Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9/a558b331-d164-33e0-a263-e8f7cee088d7.roa
File:                     a558b331-d164-33e0-a263-e8f7cee088d7.roa (raw, json)
Hash identifier:          Np8nnOoxN5arD8IzwPzmVQNOwUcueFSCFh3AoZYe5H8=
Subject key identifier:   0A:70:7A:8F:52:37:52:8D:B9:5C:1D:B4:BB:5E:31:40:C5:85:E1:1F
Certificate issuer:       /CN=0c1ef9c6-289f-416a-97db-f9a640a2b2e9
Certificate serial:       010D0C9F4328584E69A4B1E1F79991E8B1DC6200
Authority key identifier: 69:39:63:95:DD:5D:34:75:A2:16:12:5A:CC:D1:89:4D:58:47:9F:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9/a558b331-d164-33e0-a263-e8f7cee088d7.roa
Signing time:             Mon 06 Jul 2026 21:00:13 +0000
ROA not before:           Mon 06 Jul 2026 21:00:13 +0000
ROA not after:            Sun 04 Oct 2026 21:00:13 +0000
asID:                     35778
IP address blocks:        185.115.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9/0c1ef9c6-289f-416a-97db-f9a640a2b2e9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9/0c1ef9c6-289f-416a-97db-f9a640a2b2e9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:69:a4:b1:e1:f7:99:91:e8:b1:dc:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c1ef9c6-289f-416a-97db-f9a640a2b2e9
        Validity
            Not Before: Jul  6 21:00:13 2026 GMT
            Not After : Oct  4 21:00:13 2026 GMT
        Subject: CN=724dc8ab-ca98-41dd-94a8-564f9ea5f68a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5e:d7:87:16:9e:a4:e6:d8:e3:8b:28:21:75:
                    96:a1:11:69:87:3f:76:fe:c2:57:26:6d:d3:dc:1f:
                    64:0d:d0:9f:f1:d2:d6:a2:cc:72:b2:a4:64:8b:0b:
                    50:e8:ae:a4:20:ab:04:b9:93:75:b9:cf:af:5b:65:
                    dd:60:6c:c0:e4:74:07:c2:73:5e:93:fc:2d:41:a5:
                    60:40:8e:2e:1b:8b:95:e4:5b:f6:cf:b5:48:07:11:
                    85:0e:c8:55:d3:de:02:2c:fa:e4:40:5b:3c:bd:58:
                    38:7a:d9:03:f9:b1:b4:45:70:f9:17:6d:12:2c:1a:
                    c6:93:4f:1f:35:62:aa:d5:e8:d6:4c:db:ec:e2:0a:
                    62:dd:ba:3a:ae:76:9c:57:bb:6d:38:ad:d7:8d:ae:
                    1e:b5:75:f5:8d:c9:cd:60:c4:a1:e7:e4:00:68:6c:
                    f7:ef:78:4e:32:59:2c:36:eb:85:67:cf:31:4e:8b:
                    0e:a2:68:8a:5d:60:e8:f4:15:8c:52:03:92:84:29:
                    2b:02:da:e8:32:53:27:52:d2:b6:bf:8a:9e:5f:07:
                    e8:db:ba:09:87:6c:e7:0b:48:4f:6f:37:36:e1:0d:
                    96:aa:f8:a9:2a:99:7a:98:c4:b4:be:77:16:d0:3c:
                    1a:0b:a1:dc:b7:9c:be:2d:93:37:99:61:52:d6:e8:
                    55:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:70:7A:8F:52:37:52:8D:B9:5C:1D:B4:BB:5E:31:40:C5:85:E1:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9/a558b331-d164-33e0-a263-e8f7cee088d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9/0c1ef9c6-289f-416a-97db-f9a640a2b2e9.crl

            X509v3 Authority Key Identifier:
                keyid:69:39:63:95:DD:5D:34:75:A2:16:12:5A:CC:D1:89:4D:58:47:9F:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.115.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:2b:a4:e8:95:96:34:66:f9:53:37:43:45:c4:d5:79:6b:7a:
         96:37:0d:2d:ff:d3:8c:f8:b8:72:f6:b8:90:a3:a6:75:9a:bd:
         6e:3c:50:70:68:e7:4e:22:f8:4a:9f:52:b0:c4:d0:43:9f:f2:
         52:ba:fb:b9:29:be:1c:12:81:a9:b5:b1:aa:0b:41:36:ca:9b:
         f8:d8:1a:a4:6e:cc:7f:7e:6c:98:36:3d:34:20:d5:03:d1:0f:
         8d:94:ac:71:bd:5e:a3:1a:27:bf:06:af:45:1f:31:27:27:0f:
         c6:f8:65:35:ed:42:a2:25:7a:b0:7e:52:5d:e4:42:2e:f8:58:
         a3:f5:f9:bc:b7:a9:14:9d:8c:43:57:30:30:b5:e3:39:9b:dd:
         8c:ae:ee:fe:6f:24:de:e6:f5:fb:2b:80:41:d1:6d:b3:f2:83:
         b8:20:5f:7b:c6:0a:7c:15:dd:e0:db:11:17:f0:7e:e7:43:41:
         30:78:08:b4:f5:8b:1b:cb:5c:76:b1:57:2f:40:b1:66:e1:08:
         d4:77:20:76:26:4b:69:c9:5c:a7:3b:ca:16:c8:f6:53:6e:d4:
         45:c8:e0:c7:18:84:87:d9:f4:41:06:1b:50:5e:33:5b:dc:e2:
         63:79:1d:09:e3:f7:c3:e3:35:7d:98:ff:e3:73:7d:85:cd:bf:
         0a:d0:10:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:26:45 2026 by rpki-client