Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/f3449d09-d701-35da-bb14-a8ab89190e72.roa
File:                     f3449d09-d701-35da-bb14-a8ab89190e72.roa (raw, json)
Hash identifier:          VRL/s6udT3Voydg4Tz4TJiIUqKDjyLGrRsabajqnPrU=
Subject key identifier:   72:7F:82:80:76:ED:81:8E:87:08:09:1A:F8:D0:F6:65:72:5A:FF:ED
Certificate issuer:       /CN=9050423a-b7ae-4879-a880-ea3be6e193a8
Certificate serial:       010D0C9F4328584EE0C200120FB3D82ECE878B60
Authority key identifier: E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/f3449d09-d701-35da-bb14-a8ab89190e72.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        168.151.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:00:12:0f:b3:d8:2e:ce:87:8b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9050423a-b7ae-4879-a880-ea3be6e193a8
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=771c6875-7aed-4b4a-a608-5d698b2117a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:13:8e:7c:13:f3:c1:c5:03:96:cb:c6:5a:46:
                    ac:f3:4c:8f:17:2f:6d:47:7e:88:de:c1:db:68:e4:
                    22:d3:e0:20:3b:a0:a2:5f:a9:60:97:fc:13:45:16:
                    69:35:52:ce:86:69:fa:bd:5e:eb:cf:63:6e:12:62:
                    1c:b0:1b:91:aa:a5:b7:5f:e8:c9:80:1c:55:f9:1b:
                    0f:7c:57:8b:58:6b:41:83:03:77:19:5e:40:9e:88:
                    cd:6b:40:d6:de:99:42:52:08:2b:34:74:48:99:eb:
                    a6:a2:4c:74:b2:22:fa:1d:89:0c:0c:71:e1:6c:86:
                    e1:42:53:c6:ef:90:d5:61:61:f9:b8:6d:43:e9:b4:
                    c0:c4:a3:43:96:e0:61:d7:80:6a:50:d7:c2:fe:32:
                    04:bf:a5:c5:c2:84:50:94:cc:f0:94:13:34:15:40:
                    04:00:a3:65:76:1d:83:a4:75:4d:3f:32:b1:4d:b4:
                    63:70:30:59:58:9f:99:93:bd:92:26:8f:83:97:20:
                    5b:0e:6c:0f:4e:00:d2:1b:43:09:2d:71:6a:cb:a8:
                    1d:b2:99:3c:54:b6:63:49:31:6b:83:5b:10:82:1d:
                    69:aa:c5:89:18:43:1f:fc:ab:71:94:88:76:c6:05:
                    f1:f2:93:bd:51:24:3a:0a:e2:06:55:ba:04:dc:da:
                    6f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:7F:82:80:76:ED:81:8E:87:08:09:1A:F8:D0:F6:65:72:5A:FF:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/f3449d09-d701-35da-bb14-a8ab89190e72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl

            X509v3 Authority Key Identifier:
                keyid:E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.151.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:20:af:03:1c:60:59:8f:ce:47:5f:ea:ca:ed:93:6e:d1:fe:
         52:0a:0e:71:14:c7:b8:a6:9f:51:86:61:ee:27:68:c7:6e:e4:
         9b:43:37:c8:4a:b4:0e:f1:8f:96:3a:c5:70:7a:0c:af:f2:f5:
         55:25:5a:e9:80:e7:f6:b7:9c:c9:be:34:51:f5:ce:18:e4:1e:
         cb:14:15:56:47:6e:21:db:d7:c6:3c:b9:e8:9d:c7:8d:3d:80:
         04:d8:2c:f1:9b:d6:b7:f0:6a:07:18:cb:72:89:2e:57:05:78:
         64:fa:2c:0f:7b:3e:54:6b:8f:fb:52:63:75:69:c8:4c:fc:5b:
         d5:32:80:c0:33:1d:84:ba:ed:3d:0b:dd:3b:6f:cc:bb:a2:d9:
         0e:67:90:5e:9e:f9:fd:00:7d:00:12:15:47:47:1b:cb:01:05:
         cd:97:d5:b5:25:30:c4:d2:f4:19:fd:f4:72:04:11:9c:2c:48:
         5c:6b:dd:7f:87:ae:42:df:c0:86:43:dc:bb:35:31:a2:17:4d:
         06:f3:5a:dc:5a:f3:ad:8d:e2:53:3c:48:cd:51:99:3e:44:db:
         2e:b7:ee:a8:48:5a:33:4c:11:4f:e1:f4:79:b5:3b:98:56:5e:
         8e:f8:35:8a:54:39:bc:f9:54:71:23:06:93:f9:19:09:0b:41:
         24:f5:68:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:39:27 2026 by rpki-client