Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/5da6571c-8d1d-38ad-aa8a-3330e67f4cfd.roa
File:                     5da6571c-8d1d-38ad-aa8a-3330e67f4cfd.roa (raw, json)
Hash identifier:          82hmuVB6m+Sk5RzK8TZEgTI4MBP1wrhQC3BmjEfFAw4=
Subject key identifier:   F5:AD:35:DA:01:89:E7:79:78:6B:F9:E9:A1:2B:AF:0E:59:9A:4B:1F
Certificate issuer:       /CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
Certificate serial:       010D0C9F4328584E94EA5E26C04C0C7F1E563300
Authority key identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/5da6571c-8d1d-38ad-aa8a-3330e67f4cfd.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     48254
IP address blocks:        206.130.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:5e:26:c0:4c:0c:7f:1e:56:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=1d214cbf-5524-4b7a-8a42-3541eb8d4d9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e9:0e:e2:c7:a9:6c:0c:1c:0a:e6:24:0c:17:
                    83:36:87:21:3d:25:94:32:05:06:a9:c3:9b:d0:05:
                    6b:97:27:bc:7c:3a:d1:cd:b7:f5:d7:c9:23:34:9a:
                    47:6c:89:f1:40:d2:df:1a:64:67:f6:c2:4e:6d:11:
                    bd:e6:43:ba:5f:fa:8b:9d:6c:f4:3d:99:4a:bb:40:
                    d1:a2:42:6c:5a:0c:f2:94:d7:ef:af:34:b3:65:a9:
                    bd:8e:22:f4:1c:ab:b7:94:9e:b1:1d:5b:96:a0:22:
                    56:0a:cb:f1:19:f7:e2:cc:94:72:bf:12:cf:d4:f3:
                    65:ea:8c:89:f2:75:64:4e:f3:d5:84:13:94:02:07:
                    33:fd:86:8c:cb:d6:67:94:1a:df:3f:9b:27:b7:ff:
                    d2:6a:46:75:c7:7f:e5:92:e4:8f:07:df:bf:68:43:
                    16:e8:bd:ea:0b:16:64:bb:40:36:3b:eb:cc:a2:5b:
                    14:7e:fc:ef:f9:90:de:84:9f:d7:49:c8:23:c3:ed:
                    9c:12:1d:0b:a1:8f:60:6b:9b:4d:de:2d:21:a3:ee:
                    e6:71:fa:03:44:f3:67:be:ce:68:1b:c2:57:a4:1d:
                    93:52:56:74:e4:64:d9:49:ff:a8:fa:7d:c4:e6:d0:
                    d7:82:f3:02:37:5a:06:40:7c:67:c1:e5:34:99:a3:
                    9e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:AD:35:DA:01:89:E7:79:78:6B:F9:E9:A1:2B:AF:0E:59:9A:4B:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/5da6571c-8d1d-38ad-aa8a-3330e67f4cfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl

            X509v3 Authority Key Identifier:
                keyid:D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.130.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:2e:e2:4c:07:e5:95:61:b2:a2:72:c9:9c:4a:12:f5:50:63:
         5b:c3:f2:81:7e:e2:87:53:d9:46:13:78:cf:a8:48:96:98:02:
         0a:2c:89:02:5d:41:75:eb:16:a6:f8:99:d1:e1:12:01:15:65:
         be:21:08:30:13:2f:2f:42:74:37:63:cb:43:14:55:1f:6c:88:
         6b:4c:15:56:b4:15:d8:ab:ac:b3:50:b7:d0:45:ae:aa:d7:3c:
         c9:c0:99:c7:df:a4:d2:b9:f0:c7:4d:c4:73:23:26:77:6f:e5:
         e0:80:6d:c4:e3:eb:43:0c:49:4c:1d:ca:f0:20:03:cb:14:a9:
         bf:5a:10:71:4f:a9:5d:f8:01:2e:e8:af:9c:78:62:da:91:02:
         12:75:0e:8d:21:9d:7f:07:04:19:7a:08:8d:44:c3:b1:db:c5:
         f2:6e:6a:20:a6:0c:a0:db:2f:65:b2:d3:ba:49:08:51:0d:09:
         a1:2e:8d:a0:0f:bc:13:7e:64:cd:45:bc:b4:b9:39:0a:66:e9:
         9a:a5:25:05:7b:18:ab:f7:7c:9f:51:9e:e6:e5:b7:6c:4b:50:
         fe:1d:0a:f2:cc:c7:e2:7c:49:59:de:6d:e6:f3:1e:5e:0e:e3:
         f1:e8:79:7b:99:a9:70:e1:cf:8a:58:fa:20:7a:eb:37:3b:72:
         6c:0d:c7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:49:57 2026 by rpki-client