Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/f0fef11b-fd18-3aa2-8573-f66dbff15626.roa
File:                     f0fef11b-fd18-3aa2-8573-f66dbff15626.roa (raw, json)
Hash identifier:          s+Krda/ssSieL5CVreQVOuSG98b6n1Lii2xRBw0vzVk=
Subject key identifier:   07:A1:3C:2E:A5:43:1C:94:17:F8:BD:0F:3F:23:CF:3C:BE:6F:26:90
Certificate issuer:       /CN=c6bc2da7-5b3b-4ff6-8bc2-59c42c901086
Certificate serial:       010D0C9F4328584EB2B1BF9D4F6FC933BB805070
Authority key identifier: 9D:66:1F:9F:23:E7:C7:B2:21:F2:E8:33:6C:7B:CE:AB:65:97:31:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/f0fef11b-fd18-3aa2-8573-f66dbff15626.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     18615
IP address blocks:        147.160.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:bf:9d:4f:6f:c9:33:bb:80:50:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6bc2da7-5b3b-4ff6-8bc2-59c42c901086
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=a01a68af-9b3f-4598-b9bf-9145cac2cced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b2:45:97:cd:20:a2:41:7e:1c:02:88:ea:df:
                    d0:80:0a:aa:19:4d:bb:eb:2b:ef:06:5c:64:db:75:
                    31:b1:33:a6:7b:9e:2c:2c:a1:15:58:b9:0f:47:61:
                    ae:d6:13:41:82:da:47:40:a9:98:9d:8b:bd:2a:6e:
                    7b:f1:1b:f9:03:a8:01:d8:63:cc:0c:31:ff:b4:97:
                    a0:59:d0:0a:91:6f:65:3d:4b:e2:f1:ff:ec:e0:9c:
                    79:72:c4:de:1d:f0:46:38:59:4e:6a:1d:86:e7:e9:
                    ab:5d:07:ad:3e:7b:66:7e:4f:95:18:32:41:83:8a:
                    f8:5d:fa:6d:51:1b:fb:30:ca:cc:dc:7f:3e:11:2a:
                    58:03:6a:e8:53:e7:df:64:da:1b:a5:e3:29:7e:ce:
                    26:9c:be:d0:9c:56:98:87:70:93:d0:38:58:c3:d2:
                    51:51:c0:ff:d0:b8:8c:5f:00:35:d6:17:e1:6c:fc:
                    56:7e:3d:31:a6:00:9f:ac:28:60:4d:26:97:c1:a1:
                    0f:5c:0d:68:ba:03:18:43:2a:82:65:e2:e6:2f:0b:
                    33:86:10:23:90:ed:be:9e:43:ad:e5:f8:87:ee:57:
                    2f:8c:63:4d:c8:5d:6a:2d:be:03:ce:54:92:5e:53:
                    e6:8b:1e:72:67:87:03:c9:84:f3:e8:3a:36:64:f3:
                    ae:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A1:3C:2E:A5:43:1C:94:17:F8:BD:0F:3F:23:CF:3C:BE:6F:26:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/f0fef11b-fd18-3aa2-8573-f66dbff15626.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.crl

            X509v3 Authority Key Identifier:
                keyid:9D:66:1F:9F:23:E7:C7:B2:21:F2:E8:33:6C:7B:CE:AB:65:97:31:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.160.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:83:78:f2:91:71:20:41:a5:28:b9:c8:bc:35:2a:eb:eb:8e:
         6e:b8:64:ae:fe:a9:d1:97:fb:7d:70:5f:74:f9:67:c8:c6:e2:
         48:15:d5:e7:22:79:d7:b6:a6:b6:27:be:10:9a:ae:b1:59:ff:
         ca:93:9f:fe:d5:e3:87:e2:83:18:f7:74:92:22:c2:c7:2d:04:
         ea:2b:93:b4:d9:4a:ab:03:ac:c2:15:5a:a1:a9:f5:1c:b2:ec:
         8e:06:b4:7b:1f:0a:f2:af:48:0c:91:5f:03:3d:9f:0b:87:2f:
         02:7b:da:93:a2:f9:41:ea:3e:04:6e:ab:ef:42:d4:8d:f3:06:
         7f:d4:76:7e:6e:67:02:0f:31:68:41:f5:9a:d4:66:30:92:0f:
         b6:4e:14:66:e0:59:d6:77:07:25:b7:c0:fd:80:eb:bc:66:ab:
         5e:c5:00:bf:22:f8:dc:75:2a:50:42:33:a4:03:25:8f:7e:b8:
         4e:65:25:2c:e5:c5:72:eb:93:bf:1a:46:1e:95:1e:c6:6b:dd:
         61:e2:9f:a7:2a:0b:14:d1:08:07:a3:ac:76:ec:b2:03:45:58:
         02:18:3a:8a:f5:b7:b0:a0:32:09:3e:d7:98:1b:eb:ef:7a:9b:
         cd:09:36:26:c4:22:fe:5d:67:83:9f:39:f0:b1:b0:34:8a:f0:
         4a:64:47:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 05:36:50 2026 by rpki-client