Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/05ac7ce3-84a9-3c67-99d5-0857cef767dd.roa
File:                     05ac7ce3-84a9-3c67-99d5-0857cef767dd.roa (raw, json)
Hash identifier:          MNv8el+nZ+TqMuDsgXo8Wgh6ywJE2UZUyytnDmEcBoQ=
Subject key identifier:   15:1B:A7:E6:63:68:2D:DB:5D:2F:F6:44:38:89:2F:88:29:5B:2B:26
Certificate issuer:       /CN=6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c
Certificate serial:       010D0C9F4328584E7A64DB532F9BAFA655B24A00
Authority key identifier: 89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/05ac7ce3-84a9-3c67-99d5-0857cef767dd.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     20148
IP address blocks:        205.143.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:db:53:2f:9b:af:a6:55:b2:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=5544d65b-bf17-49d7-b54c-65b4051c31c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:1b:f9:3a:9b:b0:56:bc:8d:1e:73:a5:a5:8b:
                    db:4d:1d:38:79:4f:0e:f3:e7:53:b7:ac:46:e8:71:
                    8d:df:e3:aa:39:87:a3:33:68:8e:bf:1e:b0:b9:ee:
                    55:5e:92:8c:66:1c:00:8d:28:cd:19:7f:fb:30:4c:
                    06:ba:27:3e:1b:9d:2b:a8:a0:52:7b:27:e4:77:dc:
                    8f:23:3d:8f:8f:fc:6b:c8:e6:58:c4:37:55:08:85:
                    c5:58:f1:d8:aa:a9:21:15:e1:ca:44:d6:05:77:70:
                    f9:f6:b0:44:26:67:c8:de:59:6e:09:22:13:df:dd:
                    39:a1:20:13:7e:3c:22:2b:4f:e5:6a:1f:51:f6:24:
                    cb:b8:ff:df:56:38:be:77:55:8b:91:c6:53:6c:c6:
                    1c:6d:0c:fb:80:1b:91:ae:b7:de:79:5e:31:0b:30:
                    fe:f1:d7:41:56:b8:37:84:99:f1:98:eb:87:58:71:
                    de:72:29:8e:70:d4:ff:1a:1f:cd:4c:bd:42:84:7f:
                    09:3e:8d:cf:be:95:5a:48:af:09:f4:21:4c:0e:fc:
                    fb:aa:b3:40:fb:e6:1d:8b:a7:64:ea:f3:fd:14:e8:
                    5b:db:aa:7c:d5:fd:2e:11:f2:8d:ec:2f:71:15:ba:
                    94:aa:e1:e6:56:f5:87:f5:82:ad:ba:8e:b4:7a:f2:
                    bf:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:1B:A7:E6:63:68:2D:DB:5D:2F:F6:44:38:89:2F:88:29:5B:2B:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/05ac7ce3-84a9-3c67-99d5-0857cef767dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.crl

            X509v3 Authority Key Identifier:
                keyid:89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.143.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:e1:5b:30:97:01:ae:58:2f:62:19:3f:fe:24:b2:a9:ee:e7:
         7f:2e:93:fb:5a:4d:ea:e0:6b:34:f0:58:5b:78:44:58:c6:32:
         e9:65:29:e0:4f:e3:f4:47:c6:7b:81:9e:d4:f1:0a:ed:26:ae:
         3d:66:cd:6a:72:8b:99:01:97:5d:41:8d:0c:9f:cf:94:02:9a:
         c0:3d:89:d9:14:06:bf:f5:f9:c2:da:04:29:68:bb:d8:1a:68:
         4b:98:54:e9:20:6d:c1:e4:f2:e0:2f:7f:0c:bc:7a:1a:ab:84:
         e3:3f:dc:d7:62:9b:6b:96:44:94:a8:27:d3:7b:dc:83:d7:d8:
         75:cf:5d:b1:e9:46:31:a4:32:f2:c7:8c:7e:db:20:c3:74:b2:
         26:51:87:dd:ec:dc:64:62:91:58:97:6b:7d:e8:67:28:00:92:
         f7:54:f9:c9:82:18:e5:d2:ed:86:4d:5a:25:76:a0:ec:b8:30:
         cc:60:00:4c:3d:1a:2b:51:23:c1:e4:ff:9d:77:a9:9b:b4:70:
         a3:07:0c:67:f0:6a:45:c3:6b:e1:a1:93:37:08:a2:05:68:fc:
         7b:a7:35:f3:59:69:c5:93:c2:a2:b5:5e:60:9b:5e:7f:a2:65:
         ec:1c:f5:3b:42:53:09:0a:6d:38:b0:06:5c:ee:0a:bb:97:5f:
         0c:25:4a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:07:04 2026 by rpki-client