Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/061ae190-f1e8-36ba-861a-48d8cc8fa2ec.roa
File:                     061ae190-f1e8-36ba-861a-48d8cc8fa2ec.roa (raw, json)
Hash identifier:          7ODpEKCiONl2Pr84oBXdICw+CLcc4W9KQ64zCu2EVfI=
Subject key identifier:   28:D2:95:77:F4:6B:DE:69:D8:FC:94:17:7D:EF:FA:4E:08:81:F0:42
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584EE0C20CE2DB0963A9677D3790
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/061ae190-f1e8-36ba-861a-48d8cc8fa2ec.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     16696
IP address blocks:        147.129.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:0c:e2:db:09:63:a9:67:7d:37:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=a9b436a6-0d8a-409e-9e4a-bfc475b76d90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2c:19:89:70:80:57:6f:f7:b9:83:aa:63:a2:
                    28:4e:93:36:f8:7c:69:73:cc:89:c4:cd:04:18:61:
                    cb:61:e5:f4:54:93:02:08:9f:d4:b0:0c:44:2d:d0:
                    94:3e:80:eb:75:eb:64:fb:4f:06:61:e7:41:69:b0:
                    dc:79:c0:33:00:28:2e:93:0a:32:61:b9:e0:0d:99:
                    c0:c0:f8:2e:5e:ec:c6:11:3c:7e:79:c3:a8:31:1e:
                    df:93:df:67:25:58:ab:65:6a:8d:c3:38:b3:45:f4:
                    5c:4c:6c:57:cf:40:71:de:83:d5:77:8f:01:9f:9c:
                    c4:37:e1:52:2e:a3:63:4a:ff:d8:72:1f:5c:a3:83:
                    a9:d1:b5:93:e9:2d:af:cc:3e:4f:68:8e:62:55:95:
                    c4:db:39:35:65:b9:af:3a:0a:47:84:2e:c4:3f:49:
                    ad:6e:55:c0:45:06:59:9b:86:f7:d8:10:3a:0c:8f:
                    c6:42:d2:f3:89:d3:dd:d6:88:95:36:ed:c9:8f:c3:
                    5f:97:3e:da:8b:65:bc:3d:09:87:f9:03:ed:a9:13:
                    13:89:af:17:91:05:ee:81:d6:43:22:af:ac:96:e6:
                    42:e5:2d:80:57:4a:8f:c1:71:83:ab:3a:3a:eb:21:
                    e5:ee:e3:83:36:6d:5c:ad:b9:42:0a:86:cb:e7:35:
                    3d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D2:95:77:F4:6B:DE:69:D8:FC:94:17:7D:EF:FA:4E:08:81:F0:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/061ae190-f1e8-36ba-861a-48d8cc8fa2ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.129.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:4e:9a:a2:87:53:86:08:76:b2:25:69:b6:f2:70:60:a1:91:
         2f:a9:e0:99:1f:85:00:6c:5b:f9:26:46:f8:d5:e4:5d:7a:6c:
         ae:ee:75:bc:1c:9a:ca:55:14:f1:7a:0a:7b:28:de:40:6a:f6:
         fb:01:f0:cf:b1:29:ca:5e:c2:fc:88:1f:8d:c4:ea:ba:fe:e2:
         49:b6:8f:26:f1:72:0b:53:c2:9f:ed:70:a2:7d:e8:53:fe:0b:
         8d:73:6b:bd:48:b6:66:79:ef:e9:74:ce:c0:a2:72:fd:61:d1:
         0f:57:ac:07:2a:4c:c5:ad:f8:86:0a:6c:cc:51:91:2f:b8:58:
         05:8a:a8:43:23:59:17:2f:5d:d7:68:d6:3b:4b:ab:0d:55:68:
         98:a5:68:5e:ac:d1:66:62:f7:e1:12:f3:0b:df:49:c7:ae:ad:
         62:79:73:ed:42:ad:fe:bb:73:fc:f1:4d:b9:bf:9e:c7:99:f1:
         ca:a3:4f:a7:cd:4f:dc:97:33:1f:f3:b5:bb:3f:8e:98:1d:47:
         1e:fc:2a:9e:5c:a8:ed:10:0d:5c:34:3f:ce:e2:8d:d5:82:f9:
         d4:6d:77:b5:a2:1c:79:16:3e:6d:98:1b:b1:2f:ea:9c:d0:15:
         3f:27:24:f6:94:7d:f6:4e:c2:a2:cb:82:50:53:f3:88:f4:8b:
         27:61:91:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:52:34 2026 by rpki-client