Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/a0bffa57-2a88-3996-8634-39c4d865db6e.roa
File:                     a0bffa57-2a88-3996-8634-39c4d865db6e.roa (raw, json)
Hash identifier:          R9lD4bR0l3B80K/H0HnUFVIYe+8LlVEKwyiEvLUWCm4=
Subject key identifier:   2F:69:0E:6B:9E:3B:EF:62:3D:E6:5E:D5:E5:56:92:B7:C2:E4:85:E7
Certificate issuer:       /CN=34b715b9-211f-4bf7-ace9-03b3446775ab
Certificate serial:       010D0C9F4328584F71EDA232BAC01230C3E4C700
Authority key identifier: A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/a0bffa57-2a88-3996-8634-39c4d865db6e.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     394927
IP address blocks:        204.155.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:a2:32:ba:c0:12:30:c3:e4:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34b715b9-211f-4bf7-ace9-03b3446775ab
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=c2a75764-2937-4cee-9f02-4daaaf042c9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c6:ce:5c:5e:f3:e9:cf:87:39:db:a6:01:c7:
                    9f:b8:09:6b:a3:af:10:49:77:03:1e:1b:88:8e:3a:
                    7e:90:3f:61:ff:91:a5:c4:fc:b7:b7:af:38:ae:99:
                    b2:bc:52:9e:d9:81:cc:57:5c:79:85:7c:71:54:28:
                    06:3c:95:23:60:e9:f3:89:13:99:3f:a8:b1:35:56:
                    25:db:7b:45:d4:ae:bf:6e:ba:60:ad:85:6e:b5:34:
                    03:95:f0:83:6b:b2:07:92:ba:a7:17:e8:7e:d7:ec:
                    68:75:36:af:70:cb:e6:19:de:52:98:47:4f:6e:1b:
                    bf:da:d5:79:8e:9a:d6:f7:b0:23:e1:10:c3:d0:08:
                    12:88:23:ba:f7:93:13:2c:a7:3a:7a:7d:6a:67:2a:
                    d8:30:2d:83:a0:c7:2a:60:5b:0d:66:30:d1:11:fe:
                    d7:2d:f6:de:69:c4:60:88:27:d2:72:12:f4:04:df:
                    73:04:bf:07:62:30:d4:9e:61:d3:7c:db:dc:7c:a1:
                    b6:d3:3c:92:6b:94:54:53:5c:6e:c3:89:c0:5c:31:
                    f4:52:c4:27:47:5b:be:2a:47:21:60:b1:ee:e9:5e:
                    d2:7f:25:8e:ed:b5:de:c7:c1:ce:b0:d7:d2:fd:7e:
                    97:33:03:d2:3d:e3:d2:e8:78:f0:7b:22:8c:f6:f9:
                    f6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:69:0E:6B:9E:3B:EF:62:3D:E6:5E:D5:E5:56:92:B7:C2:E4:85:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/a0bffa57-2a88-3996-8634-39c4d865db6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl

            X509v3 Authority Key Identifier:
                keyid:A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.155.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:7a:78:08:1a:e3:37:03:e7:64:e9:8c:d9:ba:3d:83:a1:30:
         8a:de:de:7a:f0:fb:fb:f6:7b:88:ca:66:88:38:18:5e:b5:20:
         bd:dc:46:ca:be:9b:ae:1a:4c:aa:94:63:ae:af:3c:a7:42:41:
         84:10:a2:89:7e:d0:ca:52:b2:13:c4:c2:96:4a:6b:1b:21:52:
         e9:72:2e:14:23:0e:d3:3b:50:d5:21:24:d8:15:b7:bc:6a:73:
         37:10:c0:8d:00:0a:63:5b:88:e2:1c:fb:07:18:31:68:30:cd:
         55:84:db:e7:cc:4f:0b:92:c6:7d:e2:d2:07:05:7f:8b:16:fa:
         e9:4f:98:20:9b:11:6b:a2:d6:70:0c:a6:f8:d8:18:57:6b:6e:
         ff:5e:6f:59:80:36:5c:13:d1:b1:b0:17:8b:7b:18:0e:37:bc:
         a8:9a:81:fc:69:1e:09:5f:5c:af:f8:ad:85:5b:af:1c:ff:eb:
         31:d1:07:ed:90:f9:bc:0d:db:38:36:ba:1f:ef:b4:e1:7f:d6:
         82:de:ac:21:ec:aa:74:d3:80:4b:82:09:ea:cc:15:ff:89:63:
         13:99:f3:83:e1:4a:06:09:26:38:1f:e9:bd:d6:79:58:3e:a0:
         ed:58:7a:09:be:36:7a:e2:49:66:ec:ff:22:ad:e3:b6:8b:a2:
         67:bf:b6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:51:14 2026 by rpki-client