Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aa96d1ed-bd98-3014-ada6-f33f9ba7bc61.roa
File:                     aa96d1ed-bd98-3014-ada6-f33f9ba7bc61.roa (raw, json)
Hash identifier:          DZI39TeksTnaW64peeyQQsfR6+fRAbK/qpcBPSu4/Cw=
Subject key identifier:   9A:6E:71:B1:92:00:C7:BE:27:59:0E:88:AB:8B:B3:EB:43:AA:79:6B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F497F70383B4CBC3EEF780D00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aa96d1ed-bd98-3014-ada6-f33f9ba7bc61.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     401256
IP address blocks:        216.66.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7f:70:38:3b:4c:bc:3e:ef:78:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=3a5cc235-454d-4be4-808f-f3f48d5f2da7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e7:a2:26:81:d8:8d:57:f8:71:21:c4:e7:33:
                    ff:f9:c2:c3:75:11:37:19:3f:50:8f:5b:b9:28:b3:
                    9e:10:0a:01:19:22:22:45:04:4a:28:c9:10:53:39:
                    5f:38:16:bb:f3:b9:87:ee:0a:d9:30:2e:04:5b:bb:
                    9e:23:be:4f:a6:e5:1a:ff:77:a6:0a:09:78:73:a5:
                    39:5e:a8:d6:06:b2:ab:94:e2:fc:28:52:ce:87:49:
                    73:96:34:8c:b7:8b:c2:9b:56:ad:0f:3c:fe:cd:ff:
                    16:0f:63:01:7b:43:9a:7d:64:7e:a5:66:c5:93:a0:
                    fa:e2:40:9e:5c:cd:e7:c7:70:67:92:80:1a:3c:d1:
                    6f:0a:ba:c0:21:80:c4:f7:09:64:b8:12:35:c3:8a:
                    eb:6e:86:e5:74:37:92:fa:a4:ab:11:72:1c:d6:28:
                    6d:82:2d:2c:02:e7:b2:03:90:ca:b9:d5:9b:f8:9d:
                    6f:03:78:22:45:d5:61:90:54:8a:55:e8:6e:56:0d:
                    03:06:43:8b:1b:91:dc:29:95:ee:5c:52:b4:ea:e4:
                    20:d0:66:5a:fa:c4:c6:b1:e7:36:b2:42:f9:30:30:
                    1c:59:dc:08:d5:fc:e9:c7:2a:52:4e:c2:fc:4c:c4:
                    7e:ab:f2:37:ca:5d:e8:ee:a9:da:70:86:e4:86:f8:
                    17:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:6E:71:B1:92:00:C7:BE:27:59:0E:88:AB:8B:B3:EB:43:AA:79:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aa96d1ed-bd98-3014-ada6-f33f9ba7bc61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.66.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:72:57:d0:b3:02:f9:2f:64:f4:55:aa:aa:cf:b5:13:17:4d:
         8a:07:e8:4b:d9:f0:b2:08:27:7f:1e:00:a7:9d:1c:25:cd:8d:
         87:11:47:8d:e7:df:12:4d:7a:71:2c:c4:46:5a:82:e8:27:15:
         27:c8:ec:ea:47:4b:5e:4f:d3:f7:37:88:bb:46:f7:8b:44:78:
         7a:26:81:40:9c:e5:72:27:28:2b:80:ee:a3:7b:ed:4c:d5:d9:
         4d:33:0f:65:b2:4e:4c:66:87:61:e9:94:23:d9:5c:c6:2b:b3:
         49:c4:50:e4:eb:83:d2:8a:5f:d7:5d:57:46:f9:81:84:c4:ae:
         18:33:73:c9:0c:30:d7:66:d1:42:4a:62:09:d1:00:60:e3:26:
         e1:61:d2:b8:f7:ad:b2:1b:e8:86:bf:db:56:b0:5e:8d:7d:8c:
         59:8c:42:d5:45:4d:9c:46:4f:56:ab:e4:ce:b3:db:eb:0d:a2:
         5b:62:c8:40:82:f8:1a:c7:69:3a:35:96:50:3c:12:2b:63:5e:
         de:d1:92:7e:fc:75:e7:46:51:1d:af:3c:f6:96:30:93:35:7d:
         35:3e:ae:fb:48:31:fe:9b:0d:d0:a0:5d:f8:81:2b:42:4f:47:
         26:27:d0:d8:3c:51:37:7b:a1:be:49:9e:38:1f:00:5a:2d:e6:
         cd:94:cb:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:11:27 2026 by rpki-client