Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/f3bf331d-19cf-3d03-986c-190a6e650b75.roa
File:                     f3bf331d-19cf-3d03-986c-190a6e650b75.roa (raw, json)
Hash identifier:          RS/VdZXvcdPfVHv6IJgP8HUZR9Kf+h1A4GDjGhXqLGU=
Subject key identifier:   1B:47:5B:62:2D:E4:56:FE:D2:CE:0A:D0:6D:C4:54:A9:8B:C1:BB:1B
Certificate issuer:       /CN=6c86d366-9f08-4852-b060-53c54ef6dda0
Certificate serial:       010D0C9F4328584F4277FD3C1CD395487D2E0180
Authority key identifier: AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/f3bf331d-19cf-3d03-986c-190a6e650b75.roa
Signing time:             Tue 22 Sep 2026 13:00:12 +0000
ROA not before:           Tue 22 Sep 2026 13:00:12 +0000
ROA not after:            Mon 21 Dec 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        164.153.131.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:42:77:fd:3c:1c:d3:95:48:7d:2e:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c86d366-9f08-4852-b060-53c54ef6dda0
        Validity
            Not Before: Sep 22 13:00:12 2026 GMT
            Not After : Dec 21 14:00:12 2026 GMT
        Subject: CN=613adac8-4c2d-4c12-8afe-0afc8d96e061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:47:84:8a:c0:9b:6a:2b:12:8f:12:74:67:ae:
                    00:56:c1:80:89:c1:32:f2:60:57:e6:1c:cd:c9:ff:
                    c0:47:00:5c:ba:96:f5:ad:04:be:c0:75:24:b4:22:
                    86:b9:26:7a:70:67:15:8e:f8:ec:24:ea:8a:d5:09:
                    cc:87:fb:d3:ea:d9:04:a1:91:95:62:00:ed:0b:83:
                    e0:c3:8b:1f:8e:d5:75:09:8b:5c:20:45:b3:12:0a:
                    99:a4:84:b0:6d:cb:87:f0:2c:ee:8e:91:e1:48:f5:
                    c0:d7:84:66:0c:03:01:57:0d:79:6a:41:f4:c5:e2:
                    e0:98:48:c8:57:f3:da:4c:65:19:f7:d6:c1:74:a5:
                    e6:77:8e:49:f2:ef:39:e8:bf:39:00:8a:76:3d:15:
                    e7:18:2a:6d:bd:5b:b8:96:b8:f8:1c:4d:f2:5c:5f:
                    9d:b2:2e:b0:20:bf:c2:f2:71:ae:0b:1d:e4:c0:e1:
                    44:51:85:a3:fa:1a:8b:e3:dc:84:1e:fc:5d:85:be:
                    65:4e:c6:a6:5e:01:5b:00:ee:6d:fa:9d:48:dc:f7:
                    b8:67:13:74:47:04:41:9f:cf:01:c6:2b:b2:e2:f0:
                    f7:eb:5d:21:2f:45:43:48:3e:df:11:65:64:5b:ee:
                    62:e7:ea:7f:f3:1e:b0:a4:2c:ce:e1:d8:24:1f:12:
                    5d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:47:5B:62:2D:E4:56:FE:D2:CE:0A:D0:6D:C4:54:A9:8B:C1:BB:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/f3bf331d-19cf-3d03-986c-190a6e650b75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl

            X509v3 Authority Key Identifier:
                keyid:AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.153.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:b1:fb:7c:41:1e:10:51:73:8f:9b:fa:cd:8d:b7:55:75:ef:
         8f:03:32:d6:9b:98:e6:f9:48:34:de:a2:87:f7:c5:d6:e3:10:
         46:ca:a5:4f:3c:c2:af:ee:a6:69:ae:3d:20:8d:cf:3a:f8:14:
         8a:e9:dd:f3:7b:92:9d:d4:7e:9c:5d:24:4e:02:db:06:6b:0d:
         c7:7c:af:33:fb:2e:84:20:1c:a9:21:fe:f0:d0:93:f0:e1:78:
         b0:ef:ae:b0:4b:dc:68:4b:03:5d:36:68:66:6b:a1:18:15:4a:
         46:51:d7:05:9d:d1:18:36:68:d7:3e:ba:e8:a6:c2:97:26:9c:
         bf:2b:38:4d:cf:06:86:03:71:ae:b3:88:97:3d:5f:73:92:81:
         d5:05:ff:53:7e:21:83:d7:50:3c:51:32:d8:5a:bb:41:d5:8e:
         92:4b:6a:99:99:60:9e:93:8a:47:b1:f9:47:40:24:0d:25:f3:
         e4:1f:dd:0a:45:06:40:35:f1:51:7c:75:ee:6a:1e:10:d9:33:
         90:da:dc:13:9b:b4:ea:b6:da:28:af:73:ab:d7:65:bb:79:26:
         af:15:af:e0:6c:77:11:02:20:91:50:4a:35:e8:b1:51:64:bf:
         1c:10:3e:87:27:84:ac:7a:f9:f4:91:bf:90:53:23:32:57:35:
         6c:f0:6a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:14:37 2026 by rpki-client