Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f256b305-bb18-47c3-982a-4fb37a2ffd22/4f6fbac7-f24b-3c48-9a4f-016bbb2ec088.roa
File:                     4f6fbac7-f24b-3c48-9a4f-016bbb2ec088.roa (raw, json)
Hash identifier:          Uf7j5C9VeE7/hz9ZskKg9gwG/EbpuKuS0Pt9Gv8mgvQ=
Subject key identifier:   62:52:20:20:FB:8C:96:56:9F:7B:AB:52:82:D2:DB:40:82:C9:FE:1B
Certificate issuer:       /CN=f256b305-bb18-47c3-982a-4fb37a2ffd22
Certificate serial:       010D0C9F4328584E9176780F0DCFFCF3EE1A5800
Authority key identifier: 24:11:43:F4:2D:14:08:87:EB:27:6F:45:DD:E2:8B:D6:D1:E1:F8:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f256b305-bb18-47c3-982a-4fb37a2ffd22.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f256b305-bb18-47c3-982a-4fb37a2ffd22/4f6fbac7-f24b-3c48-9a4f-016bbb2ec088.roa
Signing time:             Tue 21 Jul 2026 03:19:25 +0000
ROA not before:           Tue 21 Jul 2026 03:19:25 +0000
ROA not after:            Mon 19 Oct 2026 03:19:25 +0000
asID:                     400366
IP address blocks:        204.128.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f256b305-bb18-47c3-982a-4fb37a2ffd22/f256b305-bb18-47c3-982a-4fb37a2ffd22.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f256b305-bb18-47c3-982a-4fb37a2ffd22/f256b305-bb18-47c3-982a-4fb37a2ffd22.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f256b305-bb18-47c3-982a-4fb37a2ffd22.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:91:76:78:0f:0d:cf:fc:f3:ee:1a:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f256b305-bb18-47c3-982a-4fb37a2ffd22
        Validity
            Not Before: Jul 21 03:19:25 2026 GMT
            Not After : Oct 19 03:19:25 2026 GMT
        Subject: CN=14b85c0b-a9a2-474c-b08d-90721abc225b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ec:c7:84:3d:7a:99:be:58:68:f3:fd:c0:ef:
                    1f:2e:e2:6c:05:e3:c5:f6:0a:e8:5e:0f:72:74:6e:
                    77:0e:e8:d2:18:c1:04:b2:1a:e5:5c:b7:08:f2:61:
                    61:ad:6e:73:d8:bd:07:fb:e3:31:10:5d:39:c3:03:
                    bd:9c:55:e2:22:64:45:72:4c:ee:14:a1:24:ad:bb:
                    da:44:64:7e:e7:42:d8:5d:d2:88:93:4b:e1:b4:c5:
                    ca:c0:9c:8a:d7:c1:ed:13:61:4e:5e:5e:41:30:b2:
                    eb:ae:9a:61:01:2e:c5:13:dd:da:fa:f4:38:f8:ed:
                    52:84:41:c1:29:9e:2c:fa:47:6d:7a:05:a8:35:ec:
                    b3:68:ac:34:9e:68:96:70:41:de:43:6d:f9:24:1f:
                    cb:29:44:53:39:a7:fd:98:03:05:64:bc:98:a1:ed:
                    cb:3d:c9:0d:2f:2b:34:38:29:27:b1:d9:01:13:fa:
                    52:09:29:3b:a6:8b:d1:70:48:ad:bd:de:23:27:ed:
                    0a:f1:a4:46:58:60:f1:3d:9b:48:84:44:d1:7e:c1:
                    d6:35:7c:e2:d8:22:a5:93:e6:4e:bf:14:64:5a:f4:
                    75:7c:29:e9:25:c1:d8:37:47:ac:81:ca:c1:85:d1:
                    95:13:47:3b:07:76:75:86:e8:16:28:7e:96:89:db:
                    de:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:52:20:20:FB:8C:96:56:9F:7B:AB:52:82:D2:DB:40:82:C9:FE:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f256b305-bb18-47c3-982a-4fb37a2ffd22/4f6fbac7-f24b-3c48-9a4f-016bbb2ec088.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f256b305-bb18-47c3-982a-4fb37a2ffd22/f256b305-bb18-47c3-982a-4fb37a2ffd22.crl

            X509v3 Authority Key Identifier:
                keyid:24:11:43:F4:2D:14:08:87:EB:27:6F:45:DD:E2:8B:D6:D1:E1:F8:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f256b305-bb18-47c3-982a-4fb37a2ffd22.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.128.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:ad:d0:4c:5e:2b:cc:7e:b4:71:66:4e:10:cc:de:e2:1a:ee:
         2c:df:9f:1c:ea:e0:df:45:20:eb:73:52:54:6d:f4:b6:65:22:
         93:18:02:cf:eb:07:02:ce:18:60:01:cd:2a:ac:aa:4f:92:a3:
         27:69:91:5c:10:f0:ed:77:a5:54:32:10:3c:5e:b1:70:66:64:
         ce:9a:ee:5b:98:f1:e8:91:22:25:f4:3f:eb:46:74:ec:35:25:
         ba:a7:1d:71:b7:ba:fe:46:a0:59:32:3b:ad:8c:c7:8e:76:d5:
         4a:65:f6:b5:ee:2e:3e:1b:d2:07:17:4d:20:14:82:64:81:de:
         35:23:47:c0:b9:48:b3:1c:89:26:12:b8:38:e5:e4:57:aa:26:
         d7:e2:f2:27:ca:77:61:78:1e:29:f8:7d:39:3c:a6:ef:70:e3:
         12:61:7e:0b:80:94:71:85:be:fb:e9:9a:6a:1d:6c:78:1b:ab:
         54:f7:46:c8:f5:42:56:1a:76:cd:34:3a:78:d5:1b:1d:d9:8f:
         d2:46:ae:ec:45:d2:10:9b:3e:5f:4a:39:eb:c7:89:60:95:7e:
         02:90:d1:f7:72:f9:08:30:a1:8a:d8:11:ab:a2:f3:24:3c:30:
         16:ec:d1:9b:bf:e8:57:d0:a8:51:15:0b:22:24:8b:02:c6:30:
         66:67:0f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:56:30 2026 by rpki-client