Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/7cf648ea-5883-37ed-91f7-e62410a00147.roa
File:                     7cf648ea-5883-37ed-91f7-e62410a00147.roa (raw, json)
Hash identifier:          HZhTV3LybalQyk35ArYzz7At/GN2TsrIJmw5CQAvwEk=
Subject key identifier:   A6:A6:F0:78:CD:83:5C:E6:C9:BE:E8:A4:E6:22:29:2E:65:9C:71:2F
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F4328584F49755A24BE6F9C3212685F00
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/7cf648ea-5883-37ed-91f7-e62410a00147.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     33059
IP address blocks:        137.239.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:5a:24:be:6f:9c:32:12:68:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=afa24359-74eb-408a-89ff-57101d6343cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f5:a7:d5:a7:e9:89:7f:ac:2c:a1:d6:57:9b:
                    1d:c0:f9:0a:d6:be:94:a8:56:50:6e:2f:53:7f:1b:
                    c8:f9:08:cf:3a:3d:68:3a:08:b2:0b:74:27:89:85:
                    bb:d7:e7:f1:af:58:a1:0c:cd:ff:23:15:2e:7e:27:
                    6f:4f:51:4f:44:58:49:ab:40:0e:f5:1b:c2:a5:28:
                    6e:9a:2a:65:db:30:d3:97:14:a4:9a:70:11:10:e5:
                    48:b8:05:5f:37:a3:d9:b8:5d:e5:2b:5a:3e:6b:e5:
                    83:34:b8:d4:3e:33:54:e9:fd:64:07:15:af:ec:b8:
                    2a:dc:8b:6e:11:5e:43:9d:54:1c:e6:83:d7:01:71:
                    5b:db:1a:15:8b:2b:24:8a:c9:bd:88:32:4e:33:2f:
                    f8:a4:29:c9:17:32:5e:b8:5f:c2:07:0c:fe:37:00:
                    82:b3:d6:92:38:0c:26:53:8f:34:45:c3:a3:8a:56:
                    89:c5:32:f2:fb:43:62:fe:67:2d:e1:4d:b1:7e:56:
                    b3:1d:a1:dd:58:24:41:9c:2f:d4:d7:69:da:a0:43:
                    03:6c:24:18:72:53:64:1b:d1:57:de:d7:2a:5d:c8:
                    8e:4a:6e:4c:45:ce:ec:57:02:2f:02:88:01:0c:25:
                    4b:ad:32:0f:74:0d:ce:ca:ea:dd:58:16:78:c5:3e:
                    f5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A6:F0:78:CD:83:5C:E6:C9:BE:E8:A4:E6:22:29:2E:65:9C:71:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/7cf648ea-5883-37ed-91f7-e62410a00147.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.239.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:32:35:d5:51:9c:62:9d:2c:dd:1c:a2:c5:32:b0:62:4a:45:
         41:4b:15:bd:92:08:f2:d9:41:84:05:02:53:f6:e6:25:6f:f1:
         f9:9d:a8:f1:5d:31:b9:ba:46:95:ec:bf:a1:c1:2e:14:44:e5:
         eb:38:7f:6a:17:1f:13:9c:a4:f9:b4:c2:25:5a:fe:65:f3:9e:
         55:f1:49:2d:4f:0a:b5:a3:50:24:52:ba:8d:8b:b8:0d:0d:3e:
         0f:d9:b1:a3:00:78:31:a3:76:1f:07:fc:41:58:66:f7:90:d6:
         87:c2:48:1b:7d:0a:a0:4e:bd:26:e0:73:3c:59:be:a3:00:d0:
         07:55:27:71:b0:ff:db:34:3a:5f:f5:14:af:bd:fd:54:7b:ea:
         e9:6b:81:51:a5:69:22:7d:30:ef:0e:0f:63:6c:42:2e:c0:a7:
         31:aa:16:92:6c:8a:ee:b9:61:fd:a5:fd:0e:fd:e1:7c:b6:4a:
         16:0c:c8:c7:77:c2:89:a4:02:62:5a:84:e1:5a:3d:99:11:75:
         d9:23:48:64:16:fb:e6:4e:c4:fa:7c:37:4b:27:85:0c:0e:1a:
         9e:fd:c8:98:9d:5e:89:dd:71:27:71:22:ee:14:47:70:2a:d8:
         b4:df:62:37:dc:2d:18:e3:46:46:51:4e:73:d6:29:64:83:63:
         68:61:d9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:48:36 2026 by rpki-client