:f6:d1:00:9b:ae:ea:71:9d:1d:
                    13:03:67:52:f3:08:85:ba:f9:a5:ed:d4:f3:7e:3e:
                    4d:18:b3:e5:8c:fd:1f:20:46:83:a5:2c:34:52:ba:
                    0f:54:03:06:01:d0:93:5e:5c:ed:22:ef:8a:ab:ea:
                    02:19:a2:c6:12:0e:b7:a6:a6:02:91:0c:10:d4:72:
                    23:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:7E:3E:2D:3F:68:A2:BE:F2:E1:3C:5A:EA:44:12:94:40:B3:69:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1b1c5c78-e842-359d-a03a-5f789b80ce73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.66.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:f7:c4:1f:39:30:3f:64:2f:27:ad:2d:a7:6a:17:63:78:06:
         57:0f:7f:44:41:bd:ca:a1:af:ff:6f:a4:e6:de:b1:33:8e:1c:
         2a:60:5e:d1:a7:6e:2a:07:d0:3a:43:bd:d2:fe:cc:6c:64:06:
         2c:d1:b9:e8:64:9c:ab:f1:f6:01:5e:11:92:a3:f4:ba:13:a7:
         9b:b3:9e:dd:93:7a:e1:2f:45:33:b8:19:9f:2f:53:9d:66:06:
         8a:2d:83:cb:b2:33:13:6e:aa:ca:e9:df:c1:71:0b:28:8a:04:
         9a:68:33:b1:ae:18:ea:77:d1:79:2f:a9:d6:78:f2:6e:64:e0:
         8d:78:a7:46:ff:20:92:3c:27:08:99:9a:a5:08:64:e9:7a:2c:
         ba:5c:d1:97:cc:d1:5c:bf:d5:f0:be:8d:18:07:07:15:4a:54:
         1b:8b:1a:e6:79:9b:c8:80:b9:f9:fc:e6:de:a5:18:1c:26:4d:
         71:6a:6e:9b:ea:6e:40:ad:a1:76:12:89:2d:a0:6c:2e:4d:af:
         14:5b:9e:8e:00:e5:c1:ea:c9:78:90:35:a2:a1:52:a9:7d:bd:
         17:54:9f:da:bc:16:7c:b1:79:ec:b3:84:95:74:a9:7d:75:5c:
         66:03:7a:3b:23:db:40:da:5c:9e:a5:e5:d9:43:ee:f9:7f:73:
         85:a8:11:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:29:32 2026 by rpki-client