Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f7122567-6c69-4de3-adf9-2d514f567960/d4d6b1ea-c7af-3a6f-83ae-3a1e048c6eb1.roa
File:                     d4d6b1ea-c7af-3a6f-83ae-3a1e048c6eb1.roa (raw, json)
Hash identifier:          YTJLlN8uWRqcLUZ177iB2QgXlbmSeDPMHucnKwEhaog=
Subject key identifier:   F1:91:92:F9:1F:9A:8F:7D:BB:DD:FE:2B:FE:DB:31:FA:BC:CF:91:E9
Certificate issuer:       /CN=f7122567-6c69-4de3-adf9-2d514f567960
Certificate serial:       010D0C9F4328584F6A201306D00FF5744DF942A0
Authority key identifier: 81:1D:5C:C9:AD:0E:B2:CC:07:CA:FD:81:D0:22:52:96:2A:4D:63:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f7122567-6c69-4de3-adf9-2d514f567960.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f7122567-6c69-4de3-adf9-2d514f567960/d4d6b1ea-c7af-3a6f-83ae-3a1e048c6eb1.roa
Signing time:             Tue 06 Oct 2026 17:55:46 +0000
ROA not before:           Tue 06 Oct 2026 17:55:46 +0000
ROA not after:            Mon 04 Jan 2027 18:55:46 +0000
asID:                     8103
IP address blocks:        150.176.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f7122567-6c69-4de3-adf9-2d514f567960/f7122567-6c69-4de3-adf9-2d514f567960.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f7122567-6c69-4de3-adf9-2d514f567960/f7122567-6c69-4de3-adf9-2d514f567960.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f7122567-6c69-4de3-adf9-2d514f567960.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6a:20:13:06:d0:0f:f5:74:4d:f9:42:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7122567-6c69-4de3-adf9-2d514f567960
        Validity
            Not Before: Oct  6 17:55:46 2026 GMT
            Not After : Jan  4 18:55:46 2027 GMT
        Subject: CN=7af5913d-8ccf-4d02-8d12-29a0bd35a1d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:04:0b:29:21:63:ea:6a:c1:1f:54:8e:09:2f:
                    ae:f1:70:bb:15:a8:9c:4e:f6:d9:b4:38:ca:49:d5:
                    aa:e7:f6:e4:cb:b7:61:af:b3:0c:82:b5:fc:ae:fc:
                    41:21:f8:c1:fd:f0:11:93:cc:3a:e0:2e:f8:e4:21:
                    fc:f6:33:c3:06:32:09:26:94:3c:a8:2c:8a:be:5d:
                    af:c6:8e:50:17:34:b0:3a:74:b3:bb:b9:b1:73:b0:
                    0f:52:5c:58:b4:4e:c5:f6:9f:5a:5e:ca:c4:2f:1e:
                    5b:23:11:8a:b5:a3:17:1d:89:02:6b:90:53:c3:7d:
                    24:82:79:c4:78:e6:0e:a9:76:97:12:b2:63:47:61:
                    ea:c4:63:6e:52:9b:df:d9:35:ff:b1:14:1c:dc:fd:
                    3d:71:20:32:0e:af:26:75:5d:f8:35:a4:24:bf:6f:
                    94:04:8e:f6:9b:6e:be:10:bc:4a:26:54:18:fe:b2:
                    bc:9f:b4:fe:1b:a2:eb:9a:ad:a6:2d:79:45:67:c9:
                    0b:bf:dc:90:d3:44:78:86:2b:e4:74:81:cc:1a:86:
                    65:7f:fd:e8:59:2d:af:f2:de:49:61:a2:37:80:17:
                    58:28:1c:d0:f0:95:6b:bb:31:29:86:c7:57:83:b5:
                    9d:3e:ff:36:81:dc:e8:e3:b3:01:f2:fd:61:0b:0e:
                    13:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:91:92:F9:1F:9A:8F:7D:BB:DD:FE:2B:FE:DB:31:FA:BC:CF:91:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f7122567-6c69-4de3-adf9-2d514f567960/d4d6b1ea-c7af-3a6f-83ae-3a1e048c6eb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f7122567-6c69-4de3-adf9-2d514f567960/f7122567-6c69-4de3-adf9-2d514f567960.crl

            X509v3 Authority Key Identifier:
                keyid:81:1D:5C:C9:AD:0E:B2:CC:07:CA:FD:81:D0:22:52:96:2A:4D:63:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f7122567-6c69-4de3-adf9-2d514f567960.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.176.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:2e:69:7f:d5:72:64:b0:b8:68:f2:d2:81:40:bd:b2:81:26:
         39:4e:f3:11:29:2a:26:de:d5:10:7e:de:45:67:01:b0:cd:c8:
         bb:0b:af:8f:1c:01:a2:90:11:f4:f8:85:16:db:6c:c8:12:f5:
         a4:d9:88:d5:31:f1:8d:bd:9d:85:56:8d:ba:ed:cc:61:67:38:
         12:92:de:cb:3a:48:a3:61:50:cf:82:13:89:33:9b:67:dc:c2:
         53:03:d0:cc:49:25:74:e9:a5:57:ea:1b:a2:9f:6d:c4:c0:61:
         62:cf:ae:df:f9:ae:3c:69:87:28:d0:88:cf:bf:41:79:0f:d6:
         a4:17:1e:35:a0:3b:b1:e0:df:f5:29:f1:86:b9:20:75:55:21:
         fd:e3:76:a6:3c:d3:94:3c:63:29:7c:7d:6c:86:45:c9:3c:8a:
         9b:3d:f8:ab:9e:a7:18:e4:b5:68:09:8f:16:1e:ff:57:87:21:
         f0:e0:db:bf:18:65:25:42:6e:f7:b5:97:8b:e5:02:40:bf:79:
         e0:a6:22:7f:fb:a4:9c:3c:77:8a:81:91:f9:27:f8:a1:56:82:
         62:08:6e:2b:69:84:03:23:e6:28:75:f5:f0:88:b5:f3:7b:ad:
         18:e1:98:1d:01:6b:b8:b2:be:f9:53:e4:37:69:eb:2d:19:e9:
         7d:13:32:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 17:48:23 2026 by rpki-client