Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f/1a24eb8c-763e-3fe5-9854-4c755677df1e.roa
File:                     1a24eb8c-763e-3fe5-9854-4c755677df1e.roa (raw, json)
Hash identifier:          iNC8rhU1Ne3bFFPtINHkGeG7M6KJMlakfDcpq4WZCtI=
Subject key identifier:   84:79:D9:2C:3B:8A:74:DA:E9:31:AD:A2:85:06:FA:89:28:42:C3:25
Certificate issuer:       /CN=943895ce-649a-4937-9d38-a57b20ee748f
Certificate serial:       010D0C9F4328584E8B24F8E334CE41CD9BDAAD80
Authority key identifier: E9:24:0C:E1:14:2F:1C:1D:17:77:FB:10:8C:A4:CA:1B:32:4D:89:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f/1a24eb8c-763e-3fe5-9854-4c755677df1e.roa
Signing time:             Sat 18 Jul 2026 21:00:11 +0000
ROA not before:           Sat 18 Jul 2026 21:00:11 +0000
ROA not after:            Fri 16 Oct 2026 21:00:11 +0000
asID:                     16824
IP address blocks:        149.20.232.0/24 maxlen: 24
                          149.20.233.0/24 maxlen: 24
                          149.20.234.0/24 maxlen: 24
                          149.20.235.0/24 maxlen: 24
                          149.20.236.0/24 maxlen: 24
                          149.20.237.0/24 maxlen: 24
                          149.20.238.0/24 maxlen: 24
                          149.20.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f/943895ce-649a-4937-9d38-a57b20ee748f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f/943895ce-649a-4937-9d38-a57b20ee748f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8b:24:f8:e3:34:ce:41:cd:9b:da:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=943895ce-649a-4937-9d38-a57b20ee748f
        Validity
            Not Before: Jul 18 21:00:11 2026 GMT
            Not After : Oct 16 21:00:11 2026 GMT
        Subject: CN=d5a60991-383e-4cf2-a48b-cb5d44d12eba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:35:42:d0:07:0e:79:01:38:6b:45:b5:2b:c9:
                    1f:0d:21:00:04:77:42:87:a1:06:0a:0b:a9:d5:96:
                    86:db:93:71:6d:40:ca:1b:53:b2:6c:fe:e4:1c:e5:
                    44:f5:d5:3b:3e:9b:4b:dd:60:94:c4:f3:d0:df:3d:
                    2e:17:36:75:0b:95:3b:3b:db:40:72:22:fa:42:fb:
                    74:60:f9:cb:8e:4a:d2:7d:fb:15:ba:58:c9:cc:18:
                    54:31:8a:82:d7:eb:b0:72:d1:c0:b5:74:af:78:0c:
                    51:fc:1c:bd:b9:ee:97:fe:91:e6:ff:a5:87:a6:b7:
                    7f:ab:87:df:30:e6:9f:b9:06:4c:60:51:02:c5:61:
                    17:6e:b5:9e:b3:64:35:e6:c8:8b:5a:fd:95:b9:73:
                    bb:83:61:72:5b:11:e6:59:bc:b6:09:a7:d2:36:dc:
                    a8:d2:40:9a:b5:9a:8e:a3:59:6f:4a:91:3d:d8:69:
                    52:92:3c:4c:15:f2:34:0c:2b:c3:78:01:15:b1:74:
                    08:5b:ca:9e:1b:20:53:36:24:24:c4:d3:26:68:5f:
                    42:3e:6a:24:4a:13:7b:3b:27:78:63:39:f6:2f:ba:
                    95:05:08:58:e4:cd:7a:69:cf:d0:95:2b:c1:42:e5:
                    d4:1f:e2:b7:c1:2d:85:d6:32:01:fb:02:c2:d7:2d:
                    8d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:79:D9:2C:3B:8A:74:DA:E9:31:AD:A2:85:06:FA:89:28:42:C3:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f/1a24eb8c-763e-3fe5-9854-4c755677df1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f/943895ce-649a-4937-9d38-a57b20ee748f.crl

            X509v3 Authority Key Identifier:
                keyid:E9:24:0C:E1:14:2F:1C:1D:17:77:FB:10:8C:A4:CA:1B:32:4D:89:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.20.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:34:fc:ca:7d:a4:8c:e9:5b:9d:96:f2:5e:eb:c0:80:cc:92:
         71:5a:0c:b2:53:fb:ac:14:f6:fb:95:75:8c:30:6e:ac:1a:8f:
         6b:c6:94:e1:bd:6f:9c:d3:77:86:35:04:85:ee:df:58:26:9e:
         58:90:e8:dd:9e:4c:90:d7:82:d3:97:06:16:fb:7a:5f:9f:ce:
         0d:7a:05:22:12:d1:ba:54:1d:3a:ca:08:cf:82:1b:85:04:f9:
         3f:76:67:d1:b1:e0:fd:af:ba:28:fd:a6:a1:a7:a2:30:d9:a0:
         72:af:24:ec:72:69:13:32:ae:a8:7f:a2:d8:05:da:2f:e2:d3:
         99:13:16:45:6d:2e:8a:34:9e:e9:64:22:5e:d7:b0:92:7d:14:
         b3:e5:2c:83:f9:08:ea:f6:10:a9:ec:d4:d7:28:29:26:b9:74:
         53:2e:cf:e3:a7:d3:18:35:8e:d6:85:ec:bc:16:41:4d:42:4a:
         d9:70:42:18:1f:f7:f3:94:f3:33:52:91:b0:39:2d:af:08:a2:
         5c:ed:b4:35:b1:4f:ae:09:de:bf:77:f5:08:16:c5:7c:19:57:
         79:a3:46:c3:de:25:93:93:bd:13:7e:74:99:40:d3:bb:54:ec:
         a8:ed:c1:e6:0a:fa:5f:aa:49:ce:d0:ee:b5:92:9e:91:56:f3:
         31:bf:42:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:05:50 2026 by rpki-client