Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/04150e6b-fb3c-3afe-8de2-1a2d7b44dc7a.roa
File:                     04150e6b-fb3c-3afe-8de2-1a2d7b44dc7a.roa (raw, json)
Hash identifier:          HjYExhwHAJ9TY5Pgzb8sEjFnxy9mMl97KxrooWQqgXY=
Subject key identifier:   D6:E2:A5:71:9D:8C:43:D8:D6:E2:45:B4:B9:93:CB:E3:24:1E:51:51
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584F4973C8E056B143501D752C10
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/04150e6b-fb3c-3afe-8de2-1a2d7b44dc7a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     852
IP address blocks:        207.102.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:c8:e0:56:b1:43:50:1d:75:2c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d6202c0f-aff8-4566-9d7c-c04f63777c9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:25:82:d6:db:65:65:22:1e:e2:11:76:8c:f9:
                    07:9b:7c:c9:3e:27:26:a5:3d:21:2d:8a:ca:aa:59:
                    e6:82:fb:ae:ba:82:fd:1b:23:4b:be:9c:ee:34:1e:
                    e8:2c:9c:ce:16:ee:03:1f:f6:f4:6f:66:0b:8b:bf:
                    15:8e:f0:5e:fe:a7:6a:5e:14:e4:43:be:f4:79:6a:
                    68:cf:4a:2e:e3:be:75:0b:c9:72:0f:d9:52:15:21:
                    ee:c4:b0:8a:79:7b:19:1f:b8:b8:52:e3:68:ac:a4:
                    8f:d1:16:e2:d1:46:51:2c:0d:7b:ac:01:74:08:c5:
                    82:63:8a:38:7f:63:b3:24:3e:b2:d0:6a:18:29:4f:
                    3d:67:54:ee:d8:68:07:19:e2:3f:6c:25:65:45:6b:
                    3a:0c:60:6d:58:02:90:b5:f1:a9:28:36:fa:56:50:
                    ae:f3:a7:f4:df:a9:12:90:48:73:8a:44:fe:66:3e:
                    30:56:91:d2:a4:bd:4e:64:51:9a:23:d5:ef:71:94:
                    2c:68:70:51:c8:90:ed:d0:64:34:f9:09:05:9d:f4:
                    50:2d:8f:b9:c6:12:0b:c6:0d:c8:f0:f7:1a:a9:3a:
                    80:a4:52:0a:46:83:45:d9:4f:06:43:3b:c7:c5:d6:
                    85:df:93:70:dd:9e:5f:db:78:33:0a:ce:d9:ff:04:
                    20:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:E2:A5:71:9D:8C:43:D8:D6:E2:45:B4:B9:93:CB:E3:24:1E:51:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/04150e6b-fb3c-3afe-8de2-1a2d7b44dc7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.102.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         f3:24:2a:35:7f:0f:69:a7:96:5a:59:70:1e:be:b3:eb:2b:50:
         2a:af:27:63:53:3f:1a:ae:2d:67:44:dc:a5:9a:a4:d0:35:2c:
         e1:00:94:a0:15:b0:04:42:ec:54:23:f3:31:29:39:84:ee:ad:
         19:ce:a4:1b:04:20:bf:c7:10:25:e2:39:43:db:93:02:db:0e:
         06:6f:71:54:6b:1b:41:56:49:4b:9f:ce:4a:98:78:d1:d0:72:
         0b:70:b6:1b:1b:12:57:dc:ba:5e:a6:69:31:21:62:38:54:d8:
         8f:b2:ce:cc:ef:eb:7c:c9:fc:c1:64:2f:87:2e:84:be:d1:d3:
         81:ab:12:71:c2:bb:9b:80:80:59:1e:9d:f1:3c:db:ad:03:71:
         d6:9f:a8:ba:62:41:72:df:20:a7:bd:82:ba:4f:35:38:53:07:
         78:a0:bb:98:79:fa:25:3c:0b:3b:14:02:a0:c9:7a:b1:a8:6c:
         ce:91:70:7b:7d:89:16:46:de:20:8e:fb:8f:f7:97:95:cd:c5:
         f2:94:a9:85:c9:a4:7d:d7:d0:82:06:67:ea:8c:ac:a1:c2:bf:
         84:94:d6:1c:02:d9:6f:53:1f:be:dd:d4:a9:58:5a:df:04:c7:
         1b:2a:72:2c:77:1d:07:4f:c3:f0:7a:ab:57:e3:0a:83:24:a8:
         4e:b9:dc:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:20:26 2026 by rpki-client