Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/6e935ba7-eeed-3ba5-9a90-345c4292fbd5.roa
File:                     6e935ba7-eeed-3ba5-9a90-345c4292fbd5.roa (raw, json)
Hash identifier:          BHtd4jZZgMLZj+r8dSFSurbqTzjvsokOM2R0yVNfknw=
Subject key identifier:   6E:9C:47:8F:4C:A7:C6:32:D5:3A:73:80:B4:A4:C7:C3:AB:FC:6B:61
Certificate issuer:       /CN=109078e4-3ad5-4242-9f3e-058161c97a9f
Certificate serial:       010D0C9F4328584E66DA17302328922010E0D700
Authority key identifier: D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/6e935ba7-eeed-3ba5-9a90-345c4292fbd5.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     2572
IP address blocks:        150.199.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:17:30:23:28:92:20:10:e0:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=109078e4-3ad5-4242-9f3e-058161c97a9f
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=2e669563-6447-4a14-b4c5-47aeb0e2010a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:eb:a0:f1:c0:e9:95:94:7b:a1:b7:18:3d:e6:
                    3a:59:54:d7:9a:ec:39:25:c6:d4:57:be:e3:c3:c0:
                    47:17:a4:1b:a2:63:ed:02:b0:29:44:a6:54:37:85:
                    d2:94:1e:7c:6e:16:42:91:cb:39:d0:62:99:a4:3e:
                    fc:b1:c2:14:5b:56:43:d5:c5:81:a4:bf:45:aa:e9:
                    f0:0b:ce:f8:02:8c:df:a9:6c:7b:3a:0d:f4:96:c9:
                    ca:0d:e8:e3:39:73:48:4f:1c:f6:87:f7:d7:9a:be:
                    bb:14:29:cb:05:c9:a5:26:24:73:3f:b9:d3:10:9c:
                    12:40:b0:68:ed:56:32:8e:92:c0:ed:6e:cc:4f:bc:
                    53:27:9a:e1:2b:05:db:d7:39:78:6b:50:fa:03:ec:
                    49:2c:a7:59:b0:24:53:c5:96:74:dd:9f:c0:96:e6:
                    a6:e4:23:f1:d1:e3:8b:3a:2a:49:88:11:84:8d:d7:
                    c0:e4:95:8a:46:46:43:f2:82:12:b0:9d:0c:8e:24:
                    72:9e:79:5d:c5:da:fd:e3:aa:aa:1a:62:44:36:9f:
                    dc:b3:66:d5:2f:67:ae:69:c9:d5:c8:13:a9:e5:aa:
                    ed:c1:53:77:80:7f:46:e1:43:7e:65:1b:41:2c:60:
                    d7:c7:11:82:7c:16:08:c2:b6:75:22:25:cf:21:3b:
                    86:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:9C:47:8F:4C:A7:C6:32:D5:3A:73:80:B4:A4:C7:C3:AB:FC:6B:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/6e935ba7-eeed-3ba5-9a90-345c4292fbd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl

            X509v3 Authority Key Identifier:
                keyid:D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.199.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:61:c5:b9:c3:19:07:2d:e0:81:da:97:f2:01:dc:0b:5c:4e:
         f8:74:62:a8:ed:6e:cf:43:f1:28:58:0c:78:54:83:49:94:f1:
         e3:08:c2:e0:6a:38:c5:ba:6a:bc:15:0c:cd:a9:8c:17:36:2b:
         fc:a2:0d:35:b0:5b:15:48:d4:dd:83:09:81:a2:2d:4e:70:b0:
         d0:01:8a:75:9f:14:9c:f3:96:d7:f0:ba:d9:f2:2f:e6:e6:e0:
         f3:1f:ff:6d:1b:9e:a3:5a:91:90:e2:13:56:37:98:69:15:b7:
         85:ae:02:28:4e:2d:d1:c7:3e:c0:62:2f:48:6e:f9:00:2b:29:
         3d:e0:f3:8a:5b:cd:38:6d:d9:49:be:8f:69:1e:a6:a7:27:33:
         9b:c6:93:bb:52:fa:5d:b7:9f:cc:20:ae:a1:f2:5c:04:84:34:
         cb:c2:b5:f9:6d:c5:84:4b:6c:05:4c:a9:26:9b:e6:2f:dd:02:
         3a:2a:1a:35:27:08:14:73:72:7f:f3:1c:f0:31:ac:86:1e:0f:
         7b:84:c5:70:65:1b:4f:66:9e:1e:fd:4f:f4:55:4c:28:69:e9:
         0a:29:5c:e8:bc:a0:fe:4e:6b:50:c7:35:40:37:ca:6f:61:87:
         a3:97:8f:f5:7a:27:b9:3c:4c:65:0a:ea:0b:a6:eb:05:51:47:
         03:9d:8a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:26:39 2026 by rpki-client