Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c77802de-4d62-4c96-9ea5-86421ef69381/7a27f177-5d17-3ebd-b617-e1dfdf44737e.roa
File:                     7a27f177-5d17-3ebd-b617-e1dfdf44737e.roa (raw, json)
Hash identifier:          Lwf70c6G4JGy26vELhMOqSaIpM9DNyQ8oyJC+oGXaDg=
Subject key identifier:   46:BF:8D:F7:05:13:16:89:8A:38:60:A1:98:F7:B2:8C:E5:3A:2D:35
Certificate issuer:       /CN=c77802de-4d62-4c96-9ea5-86421ef69381
Certificate serial:       010D0C9F4328584E6F3A377212E20080193DB280
Authority key identifier: D1:01:D8:59:D2:79:41:DF:4C:36:77:DC:08:EF:28:48:36:AF:D9:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c77802de-4d62-4c96-9ea5-86421ef69381.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c77802de-4d62-4c96-9ea5-86421ef69381/7a27f177-5d17-3ebd-b617-e1dfdf44737e.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     399124
IP address blocks:        144.86.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c77802de-4d62-4c96-9ea5-86421ef69381/c77802de-4d62-4c96-9ea5-86421ef69381.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c77802de-4d62-4c96-9ea5-86421ef69381/c77802de-4d62-4c96-9ea5-86421ef69381.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c77802de-4d62-4c96-9ea5-86421ef69381.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:37:72:12:e2:00:80:19:3d:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c77802de-4d62-4c96-9ea5-86421ef69381
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=ceb28c38-9591-4620-aecd-ba2f7763c414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:17:6f:58:0c:96:d9:5d:d6:d3:1a:32:6c:95:
                    03:c6:78:07:94:ed:12:45:bf:4f:da:20:c3:e3:d4:
                    b1:64:3a:5a:c0:a7:b7:b2:fe:ce:c8:c0:aa:6e:1d:
                    17:5e:8a:00:ab:55:8d:55:9d:0d:04:5a:ba:fc:c9:
                    b9:80:51:d5:41:e6:dc:59:03:4d:b6:47:66:fe:14:
                    c4:e0:c6:4b:98:fd:aa:43:d8:59:05:11:ea:fd:b6:
                    e9:6f:ac:93:e0:5c:ea:dd:55:9b:d4:67:1a:71:fa:
                    b0:3b:e1:24:8c:ca:66:8a:cc:d3:bb:6a:0c:54:47:
                    bf:85:fe:ae:37:ae:5e:3b:dd:ca:a0:24:79:b4:70:
                    3b:4a:04:90:8f:b4:18:bd:f4:c4:7b:a5:18:4a:aa:
                    d0:4e:b2:a4:b2:b4:27:aa:59:85:4a:9b:61:03:b4:
                    7c:06:a4:12:b1:14:55:86:01:a4:15:5b:7a:7d:82:
                    31:16:65:e9:12:0c:1d:23:21:94:6b:59:5d:04:d3:
                    8b:a0:fb:91:00:26:74:e4:19:6a:b3:65:ab:41:39:
                    36:98:bb:cf:b1:bc:d3:12:59:28:c3:d8:7a:53:3b:
                    45:bd:4d:f0:72:34:36:40:32:f8:84:a3:3f:35:1b:
                    bd:34:bf:a8:59:43:6d:ca:0b:df:db:c6:e0:35:5a:
                    59:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:BF:8D:F7:05:13:16:89:8A:38:60:A1:98:F7:B2:8C:E5:3A:2D:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c77802de-4d62-4c96-9ea5-86421ef69381/7a27f177-5d17-3ebd-b617-e1dfdf44737e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c77802de-4d62-4c96-9ea5-86421ef69381/c77802de-4d62-4c96-9ea5-86421ef69381.crl

            X509v3 Authority Key Identifier:
                keyid:D1:01:D8:59:D2:79:41:DF:4C:36:77:DC:08:EF:28:48:36:AF:D9:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c77802de-4d62-4c96-9ea5-86421ef69381.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.86.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:99:a4:78:87:8d:5b:e4:f6:30:91:90:f4:9f:88:13:73:18:
         0f:30:06:e4:46:d6:da:c3:da:fd:ff:ed:11:f6:5c:d3:e1:9f:
         4c:6c:28:79:b9:21:e2:49:82:fa:bc:d3:ab:5b:76:77:8e:ed:
         64:00:32:40:ba:8d:b2:ec:a9:0e:35:50:09:ac:15:29:92:c5:
         cb:45:44:fa:9f:94:bf:24:44:9c:1b:04:5e:06:46:6f:d7:4b:
         48:b2:63:d5:32:5b:7b:29:4c:89:89:3d:d9:2c:f8:a0:85:ca:
         ae:50:a6:9f:91:e4:8a:93:dc:67:93:6b:98:e0:bc:82:cd:8a:
         be:2e:e6:9a:20:bf:14:1c:f8:01:f6:60:0d:e6:21:37:ba:6b:
         f7:8f:65:ec:35:2e:57:c3:45:25:39:ff:6f:54:c1:fc:d9:54:
         66:eb:3c:fb:76:6b:7c:cc:1e:14:51:fe:2d:82:d5:b9:b4:eb:
         f3:4d:df:e1:89:8d:72:77:e0:aa:19:13:c1:da:29:97:5a:30:
         fc:f1:4e:2b:e2:15:d9:1c:2e:6b:c8:2e:f5:3a:00:39:6a:0d:
         c6:d0:a7:0a:32:64:9f:5b:1a:8f:04:2c:36:da:24:49:af:40:
         db:0e:2b:f6:0c:17:6d:b3:a6:bd:32:27:3d:04:6d:49:c3:f8:
         f4:34:0c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:23:27 2026 by rpki-client