Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/a26a7435-f5ab-3419-883b-022dc11c8580.roa
File:                     a26a7435-f5ab-3419-883b-022dc11c8580.roa (raw, json)
Hash identifier:          tZR7cLoytCfbtyVchpl4qh6w+hjQBuj4iPfEsdteBO0=
Subject key identifier:   4A:CE:81:94:CC:28:08:54:AE:AB:46:89:08:37:7E:05:59:6B:F0:CF
Certificate issuer:       /CN=8ea106b1-df5e-4fb4-bd65-5167ff6dc175
Certificate serial:       010D0C9F4328584E7634CAE3527F3F69B8EDED00
Authority key identifier: D5:18:DE:17:15:7D:9E:BA:F0:5E:D6:1B:20:AD:7D:CD:A3:98:45:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/a26a7435-f5ab-3419-883b-022dc11c8580.roa
Signing time:             Sat 11 Jul 2026 09:00:12 +0000
ROA not before:           Sat 11 Jul 2026 09:00:12 +0000
ROA not after:            Fri 09 Oct 2026 09:00:12 +0000
asID:                     198949
IP address blocks:        138.247.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:76:34:ca:e3:52:7f:3f:69:b8:ed:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ea106b1-df5e-4fb4-bd65-5167ff6dc175
        Validity
            Not Before: Jul 11 09:00:12 2026 GMT
            Not After : Oct  9 09:00:12 2026 GMT
        Subject: CN=9ef6f2f4-f901-4946-a93a-29e86b41e59b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a4:ce:6d:76:5d:1d:13:71:9e:ac:a0:bb:9a:
                    c4:54:7d:cb:bf:ef:6a:47:38:68:8a:82:07:27:de:
                    42:f2:40:09:57:3c:74:15:80:18:23:9f:f7:ae:c4:
                    58:eb:58:0f:5a:e5:63:d1:4d:b5:c5:1c:63:da:52:
                    96:62:15:de:e4:05:3e:df:51:ff:40:7d:86:8e:01:
                    1c:61:04:df:46:b7:b2:63:17:db:85:4e:ff:c8:a0:
                    4b:75:2f:88:f7:78:9c:02:c4:db:64:42:2b:5c:06:
                    e2:14:cb:87:a2:d3:4a:9b:e8:56:68:a9:ab:f6:a5:
                    c2:13:49:5f:f4:96:af:6c:0a:ea:6a:40:90:85:2e:
                    59:20:36:c2:63:e3:a8:f0:db:68:5b:5b:f8:c6:d2:
                    b8:37:34:94:8a:85:07:81:89:c6:5d:4f:28:77:a1:
                    df:67:59:ac:c2:c4:dc:89:8b:d3:ea:93:06:72:2a:
                    4f:66:59:0a:ac:16:39:a4:ca:b7:66:85:ee:c5:a6:
                    4b:36:8d:32:6d:b6:5b:a5:bb:8b:3c:dd:69:90:d0:
                    7e:0b:8a:ca:84:7a:81:ac:27:3f:6d:d2:d4:50:64:
                    f4:a3:08:1f:1d:c6:91:d8:83:5a:80:7b:34:9d:b5:
                    92:f5:1a:a0:45:b7:03:70:fd:7a:5f:3b:c3:68:73:
                    01:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:CE:81:94:CC:28:08:54:AE:AB:46:89:08:37:7E:05:59:6B:F0:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/a26a7435-f5ab-3419-883b-022dc11c8580.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.crl

            X509v3 Authority Key Identifier:
                keyid:D5:18:DE:17:15:7D:9E:BA:F0:5E:D6:1B:20:AD:7D:CD:A3:98:45:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.247.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:54:79:af:25:cb:44:f8:64:24:78:49:a3:85:97:cc:e0:75:
         ed:a3:20:40:46:69:33:af:e7:e5:45:0e:e9:40:89:e6:38:e0:
         bc:36:ed:0c:c5:16:e0:0f:fe:84:30:97:a0:8d:59:00:60:86:
         b2:a3:1e:1d:de:86:c9:ba:31:e6:a9:4e:74:8e:70:dd:c2:bd:
         f1:d7:6b:25:31:32:e0:70:45:6d:3e:7a:e9:42:b8:6a:78:a7:
         11:de:3c:e8:a1:a8:05:c4:81:cf:f0:1c:48:99:90:fe:b8:67:
         27:d0:dd:2b:e1:fa:75:ac:d0:cc:00:87:1d:0a:65:16:65:28:
         ef:3e:a9:fc:4c:d7:79:1f:19:6d:6b:2e:f3:7a:a9:bd:2f:a5:
         6c:88:2a:99:b7:a2:b0:3a:5a:84:6c:aa:13:47:22:d7:55:88:
         53:20:8a:47:eb:5b:62:fd:ac:a6:df:1a:8a:00:28:01:a1:2e:
         91:23:fb:0e:d7:9e:1e:50:ee:8a:94:18:01:9a:5a:45:c2:f9:
         74:81:82:04:90:ec:8c:30:14:c7:38:03:0a:7f:3d:9f:06:6a:
         bb:36:2a:5f:06:b9:a2:be:13:52:b1:24:1a:b1:02:18:30:fa:
         77:c1:13:d8:77:ca:ec:2e:c8:19:b9:01:f8:88:93:e0:0a:62:
         9f:6d:6a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:51:04 2026 by rpki-client