Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/47ea2d17-33fd-35e6-b0d8-b6603b21510d.roa
File:                     47ea2d17-33fd-35e6-b0d8-b6603b21510d.roa (raw, json)
Hash identifier:          MmUmddI/OxtDBPXz++w6cIDtt8y2zacwDdlF9QFP4I4=
Subject key identifier:   2B:B2:2B:C3:DE:AC:27:6C:E1:78:2E:90:DE:70:6A:BD:F1:30:3C:F4
Certificate issuer:       /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial:       010D0C9F4328584E86F4EEF4A6457A8723590AC0
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/47ea2d17-33fd-35e6-b0d8-b6603b21510d.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     14618
IP address blocks:        159.112.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f4:ee:f4:a6:45:7a:87:23:59:0a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=bbffe13a-3273-4cf4-8783-7be21f6cc036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e5:2b:4f:ee:83:67:e9:6d:ca:14:9b:74:5a:
                    3d:48:84:a4:16:e6:fe:19:80:1a:e7:aa:55:a3:2c:
                    bb:80:ff:f8:04:89:6d:05:0e:22:db:dd:84:1d:df:
                    62:5e:c8:f7:71:f6:39:d3:c8:6e:03:ac:e2:e2:a0:
                    07:7e:9e:a5:8c:fa:5d:5e:bb:fa:bd:ac:0f:d1:54:
                    42:7d:82:17:d0:5e:2d:09:57:bb:78:c2:0f:5f:de:
                    81:fc:9d:31:38:4d:75:0b:35:75:50:0d:f9:ed:f3:
                    55:bf:37:3d:aa:5b:bb:76:4e:35:17:a1:03:e1:02:
                    ab:df:5c:ea:4c:d4:9b:be:88:95:d7:d3:42:7d:bb:
                    07:79:74:da:27:ab:42:69:ed:36:ba:c0:de:09:eb:
                    f9:83:18:98:49:6c:04:6f:3e:f9:2e:0c:b0:b7:bb:
                    1b:11:f8:eb:45:46:02:19:ab:7f:29:92:e5:11:77:
                    08:d1:8b:88:03:da:3c:9b:6f:c0:5a:03:f7:92:99:
                    9a:e1:53:3b:10:f5:54:08:f2:11:66:3d:42:ca:a5:
                    49:90:1d:32:c1:ae:1c:d7:81:08:ad:ee:60:bb:76:
                    c0:fe:6c:4e:b9:c9:19:ef:88:4f:8e:7f:03:3b:ac:
                    c3:26:0f:b0:65:1c:75:c3:8c:a9:f9:46:51:1c:6a:
                    8b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:B2:2B:C3:DE:AC:27:6C:E1:78:2E:90:DE:70:6A:BD:F1:30:3C:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/47ea2d17-33fd-35e6-b0d8-b6603b21510d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl

            X509v3 Authority Key Identifier:
                keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.112.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:de:68:ca:91:8b:a9:ab:35:a7:bd:8c:d8:f4:09:23:89:da:
         17:82:bf:f3:03:4e:f6:f5:5f:5c:c1:11:97:bd:f0:e6:d1:b3:
         cb:18:e6:ae:a7:82:34:53:42:57:9f:9a:19:2a:c6:c5:ae:7e:
         6a:dc:06:1e:19:18:68:d6:0e:82:40:0a:dd:3e:aa:68:dd:97:
         c4:d5:4d:fd:20:ad:72:51:20:25:7c:7a:91:c9:99:bc:e2:68:
         ba:95:cf:25:19:bd:45:ab:a8:70:b9:e2:d8:bd:06:27:33:18:
         f4:4b:55:82:0d:0b:0e:4f:f0:84:ca:6e:a5:2f:12:4c:0f:28:
         e6:87:37:24:16:72:8c:ec:9a:a5:6f:43:b3:1d:02:cc:78:65:
         d1:5d:92:57:5e:0e:65:3b:82:dc:3b:4f:2f:56:ad:bf:26:14:
         b7:1b:ff:2a:56:a9:cb:73:5e:13:56:e8:af:36:92:d6:95:da:
         1e:bf:b8:2e:0a:a9:9c:ed:8b:72:8a:84:b1:c0:97:1e:da:86:
         66:d1:f5:af:29:ba:80:49:62:3d:8f:d8:22:1a:d4:f9:ca:65:
         f4:04:d5:b6:2d:84:02:07:c8:d0:70:a2:5f:a1:50:ee:80:ef:
         84:6f:e4:0f:cb:36:9e:78:8e:1b:88:cd:04:9d:8b:3a:32:db:
         e2:52:fd:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:09:30 2026 by rpki-client