Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/b7a3cb31-6115-3593-b825-42ede5d33f0c.roa
File:                     b7a3cb31-6115-3593-b825-42ede5d33f0c.roa (raw, json)
Hash identifier:          isdJiS9szbEagzxowdwWtfxKol4gZfVt2A/mo64DnE4=
Subject key identifier:   77:3E:AC:6F:AD:41:EA:E7:36:37:A3:0D:7B:81:39:CC:4B:AC:8C:18
Certificate issuer:       /CN=34b715b9-211f-4bf7-ace9-03b3446775ab
Certificate serial:       010D0C9F4328584E54B4A0E67D1E891DEBD77600
Authority key identifier: A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/b7a3cb31-6115-3593-b825-42ede5d33f0c.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     197122
IP address blocks:        204.155.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:a0:e6:7d:1e:89:1d:eb:d7:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34b715b9-211f-4bf7-ace9-03b3446775ab
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=1fa75bed-ab98-4d52-8fa5-edddac3fc8c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:34:69:19:89:23:59:ae:7d:84:51:89:8d:cc:
                    b7:c2:a5:c7:d2:9d:c2:0e:f0:7c:18:6f:70:b8:7a:
                    d6:54:31:d6:ff:45:04:4a:28:31:c9:53:0e:7c:14:
                    b4:6f:1e:7b:ed:77:f3:b9:9b:ee:2a:08:98:16:ae:
                    dd:f3:ee:23:e7:d4:3b:46:89:f3:be:7a:bf:54:cb:
                    49:6f:8e:5c:31:1a:87:15:d3:2f:0f:3d:cd:ec:79:
                    33:f4:57:24:27:9d:a6:12:02:dc:1f:9c:66:fe:d3:
                    bb:bd:ee:1f:7e:03:66:a0:59:2a:bd:f7:33:f8:53:
                    a6:75:b7:27:68:fb:53:2d:8c:43:c0:bb:63:6b:65:
                    d3:ba:83:f9:a2:96:fd:80:44:b3:d1:e4:7d:61:b0:
                    bb:db:6a:4c:80:cb:e6:c1:ae:68:e8:71:3c:3e:11:
                    86:ae:8f:bb:6f:d0:28:0f:e4:ff:56:aa:e1:5d:4c:
                    33:62:02:39:19:42:52:64:9e:49:96:59:bc:25:76:
                    26:73:94:3d:eb:5b:a4:06:83:a7:92:68:4e:49:f3:
                    7a:31:23:4d:a3:05:52:26:ee:bb:3d:b1:e5:59:5e:
                    fe:0d:9b:db:f0:4a:72:3a:61:d4:a1:96:87:61:1f:
                    14:1c:9f:99:19:6f:28:ce:58:55:62:a9:49:13:cd:
                    ca:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:3E:AC:6F:AD:41:EA:E7:36:37:A3:0D:7B:81:39:CC:4B:AC:8C:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/b7a3cb31-6115-3593-b825-42ede5d33f0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl

            X509v3 Authority Key Identifier:
                keyid:A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.155.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:aa:c2:dd:b0:fd:d8:b0:3e:7c:5b:d6:1d:1f:08:ee:96:fa:
         5d:b3:fb:73:a9:ac:e8:6c:42:90:af:4a:35:e4:8e:f1:7f:c9:
         b5:6a:84:28:46:2d:ae:88:d9:86:3c:b3:ff:8f:9f:82:54:f2:
         a1:10:50:c7:17:c9:d3:37:33:05:c3:08:c2:64:f2:0e:2f:30:
         9e:b0:ad:06:db:08:da:78:54:18:50:6d:04:6c:fe:7d:61:97:
         50:33:29:7f:49:c6:50:32:d6:b5:f6:96:d6:e1:4a:cc:dd:f4:
         aa:f1:f4:6d:a9:75:91:ff:a0:63:ac:30:cf:66:7c:9a:ad:2a:
         c0:a3:22:f9:87:8f:01:5d:6a:ea:68:60:03:3f:d9:82:ef:d4:
         70:6a:f6:46:ac:93:be:b2:4e:73:85:bc:64:d1:ac:ef:f1:b6:
         a8:9b:5d:c4:ce:37:d7:ad:1d:d8:01:56:0d:47:4e:3f:82:6f:
         78:c1:19:50:79:9b:b6:5c:88:75:7a:02:9e:50:da:f8:b2:a2:
         1d:21:60:ff:68:57:10:21:5f:11:b9:86:f3:c8:f1:b4:c4:dd:
         39:8e:d7:5e:e4:e1:a0:ba:d0:ff:55:cc:9d:67:22:09:b7:05:
         e0:eb:93:1a:cf:d6:5d:69:e4:5c:65:da:c3:63:ad:49:94:e9:
         3d:ab:62:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:27:14 2026 by rpki-client