Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f256b305-bb18-47c3-982a-4fb37a2ffd22/4f6fbac7-f24b-3c48-9a4f-016bbb2ec088.roa
File:                     4f6fbac7-f24b-3c48-9a4f-016bbb2ec088.roa (raw, json)
Hash identifier:          Iyi2X0f4yaDKa3b6JIU6BhzNnuKxK1xlAlOUXNK3eRo=
Subject key identifier:   30:6E:7B:18:F0:DB:2A:57:1D:5D:20:97:84:D9:86:FA:A8:2F:CD:07
Certificate issuer:       /CN=f256b305-bb18-47c3-982a-4fb37a2ffd22
Certificate serial:       010D0C9F4328584F348264AEC503E15A492B46E0
Authority key identifier: 24:11:43:F4:2D:14:08:87:EB:27:6F:45:DD:E2:8B:D6:D1:E1:F8:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f256b305-bb18-47c3-982a-4fb37a2ffd22.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f256b305-bb18-47c3-982a-4fb37a2ffd22/4f6fbac7-f24b-3c48-9a4f-016bbb2ec088.roa
Signing time:             Thu 17 Sep 2026 13:00:12 +0000
ROA not before:           Thu 17 Sep 2026 13:00:12 +0000
ROA not after:            Wed 16 Dec 2026 14:00:12 +0000
asID:                     400366
IP address blocks:        204.128.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f256b305-bb18-47c3-982a-4fb37a2ffd22/f256b305-bb18-47c3-982a-4fb37a2ffd22.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f256b305-bb18-47c3-982a-4fb37a2ffd22/f256b305-bb18-47c3-982a-4fb37a2ffd22.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f256b305-bb18-47c3-982a-4fb37a2ffd22.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:34:82:64:ae:c5:03:e1:5a:49:2b:46:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f256b305-bb18-47c3-982a-4fb37a2ffd22
        Validity
            Not Before: Sep 17 13:00:12 2026 GMT
            Not After : Dec 16 14:00:12 2026 GMT
        Subject: CN=c50ebe01-ed21-4caa-851d-20a429e27f02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:eb:e5:41:aa:ed:8f:1b:6e:bd:a6:26:bb:2a:
                    c2:c8:cd:c0:6b:95:9a:bb:13:5f:89:b1:1b:40:f4:
                    bf:3c:03:95:23:cd:69:34:9f:d1:7e:b8:cf:af:c9:
                    26:42:66:43:9c:43:bb:f0:4c:78:40:e4:10:62:54:
                    46:0a:8a:7b:68:cb:96:7b:da:cc:a7:90:66:9b:ce:
                    cb:d4:ef:ed:6e:1c:40:cc:8e:ac:1e:c3:4d:d0:89:
                    c7:c0:24:f5:e2:92:7e:a7:a8:9c:6d:39:1a:34:e4:
                    f6:b8:6c:40:0a:a4:c8:ff:50:7b:42:e7:71:a1:b9:
                    93:e0:be:a1:88:30:d4:bf:84:13:8c:73:dd:06:70:
                    50:20:43:9a:87:45:40:51:40:c1:2c:da:7b:00:63:
                    2e:e2:f4:9b:3e:f8:a0:fb:42:8c:75:68:ba:ac:7c:
                    c1:63:09:75:f4:ab:c6:03:f9:ef:fc:4b:0b:1f:e5:
                    25:2d:38:b1:6e:08:df:19:09:35:73:fb:6d:fc:77:
                    8b:e3:ae:6a:23:8e:e9:3c:18:a4:b2:0f:7a:89:c5:
                    54:5b:e5:f4:23:7c:f9:cd:8c:41:22:9c:68:44:e4:
                    75:a0:ed:f9:41:31:a8:11:a5:37:c9:71:86:9b:00:
                    33:27:48:76:9c:b9:ee:6a:69:14:41:8a:6d:68:dd:
                    96:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:6E:7B:18:F0:DB:2A:57:1D:5D:20:97:84:D9:86:FA:A8:2F:CD:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f256b305-bb18-47c3-982a-4fb37a2ffd22/4f6fbac7-f24b-3c48-9a4f-016bbb2ec088.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f256b305-bb18-47c3-982a-4fb37a2ffd22/f256b305-bb18-47c3-982a-4fb37a2ffd22.crl

            X509v3 Authority Key Identifier:
                keyid:24:11:43:F4:2D:14:08:87:EB:27:6F:45:DD:E2:8B:D6:D1:E1:F8:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f256b305-bb18-47c3-982a-4fb37a2ffd22.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.128.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:b2:7e:b2:2c:45:6c:53:f5:e0:49:9d:9b:5b:c2:3d:af:a1:
         08:56:1b:e2:c4:12:10:ab:0d:84:81:28:b4:0b:b2:67:d7:c8:
         ca:ee:bd:1a:3b:a2:8a:7a:e0:4b:d6:3f:64:0d:eb:e5:17:f7:
         78:01:75:d7:63:b6:bb:30:01:67:db:85:dc:7a:ae:bb:5b:e2:
         a9:c4:7f:1f:99:47:2c:d2:b2:d2:86:ad:a5:5f:64:fb:dc:cf:
         0b:29:a3:a8:9a:93:d2:dc:1d:4c:60:d9:69:b2:11:9d:c1:dd:
         3d:87:cc:55:ff:67:60:9e:a4:c5:8f:b4:de:02:07:c1:a0:1b:
         3f:9b:34:64:f3:27:2b:fe:ab:e8:46:1e:14:b0:8d:0a:23:dd:
         3f:62:4d:ee:5d:7b:0c:5e:27:a6:2f:a0:42:3b:33:a1:13:2f:
         ae:6f:31:19:84:fd:ff:ff:44:6b:e6:6f:77:0c:86:ed:e3:fe:
         7b:ac:ee:71:6f:8f:9d:b3:20:2f:0a:37:4d:98:20:20:77:55:
         78:c3:84:97:9c:7b:a8:6d:ca:71:82:be:48:d4:6e:9d:0b:92:
         52:bc:b3:c6:4d:be:00:3a:b7:c6:b1:d0:13:d1:c9:d8:72:f9:
         d1:6d:00:b5:59:d9:c9:6d:26:68:59:52:ab:3c:1a:71:57:8d:
         dd:ee:cf:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 16:39:45 2026 by rpki-client