Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/baf94aea-92c9-395f-bc80-e9f80301e654.roa
File:                     baf94aea-92c9-395f-bc80-e9f80301e654.roa (raw, json)
Hash identifier:          DiHO/s7K3NP4929OMaq+A+WJp1rO6T5DaX0u8wAxvjE=
Subject key identifier:   E7:FF:B5:E8:10:DA:43:FE:D5:7B:6A:5C:19:82:D7:46:1D:D2:DF:EE
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584F4974B811EBC29E4913040A00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/baf94aea-92c9-395f-bc80-e9f80301e654.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     0
IP address blocks:        174.134.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:b8:11:eb:c2:9e:49:13:04:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=cc95c768-91c2-4d84-9cc8-5eb1882913c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0b:a4:63:05:02:08:f8:46:5e:69:a2:23:ca:
                    45:86:14:d8:c6:1a:94:f7:b6:2d:20:97:c2:e2:b1:
                    9a:61:84:1e:3e:d8:63:13:8a:f8:e2:df:35:4e:7c:
                    85:55:0b:e0:b5:2d:b4:d0:df:74:bb:d1:11:98:6e:
                    84:32:ad:a6:b9:65:00:82:06:a6:60:a0:bf:ed:e2:
                    cd:34:a4:d7:80:9b:0e:be:f7:32:c0:c7:ad:a8:1b:
                    1c:ce:09:9a:fe:33:bf:ec:46:35:0b:ff:01:70:b3:
                    1a:c3:ee:dd:c4:3b:0f:f9:c0:23:dc:6a:8f:d5:44:
                    f3:35:12:83:8c:9e:94:49:53:36:44:d7:16:cf:b9:
                    48:97:05:20:e6:aa:22:71:bd:3b:ee:5f:f3:54:99:
                    d2:93:77:75:0d:2f:d1:93:ab:1e:b2:7f:4d:f2:8c:
                    94:b7:cd:5f:05:4d:ca:43:18:56:bc:48:87:af:38:
                    0a:a2:55:a7:f1:ec:79:3f:14:15:2a:57:4e:b9:7f:
                    3a:83:d2:34:28:8d:f9:1d:5f:36:36:da:fd:23:2c:
                    f5:5c:e6:d6:b1:98:ac:6e:75:9c:cd:9e:ce:04:00:
                    bc:6b:da:32:a1:66:ee:41:fa:d4:0d:ac:a0:92:b1:
                    0f:49:c2:96:2c:ec:d2:59:79:7d:20:b4:5d:b4:71:
                    f2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:FF:B5:E8:10:DA:43:FE:D5:7B:6A:5C:19:82:D7:46:1D:D2:DF:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/baf94aea-92c9-395f-bc80-e9f80301e654.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.134.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:75:8a:19:e3:b3:9e:45:e6:2a:34:6f:66:ed:5b:c6:95:42:
         8b:b9:b0:5a:6d:63:0e:54:e5:53:d2:88:4a:ec:cf:b5:7f:a7:
         6f:21:84:e2:52:57:79:d3:a9:63:3e:f0:37:6b:7c:64:3a:58:
         0d:4f:43:be:d1:65:76:18:98:c0:32:67:37:23:6d:2c:0a:f7:
         3a:bc:7f:b2:01:c9:b4:39:25:67:f0:cc:dc:43:ee:b9:1b:0e:
         02:74:a2:f3:07:5f:d2:07:c2:0d:41:16:cd:30:fd:df:c7:4b:
         3a:82:cd:d4:f4:3a:56:d1:a1:07:bc:aa:72:f1:f0:1a:bb:4c:
         79:0c:63:fd:c1:d5:21:a0:2d:11:37:6e:3e:d1:9c:82:f4:1b:
         94:2c:7e:b1:34:fa:5d:01:6a:7e:ad:79:69:39:05:26:2d:6e:
         e0:ce:36:c8:f9:25:62:9d:a6:4c:cf:45:f1:2a:72:c9:d3:7a:
         99:5e:be:e9:cb:c9:99:25:c9:0d:c1:64:86:0a:2a:29:b3:01:
         2c:ff:0a:95:67:94:44:fd:fa:2c:c5:e7:95:41:6e:3b:fc:d4:
         78:d5:9f:2d:3f:09:bf:12:e7:2f:9f:0b:fd:2e:c8:b3:c6:18:
         7d:7e:08:97:e4:48:ca:24:ff:de:03:3e:d1:e8:e2:7f:3f:2c:
         e9:6b:d9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 14:19:48 2026 by rpki-client