Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/7782e509-2ce3-4fce-a0bc-bc3254731869/7fb15705-69f8-3ada-855d-4224540666c5.roa
File:                     7fb15705-69f8-3ada-855d-4224540666c5.roa (raw, json)
Hash identifier:          LabqrD+/7YE8s0RzxrlJRwcjwc5g1lrve6tu3VubYuM=
Subject key identifier:   46:A3:56:5B:F9:3C:75:AD:49:2E:8D:D2:91:2D:CC:5B:6F:AC:29:A6
Certificate issuer:       /CN=7782e509-2ce3-4fce-a0bc-bc3254731869
Certificate serial:       010D0C9F4328584F35E7C170070C7B56A9AE8B80
Authority key identifier: D3:08:E4:F7:86:3C:DE:6F:9E:A7:E3:D3:12:EA:B2:B1:38:E9:C6:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/7782e509-2ce3-4fce-a0bc-bc3254731869.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/7782e509-2ce3-4fce-a0bc-bc3254731869/7fb15705-69f8-3ada-855d-4224540666c5.roa
Signing time:             Fri 18 Sep 2026 01:00:12 +0000
ROA not before:           Fri 18 Sep 2026 01:00:12 +0000
ROA not after:            Thu 17 Dec 2026 02:00:12 +0000
asID:                     23387
IP address blocks:        168.150.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/7782e509-2ce3-4fce-a0bc-bc3254731869/7782e509-2ce3-4fce-a0bc-bc3254731869.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/7782e509-2ce3-4fce-a0bc-bc3254731869/7782e509-2ce3-4fce-a0bc-bc3254731869.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/7782e509-2ce3-4fce-a0bc-bc3254731869.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:35:e7:c1:70:07:0c:7b:56:a9:ae:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7782e509-2ce3-4fce-a0bc-bc3254731869
        Validity
            Not Before: Sep 18 01:00:12 2026 GMT
            Not After : Dec 17 02:00:12 2026 GMT
        Subject: CN=a0bfbc01-7f70-4345-945d-a88aecbcbe0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c5:ca:36:6d:3b:e3:c6:d4:d4:5f:7c:d4:21:
                    f0:87:5d:dd:40:ae:43:98:bd:b9:64:58:1d:42:03:
                    e4:58:c8:55:5b:e2:52:09:84:ca:44:68:86:a0:34:
                    ff:be:1f:d2:26:c7:9a:33:db:3f:16:cd:c5:ee:e7:
                    5e:70:46:8f:0c:cb:02:2e:73:a0:21:57:33:26:cf:
                    74:b4:6d:d3:bc:29:5e:d6:d5:84:ef:1e:46:59:85:
                    8a:e1:19:5b:ff:f8:8b:3e:e2:10:77:54:7c:51:51:
                    f3:81:bf:f8:68:38:86:24:62:c1:8c:d2:98:8a:e5:
                    b2:ec:cd:7a:ba:9b:d9:0b:3c:98:54:ba:f6:ae:bf:
                    c0:30:e7:77:8e:2c:02:05:4d:51:10:2c:6a:04:24:
                    be:ae:75:33:96:e6:eb:1b:f1:d6:92:fd:2d:e4:46:
                    6e:89:13:72:55:83:14:6e:21:1a:31:6e:32:75:d5:
                    e9:85:5e:28:9f:52:4d:4e:af:65:df:75:b8:6c:6b:
                    93:c2:44:7e:c9:91:26:f7:b2:46:df:dc:ee:42:2b:
                    cc:04:6b:8e:f9:e7:d7:ba:8c:cc:82:22:10:62:15:
                    50:26:6c:8b:ad:f3:ef:f7:ba:eb:19:cd:19:b2:36:
                    09:36:7e:30:46:1c:9f:d4:a6:17:2c:58:78:37:96:
                    17:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A3:56:5B:F9:3C:75:AD:49:2E:8D:D2:91:2D:CC:5B:6F:AC:29:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/7782e509-2ce3-4fce-a0bc-bc3254731869/7fb15705-69f8-3ada-855d-4224540666c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/7782e509-2ce3-4fce-a0bc-bc3254731869/7782e509-2ce3-4fce-a0bc-bc3254731869.crl

            X509v3 Authority Key Identifier:
                keyid:D3:08:E4:F7:86:3C:DE:6F:9E:A7:E3:D3:12:EA:B2:B1:38:E9:C6:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/7782e509-2ce3-4fce-a0bc-bc3254731869.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.150.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:d2:eb:0d:81:9e:87:0b:cb:98:f1:70:a3:7d:00:ee:79:ee:
         60:74:8b:45:d8:77:15:16:ca:59:38:66:9f:2b:b0:51:ab:59:
         0d:27:7c:d9:dc:97:87:5c:cc:0d:24:84:3e:a1:ab:f1:2d:6e:
         7c:1e:08:e6:bf:6f:94:aa:e1:86:f5:45:d4:02:0f:c7:e8:f3:
         ef:13:5f:77:d7:bd:65:43:c7:eb:1d:cc:19:f4:6e:63:90:53:
         bc:3a:ef:6b:85:2c:48:31:81:73:43:e8:55:75:f0:5b:3b:89:
         04:51:2b:99:74:5c:f8:17:ae:a7:9a:b1:ef:d3:30:a3:2f:25:
         c4:86:c8:ea:b5:6f:4f:d0:72:35:1a:05:dc:d8:a1:6e:c1:2d:
         26:a0:50:b5:3b:59:6c:b9:3d:6b:69:12:c6:8a:15:55:09:6d:
         78:e2:30:46:b6:62:ea:37:18:b3:82:20:65:85:92:6c:2a:6c:
         96:59:78:d3:d3:43:e9:b3:8c:5b:ad:43:c2:1e:41:99:99:da:
         5f:ce:e7:e1:a7:ef:b9:52:0a:94:47:c9:bc:c9:d6:0e:61:ea:
         5b:01:d2:e0:c8:08:03:4f:e3:49:0c:fa:11:35:4c:0e:6e:a3:
         72:e4:b2:da:b2:78:51:b2:57:05:1c:71:c6:9e:fd:55:f5:60:
         bd:9f:10:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 02:17:15 2026 by rpki-client