Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/6f4a9ef0-fbfd-305c-9d22-76347bbc0a55.roa
File:                     6f4a9ef0-fbfd-305c-9d22-76347bbc0a55.roa (raw, json)
Hash identifier:          VHlKVPCLy0lHwklTNWRHJ8K1Pi4raHvDC6TYZ0dCHuE=
Subject key identifier:   D3:40:D5:E5:EA:9D:7F:FA:B9:FC:A3:6F:E9:18:1E:11:0E:86:62:8D
Certificate issuer:       /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
Certificate serial:       010D0C9F4328584E78FF7EF15461C4C4FBEB4A80
Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/6f4a9ef0-fbfd-305c-9d22-76347bbc0a55.roa
Signing time:             Sun 12 Jul 2026 09:00:11 +0000
ROA not before:           Sun 12 Jul 2026 09:00:11 +0000
ROA not after:            Sat 10 Oct 2026 09:00:11 +0000
asID:                     398210
IP address blocks:        168.220.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:78:ff:7e:f1:54:61:c4:c4:fb:eb:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
        Validity
            Not Before: Jul 12 09:00:11 2026 GMT
            Not After : Oct 10 09:00:11 2026 GMT
        Subject: CN=9ef248df-a98c-4543-88a1-f2c2dfe6c962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5d:9f:f2:43:bf:68:b0:02:5e:78:60:68:3a:
                    5f:1c:be:53:2b:8b:96:8e:69:3d:53:4c:18:12:34:
                    0b:a4:08:56:62:fc:ee:da:90:e7:9b:41:61:96:b8:
                    97:6c:63:60:30:d9:47:88:f4:58:b3:97:e8:6b:5a:
                    c2:b0:8d:c7:6e:cf:7d:92:ea:2b:23:b1:ea:42:b5:
                    24:67:c6:ec:e4:1c:f9:72:73:fd:2d:51:da:f4:d4:
                    5a:7d:1a:b3:42:c5:7b:50:07:64:af:16:2d:87:c9:
                    90:4f:39:99:a3:a5:ef:ba:42:d9:9b:84:a3:e1:46:
                    77:92:52:d4:46:98:ba:c5:eb:bf:68:5e:59:f6:95:
                    2b:1e:e4:9e:a5:d1:ec:98:2f:e7:f9:35:35:51:a7:
                    d8:73:14:81:dd:9a:17:eb:02:5c:43:06:19:16:d0:
                    2e:81:d4:b3:99:ef:87:78:e5:6f:cf:ef:01:5f:b4:
                    6f:86:34:cb:80:4e:07:09:9e:85:41:f5:f1:0e:5f:
                    fe:23:34:14:9c:d8:0e:c4:ff:05:a3:5f:87:22:5f:
                    61:1a:12:8f:ef:94:52:6a:df:33:04:9b:cb:02:c3:
                    7c:33:20:bb:c4:3e:d3:ac:dc:19:a8:52:b2:cd:ea:
                    ec:71:23:60:55:50:8e:ad:85:2c:22:be:eb:45:b0:
                    c8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:40:D5:E5:EA:9D:7F:FA:B9:FC:A3:6F:E9:18:1E:11:0E:86:62:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/6f4a9ef0-fbfd-305c-9d22-76347bbc0a55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl

            X509v3 Authority Key Identifier:
                keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.220.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:c6:94:cf:80:90:17:75:66:90:9d:6f:e4:0b:a6:1a:0d:13:
         37:34:02:65:c4:e0:82:1a:e7:0e:27:c8:23:49:f9:71:87:5f:
         89:63:48:99:12:2d:31:be:a8:9f:d3:db:8c:ba:0b:1d:ce:ed:
         19:6a:28:7e:5d:c0:38:20:9f:d6:9c:88:3a:a9:ad:f5:78:cf:
         b1:63:90:c1:eb:9e:59:0a:86:ab:74:72:be:fb:44:06:53:6b:
         0e:a3:58:94:4f:bf:06:ef:2f:94:21:f6:a9:74:69:bd:ba:01:
         f8:98:13:68:85:29:80:92:5c:8b:04:5d:c6:0a:f1:4b:70:8c:
         d3:a7:95:ba:3c:3c:ca:37:27:1b:10:46:b2:74:c6:5d:03:1a:
         37:0d:1c:08:92:6c:54:45:63:65:c8:62:0a:51:4a:39:ed:f0:
         7d:58:93:9b:9a:27:0c:ab:c6:e5:cc:a2:a1:aa:95:23:c4:5d:
         cc:d4:9a:79:91:61:ab:22:3e:57:37:23:f4:70:bc:bf:d4:d3:
         f3:e1:48:65:60:8f:e8:f0:4e:e0:b0:f6:8e:ad:53:a2:08:65:
         3f:d8:68:ca:fe:b9:60:a7:a9:88:14:d1:f8:4c:8d:78:0d:33:
         7b:90:4f:84:cc:54:9a:db:0d:b1:0e:32:e1:a4:05:26:5f:d7:
         f3:8f:5a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:17:09 2026 by rpki-client