Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/a0bffa57-2a88-3996-8634-39c4d865db6e.roa
File:                     a0bffa57-2a88-3996-8634-39c4d865db6e.roa (raw, json)
Hash identifier:          KJYri6ayP8BxmC34G4ir/OEekJOUcsauTx8BKuy36uM=
Subject key identifier:   F0:7A:93:D2:97:5B:B8:EA:5E:B6:98:9D:1C:90:45:B1:D9:60:11:20
Certificate issuer:       /CN=34b715b9-211f-4bf7-ace9-03b3446775ab
Certificate serial:       010D0C9F4328584E2D9F2611A1789CF36BEEC980
Authority key identifier: A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/a0bffa57-2a88-3996-8634-39c4d865db6e.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     394927
IP address blocks:        204.155.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:26:11:a1:78:9c:f3:6b:ee:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34b715b9-211f-4bf7-ace9-03b3446775ab
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=11ebcc7b-6205-41bc-be6a-d00f3f7b19a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:aa:79:5f:55:37:37:89:20:4e:42:cb:fc:1b:
                    29:8c:08:7d:98:8e:79:33:57:e6:40:0b:ca:30:e1:
                    48:03:97:ed:90:bc:a4:4e:0b:17:7a:88:f6:59:16:
                    db:e0:60:aa:75:42:47:20:7c:f8:e3:28:d6:a4:e1:
                    42:86:64:0d:b6:4d:5b:46:f7:bc:d8:70:d8:5c:35:
                    ae:70:c3:3a:6b:89:cb:4e:72:08:29:cc:07:63:9a:
                    3c:68:de:e9:ba:5f:5f:81:7a:43:71:62:e0:d9:09:
                    02:62:15:d6:ff:9f:04:6d:5d:48:0f:45:b4:a2:dc:
                    46:b9:db:5c:cc:ee:bf:38:6e:80:4c:b3:56:69:10:
                    a0:06:70:7b:c5:6a:05:5b:ab:39:ca:97:51:43:36:
                    70:fb:65:4b:50:4b:65:46:99:9d:68:d6:a3:6d:28:
                    31:6e:da:a5:cf:b3:b0:78:13:b9:72:9e:27:1a:63:
                    b2:45:ff:f0:5d:dd:45:0d:db:9c:f8:be:32:e5:83:
                    f2:9c:38:3d:95:d5:94:10:c9:ac:07:c7:aa:07:55:
                    c9:53:e3:5f:43:03:5e:ec:cb:1c:1b:16:6d:2a:cb:
                    1a:9f:b1:2a:5d:90:a2:76:45:2d:48:24:76:ac:9d:
                    52:9e:7c:83:f3:b7:57:62:a6:28:09:f8:b3:33:33:
                    39:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:7A:93:D2:97:5B:B8:EA:5E:B6:98:9D:1C:90:45:B1:D9:60:11:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/a0bffa57-2a88-3996-8634-39c4d865db6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl

            X509v3 Authority Key Identifier:
                keyid:A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.155.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:17:d3:cd:82:d3:68:14:0c:84:2a:e2:45:44:18:74:94:1f:
         c8:ab:66:24:29:57:df:00:ee:5c:96:f6:28:19:36:be:1d:8a:
         25:21:4b:10:d7:fe:38:df:85:aa:ab:19:89:2f:39:4a:56:1b:
         cc:da:55:2d:05:27:04:be:c0:4c:6a:0a:b1:ff:28:7c:47:7e:
         22:2c:4d:b3:22:f7:bf:42:5b:15:7e:0f:c9:dc:b0:d3:f5:66:
         ce:81:d0:25:7a:9a:50:3c:58:2c:e2:7f:da:b0:9f:f7:63:1a:
         16:95:cd:42:c3:21:11:58:fb:de:1d:87:94:72:60:48:bb:a5:
         95:b2:85:fb:f3:d1:f1:ca:c0:69:fe:dc:b9:4b:7e:5f:47:59:
         f3:9b:93:ff:55:08:4d:bc:cb:5d:65:34:77:5c:ac:77:b6:fc:
         5e:51:5c:50:35:f3:1c:18:38:d9:15:b2:d0:15:50:35:e7:81:
         8a:b5:c6:24:52:53:72:d8:7b:7f:5d:6b:58:ab:7e:33:3f:52:
         e7:2f:b2:85:4f:38:7f:8d:f2:64:78:16:de:10:30:ab:72:dd:
         1e:c9:cf:3a:09:bf:55:81:45:c1:2a:aa:5c:e4:58:fa:52:81:
         a5:fd:ae:25:d8:36:51:2c:96:5a:56:80:48:6d:fd:b7:79:77:
         6c:0a:08:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:55:34 2026 by rpki-client