Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2/a6ba7f12-73f5-3d13-81a8-ed9637828009.roa
File:                     a6ba7f12-73f5-3d13-81a8-ed9637828009.roa (raw, json)
Hash identifier:          0ZzcDxiU7WrOtAPW4gCJHwxJD0LgPpMUtLvPXvoHLTc=
Subject key identifier:   6D:82:12:8F:52:A3:8B:AE:C7:2B:60:09:C7:5B:A0:4B:64:1B:ED:BC
Certificate issuer:       /CN=d1d57239-6176-4c8d-9a7e-f9fea380a1a2
Certificate serial:       010D0C9F4328584F5A32A1F8F07D2B693998C180
Authority key identifier: 6D:0E:19:88:64:18:83:E1:80:8D:48:79:CD:51:23:88:2E:59:37:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2/a6ba7f12-73f5-3d13-81a8-ed9637828009.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     12167
IP address blocks:        107.161.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:32:a1:f8:f0:7d:2b:69:39:98:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1d57239-6176-4c8d-9a7e-f9fea380a1a2
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=07189d6d-7ede-4887-92e8-9d3fd3fb69af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:09:c3:62:b0:58:6a:76:e8:0c:18:09:90:5d:
                    32:bb:18:c2:15:b8:dc:7c:7b:29:b0:ae:ab:74:4f:
                    73:ca:82:c0:0e:be:b3:46:00:b0:42:dc:e4:8c:63:
                    bc:df:d4:f8:82:ab:17:0d:44:5e:15:0d:59:6d:4c:
                    53:9c:dc:71:1b:85:e9:02:90:a2:5f:c4:f5:a1:27:
                    3b:e7:f2:44:83:9b:46:40:6a:89:b4:00:f7:5b:25:
                    98:88:61:25:d3:c8:cf:b3:51:d3:3f:eb:e6:b1:3c:
                    e2:7f:5c:90:53:ed:94:86:82:75:33:48:31:78:8b:
                    9c:1b:d6:85:00:c5:71:6c:2b:0d:47:d4:a1:e4:6f:
                    9c:8b:4f:21:1d:e6:99:63:67:67:5a:86:df:19:24:
                    a0:2c:57:87:9a:68:56:76:62:1f:49:ab:32:6b:2f:
                    8f:c9:72:6c:4e:56:6a:87:18:65:fc:67:21:33:14:
                    8d:e3:dc:ce:05:d0:84:70:04:32:a7:ea:f5:99:c8:
                    71:c2:7b:de:df:a0:f2:98:10:fe:87:f4:f5:d3:3b:
                    e1:09:84:13:f0:0f:2b:d8:27:ee:2a:4f:77:b8:7b:
                    91:46:3a:35:d4:cb:54:a1:5e:2c:47:a7:12:cb:1a:
                    af:69:17:5f:45:54:c9:c1:8f:b9:73:91:8f:32:46:
                    1f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:82:12:8F:52:A3:8B:AE:C7:2B:60:09:C7:5B:A0:4B:64:1B:ED:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2/a6ba7f12-73f5-3d13-81a8-ed9637828009.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.crl

            X509v3 Authority Key Identifier:
                keyid:6D:0E:19:88:64:18:83:E1:80:8D:48:79:CD:51:23:88:2E:59:37:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.161.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:46:e3:a2:ae:1b:73:88:f7:ef:57:ce:d4:13:b6:4b:7f:ab:
         fc:d1:fa:0b:39:06:d6:63:53:97:05:a3:a7:e6:b9:8a:e5:f6:
         d1:2e:32:42:40:cb:ef:1d:6e:c8:8d:72:36:38:d0:45:14:e3:
         e4:11:16:2f:bc:9d:76:8b:b1:40:71:8e:15:94:8d:a5:b3:5f:
         45:71:b2:ad:34:ff:b1:3e:fc:88:9c:26:a3:95:2d:3f:f4:c7:
         ac:e6:55:15:c2:3c:e7:18:5f:3b:12:70:ff:e5:57:af:a9:03:
         71:2d:1d:68:30:45:6e:15:6c:27:19:28:b9:c4:49:c8:ae:bc:
         37:ca:33:ab:23:f6:85:39:cf:53:24:3c:85:3f:7f:29:fe:d4:
         ee:f9:c9:52:64:7c:54:f7:be:5c:70:80:35:82:80:76:b6:bc:
         17:95:13:52:b1:b5:8f:7e:b4:af:b3:1b:90:5a:20:65:ec:5d:
         1f:2a:e0:89:9c:46:0e:0b:53:c0:da:fa:d4:bf:35:b8:43:53:
         97:f9:fc:86:bf:95:6c:db:26:d6:d4:4d:36:ec:f8:56:21:60:
         8a:f2:45:eb:bb:67:5d:eb:52:e8:75:2b:c0:28:68:c8:f6:12:
         9e:70:55:11:a7:e8:ff:80:f3:df:6a:48:5e:de:eb:e6:d9:14:
         d5:e6:53:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 21:01:23 2026 by rpki-client