Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/8cf64f11-8acd-37b0-b43f-7968ae8c9cca.roa
File:                     8cf64f11-8acd-37b0-b43f-7968ae8c9cca.roa (raw, json)
Hash identifier:          5DvCb7h+vtI3q+JeluIJJSiO+xwKd/glfttakV3DdxA=
Subject key identifier:   06:BF:B2:65:9C:B2:19:2B:0D:8A:81:E6:38:FD:35:79:69:FE:81:68
Certificate issuer:       /CN=14618cc8-9232-4da8-8bf5-dcc0386e13c4
Certificate serial:       010D0C9F4328584E4C549231F21E5AEC6BC435A0
Authority key identifier: 96:22:F5:84:82:2C:B9:22:17:C9:F8:1C:1D:50:E1:A4:08:8F:63:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/8cf64f11-8acd-37b0-b43f-7968ae8c9cca.roa
Signing time:             Fri 26 Jun 2026 09:00:12 +0000
ROA not before:           Fri 26 Jun 2026 09:00:12 +0000
ROA not after:            Thu 24 Sep 2026 09:00:12 +0000
asID:                     399646
IP address blocks:        149.112.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4c:54:92:31:f2:1e:5a:ec:6b:c4:35:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14618cc8-9232-4da8-8bf5-dcc0386e13c4
        Validity
            Not Before: Jun 26 09:00:12 2026 GMT
            Not After : Sep 24 09:00:12 2026 GMT
        Subject: CN=11245568-d708-4318-9e56-e133cfd1a50d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:94:0c:ce:7f:24:42:4f:88:49:e9:f3:c0:bb:
                    41:c2:fb:6f:3e:d9:9c:b0:16:49:6e:d5:9e:6c:34:
                    3d:c1:cb:1c:d2:02:2d:87:26:41:38:92:68:1e:ad:
                    ad:b1:b7:41:f3:87:aa:1c:a0:86:b3:ba:1a:20:ea:
                    df:7c:21:2e:98:70:45:1c:91:40:6a:53:95:78:29:
                    f2:54:8a:f8:09:95:fa:a9:90:52:ec:e3:72:0c:de:
                    d7:30:14:6f:fc:7f:78:4b:b4:a7:45:75:2f:33:5f:
                    06:38:c9:f9:b5:ad:5c:d3:6c:c8:6e:6b:80:e1:5b:
                    54:b8:25:c2:24:aa:23:bd:ec:08:b6:d2:78:90:a6:
                    b2:f9:50:5e:b9:db:23:3d:17:91:ab:09:ed:8e:01:
                    cf:3b:10:42:2c:58:ad:0e:ce:6e:0e:d2:45:15:c5:
                    59:76:2a:08:46:07:1d:67:76:55:cb:48:38:e6:a7:
                    d4:75:9a:59:db:3e:a1:42:07:49:cc:8e:a1:99:96:
                    b0:bb:71:84:36:61:86:70:6d:f2:b8:a2:ac:65:60:
                    a2:a6:03:62:be:e2:8c:a9:a8:1d:f2:71:b8:cf:3a:
                    1e:6a:7e:8c:ca:35:04:6f:66:5c:51:ea:c2:65:bb:
                    7c:d1:6f:9a:b1:9d:b2:d2:59:c7:03:ab:71:91:34:
                    86:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:BF:B2:65:9C:B2:19:2B:0D:8A:81:E6:38:FD:35:79:69:FE:81:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/8cf64f11-8acd-37b0-b43f-7968ae8c9cca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.crl

            X509v3 Authority Key Identifier:
                keyid:96:22:F5:84:82:2C:B9:22:17:C9:F8:1C:1D:50:E1:A4:08:8F:63:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:aa:d7:85:06:e0:a3:a2:98:7c:73:2c:6a:83:3e:b2:58:de:
         db:b0:89:34:17:28:5b:8d:1e:05:3e:19:70:ea:07:da:e6:d6:
         ad:f2:98:de:df:6e:df:ca:a0:04:76:83:ef:9c:d9:1f:ac:bb:
         28:0f:fd:c0:94:65:6e:4b:1b:48:39:5c:76:ae:40:24:1a:54:
         b2:e2:cf:5f:b1:c0:6e:37:e2:a6:dc:2a:cf:b1:a6:89:a9:12:
         f3:0e:b3:51:3c:39:e9:04:4d:50:1b:5a:b7:9f:a8:0a:be:d8:
         fa:63:e5:47:34:40:3c:83:cd:f6:09:88:8d:e0:31:35:c6:1a:
         82:73:76:ba:5d:3d:03:eb:d7:a6:39:86:61:03:18:fb:cd:eb:
         c1:3c:3a:3c:18:86:c3:38:e8:8e:c4:91:46:21:9a:15:9d:96:
         eb:2b:32:e4:ea:b5:63:2d:b7:8c:f7:f0:ee:2e:0e:7c:15:a2:
         a0:7e:7d:10:d9:b7:2e:82:29:83:fd:e0:09:52:15:0a:37:77:
         8f:05:03:ce:25:e2:3c:84:61:f4:7b:7e:c5:52:cb:77:8d:3d:
         b5:80:9f:b6:69:2f:75:b5:50:e3:cf:0e:c5:74:a2:16:3e:94:
         94:6e:60:9e:25:fb:12:81:65:a8:3b:63:d7:19:e4:42:3c:9c:
         98:2e:45:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:53:42 2026 by rpki-client