Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/1016c453-3950-3157-8238-b1385cd19da0.roa
File:                     1016c453-3950-3157-8238-b1385cd19da0.roa (raw, json)
Hash identifier:          RflkE6EvKLFL2IY8ZyzbzWRhNFuIef8t7ZZ/W4T4Ct0=
Subject key identifier:   12:EF:6B:8A:E0:41:ED:43:9D:EA:24:05:D9:33:03:53:1A:0F:1C:5A
Certificate issuer:       /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
Certificate serial:       010D0C9F4328584E54B4A1CD669A81114EDA8BC0
Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/1016c453-3950-3157-8238-b1385cd19da0.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     32128
IP address blocks:        158.106.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:a1:cd:66:9a:81:11:4e:da:8b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=a0aa5bae-528c-4571-bf74-5cd7e7a57dc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e4:83:82:50:22:f6:ad:15:be:27:87:3d:dd:
                    8a:b3:80:a8:e2:dd:02:c4:f6:c0:0b:cb:a2:40:78:
                    fc:09:d7:17:21:ac:dd:12:c5:84:59:1f:8b:11:78:
                    23:33:79:71:fa:89:bd:eb:91:f5:2d:ad:87:58:bf:
                    f9:bc:bf:46:27:1f:03:a6:a2:04:d8:ca:f9:9c:39:
                    76:44:2d:c1:72:8f:b7:e5:69:54:48:8d:41:c4:10:
                    51:73:c2:60:d9:f6:c8:e9:08:ec:5f:f1:83:96:9d:
                    d9:4f:ac:d3:70:4b:96:91:f2:71:ec:3d:50:b0:37:
                    6a:ec:90:17:1b:37:ed:0e:a1:57:cf:56:1a:e4:df:
                    38:58:42:aa:48:3d:fa:df:ed:7f:5c:f2:9e:a0:65:
                    a5:4e:b7:39:6a:2c:b5:27:14:6a:37:94:85:8d:de:
                    7f:90:cd:4a:01:8c:6f:b3:e1:41:58:28:c4:87:54:
                    86:43:1d:d9:94:d6:c7:7e:c8:29:92:4c:b4:c0:1a:
                    a9:10:0c:24:c5:bb:5c:e3:5a:13:c5:c9:91:51:b8:
                    c0:6c:38:52:f0:d2:ce:1d:41:f3:1a:c1:f8:d4:b6:
                    61:25:d9:cb:90:18:68:9c:ec:b2:41:5c:20:29:ca:
                    2b:05:a0:01:22:56:1d:dc:fe:44:b4:1f:bd:79:d7:
                    74:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:EF:6B:8A:E0:41:ED:43:9D:EA:24:05:D9:33:03:53:1A:0F:1C:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/1016c453-3950-3157-8238-b1385cd19da0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl

            X509v3 Authority Key Identifier:
                keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.106.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:92:51:61:0b:41:ce:ec:7c:9d:cb:68:fa:99:f9:20:1a:7b:
         20:da:34:c6:ef:78:b8:59:73:a8:ae:e6:08:12:14:fd:b8:88:
         03:95:ef:28:6f:a7:75:05:92:51:8c:fc:a7:b8:59:ab:27:75:
         62:44:d2:f9:97:3a:49:52:69:84:21:3c:fe:1c:2e:42:5b:7f:
         c6:36:c8:48:02:c2:1b:d8:29:c1:9d:4c:f0:a1:82:7d:af:24:
         3f:38:5e:b4:76:a3:e2:aa:c7:69:75:c0:fe:8d:3b:e7:87:69:
         cd:6c:f2:5b:f9:d2:7e:21:94:bc:e1:3b:9a:a2:f2:06:e1:09:
         ec:67:bc:e3:6b:f5:d4:22:6c:26:a8:d3:35:2c:0e:47:e5:85:
         ec:50:06:61:85:e6:2c:d2:9b:ca:cc:2d:6a:1e:3d:ed:1d:24:
         d0:52:f2:c6:32:b5:07:30:4d:af:f8:f2:87:fd:2f:f7:b8:ea:
         04:44:74:d0:7b:40:c9:99:73:f2:5f:f5:0c:50:cb:3b:2d:cf:
         d5:03:bc:e1:cf:b1:c2:7f:b8:f4:25:b9:00:bb:86:6c:0c:a7:
         7a:af:c7:bf:a1:46:63:1c:72:4b:de:2c:82:a5:b2:04:67:84:
         e7:3d:dc:80:d5:61:a0:e5:69:26:b8:39:cf:e6:6b:7d:12:ad:
         1c:4f:86:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:40:43 2026 by rpki-client