Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9/f296ee73-eb6e-377f-b140-3f4e4c4e7d3c.roa
File:                     f296ee73-eb6e-377f-b140-3f4e4c4e7d3c.roa (raw, json)
Hash identifier:          OnSpDxfdSMT4hpeNk9D/uUacMt6ah7hP9v92PqfxOs0=
Subject key identifier:   66:8E:BE:8E:AB:F1:27:CA:79:C7:ED:91:52:EC:E5:3E:FD:1F:22:33
Certificate issuer:       /CN=0c1ef9c6-289f-416a-97db-f9a640a2b2e9
Certificate serial:       010D0C9F4328584E69A4B1B9D60B450FB24A7480
Authority key identifier: 69:39:63:95:DD:5D:34:75:A2:16:12:5A:CC:D1:89:4D:58:47:9F:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9/f296ee73-eb6e-377f-b140-3f4e4c4e7d3c.roa
Signing time:             Mon 06 Jul 2026 21:00:13 +0000
ROA not before:           Mon 06 Jul 2026 21:00:13 +0000
ROA not after:            Sun 04 Oct 2026 21:00:13 +0000
asID:                     47273
IP address blocks:        185.115.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9/0c1ef9c6-289f-416a-97db-f9a640a2b2e9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9/0c1ef9c6-289f-416a-97db-f9a640a2b2e9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:69:a4:b1:b9:d6:0b:45:0f:b2:4a:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c1ef9c6-289f-416a-97db-f9a640a2b2e9
        Validity
            Not Before: Jul  6 21:00:13 2026 GMT
            Not After : Oct  4 21:00:13 2026 GMT
        Subject: CN=b93e77a4-a74c-4ee0-ab53-bfe88e3f9fe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ed:75:1d:13:de:0a:01:95:ac:7b:b7:6f:ba:
                    36:86:fe:ba:06:78:33:62:af:aa:c1:90:5d:1e:7e:
                    16:d2:2c:25:57:f7:ad:b9:ec:0e:54:c2:20:97:db:
                    99:60:38:3c:79:86:f2:43:97:dc:9d:c7:db:1f:18:
                    33:66:bf:18:d0:72:26:16:9b:8c:50:00:a7:6c:ed:
                    9f:ce:7d:b1:50:6c:db:14:a4:fc:ff:3e:ee:7a:3a:
                    92:d7:2b:62:a4:1d:13:e3:0a:5f:1e:2d:14:f7:ec:
                    73:15:9d:3a:07:47:2f:75:53:67:70:14:7f:71:68:
                    59:4d:83:0d:3f:fe:ff:16:56:0b:15:4f:6a:05:ac:
                    a6:70:4b:d5:1d:2e:75:5e:28:2b:6b:37:7b:a8:02:
                    23:e7:f8:da:cb:60:ba:41:bc:29:3b:7d:6a:7e:0e:
                    98:2d:16:fa:55:5d:c3:4a:4b:9c:35:4b:bb:c8:ed:
                    48:c8:a2:16:b2:2f:66:15:73:53:98:c4:91:eb:df:
                    56:8f:ea:94:63:7f:51:43:9e:d8:51:06:12:f4:50:
                    82:4d:c6:ac:48:51:ac:73:45:d4:95:bf:dd:3b:8a:
                    3f:5d:b6:73:f4:e0:93:77:61:80:56:e6:20:d1:64:
                    2b:a4:fa:1d:40:65:a3:76:a5:5a:95:25:50:b2:1d:
                    95:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:8E:BE:8E:AB:F1:27:CA:79:C7:ED:91:52:EC:E5:3E:FD:1F:22:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9/f296ee73-eb6e-377f-b140-3f4e4c4e7d3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9/0c1ef9c6-289f-416a-97db-f9a640a2b2e9.crl

            X509v3 Authority Key Identifier:
                keyid:69:39:63:95:DD:5D:34:75:A2:16:12:5A:CC:D1:89:4D:58:47:9F:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.115.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:1a:e4:43:0c:94:ee:51:43:94:45:b3:ca:c8:b5:46:ed:a4:
         6c:99:fd:8f:b5:bd:dc:a0:87:fa:05:79:4f:b1:9a:74:e7:7d:
         fc:66:63:23:fe:f4:e6:d8:b5:65:65:1d:e7:6f:0e:39:72:9a:
         50:3c:3e:5f:82:77:cc:83:92:d6:c1:cf:53:b3:be:9d:16:59:
         58:9c:2c:b8:bc:e9:13:5c:65:fb:f3:73:c4:ab:16:52:63:d8:
         88:c3:3e:98:f9:b0:f2:53:b4:02:6c:5a:47:ec:01:bf:0b:22:
         ca:50:5e:a3:07:df:9c:78:56:c2:c7:9a:ef:50:58:5f:50:b3:
         25:21:fd:cd:8f:59:58:25:d2:01:f0:fc:d0:a1:17:17:b7:58:
         4b:80:15:11:5c:90:50:b5:48:ab:07:7e:43:95:6a:fa:31:44:
         9a:d1:10:26:9f:1f:d3:40:a0:dd:91:71:44:53:f4:f9:fb:07:
         0d:37:74:6b:45:02:ce:46:80:7f:26:b5:fd:0c:c5:2f:e2:f3:
         d4:e4:c5:ff:f1:f8:9d:c7:f3:a4:d5:93:bd:0f:a4:e4:10:3c:
         44:3d:5f:8b:7a:f1:a8:91:1f:6d:66:05:f1:13:63:b5:7b:f3:
         05:d8:b5:56:cc:2c:d1:04:75:cb:b6:46:be:4a:32:26:96:b0:
         66:14:d3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:26:49 2026 by rpki-client