Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/6325d7a8-a615-30d9-a093-46fd0a655e13.roa
File:                     6325d7a8-a615-30d9-a093-46fd0a655e13.roa (raw, json)
Hash identifier:          DcKgPO1I0ZwgxHLM6bXBRL2X5e3PslPK3GnhZxHnJvU=
Subject key identifier:   C9:F6:CA:9A:D9:FA:52:A4:4E:E2:D0:16:1D:11:DB:D8:10:53:F3:E2
Certificate issuer:       /CN=bc6884d6-b11e-4280-9c4c-8177287d9869
Certificate serial:       010D0C9F4328584E885A3AC96F99DBF62CA1CE80
Authority key identifier: 15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/6325d7a8-a615-30d9-a093-46fd0a655e13.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     398705
IP address blocks:        167.94.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:3a:c9:6f:99:db:f6:2c:a1:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc6884d6-b11e-4280-9c4c-8177287d9869
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=c7cc329d-7062-49f5-9ca6-dfb5f461262d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ab:06:04:b6:ad:4a:e1:88:90:fb:49:08:6e:
                    7a:0f:b6:d7:be:13:e4:65:42:30:30:b7:19:88:16:
                    5c:52:68:c0:f4:95:4b:5e:d3:bd:06:eb:21:8c:c2:
                    5d:d4:6b:69:7a:7f:a1:2c:ae:0d:48:f2:f0:c8:0c:
                    5d:8b:c5:be:98:97:0f:d9:89:4f:87:52:ba:1c:45:
                    94:b8:66:bc:dc:5b:61:90:35:c5:17:ab:65:a2:52:
                    6f:e6:ee:72:5e:e3:db:32:4f:aa:59:5e:75:37:08:
                    23:3b:92:a0:d2:51:f8:0f:a0:20:3b:28:b8:9b:83:
                    29:f8:4f:94:0c:2d:14:b2:f0:54:e9:c1:4e:4d:fc:
                    a6:cc:36:aa:a4:26:ff:d5:df:0a:45:9f:87:47:c3:
                    5a:2f:cb:a5:f2:eb:d7:9a:5d:a6:cd:86:e2:19:54:
                    83:d3:28:b3:03:83:c5:be:1a:c9:f6:45:9f:e5:8d:
                    98:8b:b5:cf:ab:33:57:52:6d:da:61:5e:5f:bf:7d:
                    c5:1f:78:4e:3d:1e:4d:61:26:ff:12:2b:7b:3f:7f:
                    b9:bd:90:34:78:82:32:8a:fe:3e:49:a2:d2:26:d6:
                    40:4d:63:b8:45:24:54:8e:b7:9a:c6:6c:be:db:7c:
                    24:3b:5c:81:c1:a7:f0:50:d9:33:43:50:cc:e1:87:
                    c7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F6:CA:9A:D9:FA:52:A4:4E:E2:D0:16:1D:11:DB:D8:10:53:F3:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/6325d7a8-a615-30d9-a093-46fd0a655e13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl

            X509v3 Authority Key Identifier:
                keyid:15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.94.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:ba:3a:29:09:9c:7f:84:ee:52:e4:62:f3:4c:97:3a:83:d6:
         2c:2e:61:97:c6:d1:39:fc:4c:69:ba:a1:5a:eb:e2:64:0e:0a:
         99:98:ac:1c:7e:06:4c:cb:55:81:06:bf:25:90:63:d1:93:e5:
         ea:b4:3b:98:3c:23:df:79:81:96:b9:e8:7e:76:6c:e7:ba:6f:
         2a:a5:ec:1d:0f:89:71:fa:0a:6e:27:a9:4c:0a:a2:8b:49:78:
         4e:8a:ba:cb:03:ae:61:1b:41:94:fd:9c:32:e0:39:77:aa:18:
         12:63:65:69:25:a5:c9:63:66:c8:84:1b:c0:b4:38:e1:33:14:
         9f:a4:b6:50:9c:9a:5a:28:cd:32:a9:2c:5b:ab:3e:c8:e5:dd:
         7a:7d:9e:4c:8a:ff:29:b5:75:c3:35:f5:fe:96:1e:98:4d:92:
         c6:f6:2b:f0:c1:61:73:59:5d:83:57:51:c0:ed:b8:42:82:6c:
         0a:dc:19:38:91:88:50:3c:ee:39:10:27:e4:23:34:8e:04:0d:
         9f:77:67:96:5a:85:a3:7f:0d:47:11:59:3e:96:44:87:6c:cf:
         a4:34:05:e6:ef:89:b4:14:33:ff:f5:57:e8:a0:89:08:56:56:
         ec:68:8c:08:7a:42:da:3a:6b:9e:5b:c0:d9:0f:97:7d:17:37:
         01:85:f1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:52:22 2026 by rpki-client