Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/b5ec99c0-15fb-304b-a9b3-b3e97ad0cc59.roa
File:                     b5ec99c0-15fb-304b-a9b3-b3e97ad0cc59.roa (raw, json)
Hash identifier:          68k7/6cp0RacMFs0+pJ1vWUG69QnqcMjepy+//mu+q4=
Subject key identifier:   38:66:66:9A:53:FD:3E:81:07:5D:B1:48:21:6F:AC:BB:EF:56:44:F6
Certificate issuer:       /CN=fe86722c-27ec-4059-a1ef-757cf5e15715
Certificate serial:       010D0C9F4328584F2D87B79AEBE5E87CDCD6B000
Authority key identifier: 9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/b5ec99c0-15fb-304b-a9b3-b3e97ad0cc59.roa
Signing time:             Tue 15 Sep 2026 01:00:12 +0000
ROA not before:           Tue 15 Sep 2026 01:00:12 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     18794
IP address blocks:        130.156.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:87:b7:9a:eb:e5:e8:7c:dc:d6:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe86722c-27ec-4059-a1ef-757cf5e15715
        Validity
            Not Before: Sep 15 01:00:12 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=a4dee01c-518c-4b2d-af9f-2c682078f449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:07:dc:ac:76:0c:3b:95:f5:0c:8d:85:0a:32:
                    48:93:f0:3e:85:55:95:dd:cc:08:86:45:f7:a1:1e:
                    20:9f:53:97:33:1b:01:a6:37:8d:3f:6d:c9:31:84:
                    d2:87:42:f1:ad:be:96:56:ef:35:98:95:2d:7f:f8:
                    1c:2a:9c:5e:7c:90:58:04:76:d9:41:63:9a:ac:6e:
                    ee:ce:56:67:06:1f:13:ae:c4:a5:8f:7b:de:df:1f:
                    80:b4:eb:cb:59:f0:af:04:d1:15:4e:a6:77:ea:f9:
                    30:ad:9a:ed:40:e8:f3:3a:cd:07:b1:c0:fa:23:8a:
                    1e:f8:a9:f1:8f:08:66:4f:a1:f1:d3:13:c5:6d:95:
                    53:04:89:69:9d:34:09:e2:9a:15:ff:ed:aa:55:72:
                    84:af:2d:a1:7b:47:0c:e6:73:24:32:41:52:cf:14:
                    9d:99:49:f3:d0:db:b6:1b:7d:98:8c:41:ec:b3:d9:
                    cf:e3:5d:a9:08:be:75:4b:ac:e2:15:85:e2:97:0a:
                    96:c5:cd:5c:e0:2d:90:5b:9b:4c:d0:b3:16:89:84:
                    a0:c2:73:bf:f5:7f:53:3f:f4:be:9e:fc:b8:c6:b2:
                    ad:7f:44:c0:f5:e8:aa:15:8b:f2:72:d3:03:a6:87:
                    d0:b9:13:3b:9d:06:ed:1e:23:ee:c1:57:c2:74:30:
                    a9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:66:66:9A:53:FD:3E:81:07:5D:B1:48:21:6F:AC:BB:EF:56:44:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/b5ec99c0-15fb-304b-a9b3-b3e97ad0cc59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl

            X509v3 Authority Key Identifier:
                keyid:9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.156.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:e9:48:09:50:28:6f:28:ba:07:33:7c:e9:fe:51:7e:30:fe:
         78:25:c3:94:7b:39:45:d1:2c:de:8d:22:46:42:1c:1e:46:8d:
         04:96:08:52:86:af:e2:e9:ec:3d:f4:ea:9c:ff:ea:89:59:af:
         7b:dc:b2:c5:87:0c:6b:a8:52:a8:bc:1f:a4:82:c7:99:2b:85:
         fb:81:b3:4a:0c:20:f3:e7:45:e3:95:c9:1d:d0:be:64:71:be:
         2a:04:05:7f:ca:ff:76:1e:c2:ea:07:1d:90:5c:9b:b7:81:b6:
         4b:11:8c:02:42:8d:4a:0d:15:2e:de:59:5c:96:05:38:3c:b6:
         e3:2e:40:2d:7d:21:6b:f2:60:44:57:4a:a1:73:bd:27:a0:55:
         a6:fb:3b:23:fe:5e:22:f7:4f:aa:f8:54:d9:a3:2d:5c:79:9a:
         b7:44:fd:7a:ba:e7:46:c0:72:2c:49:b9:1d:88:ce:0a:96:cb:
         8d:39:39:34:5f:b6:1f:70:b5:ab:07:41:72:5c:26:8e:90:4d:
         34:7a:ea:bf:b2:e3:50:dc:d1:0a:a4:46:46:24:b0:0d:3d:8d:
         f4:c5:fb:4b:27:ba:ac:e8:5b:2a:44:3e:ec:48:61:4e:54:ff:
         aa:ce:98:b9:20:7d:fb:98:5b:77:92:9f:ed:ad:3d:48:2a:ac:
         de:08:47:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:32:07 2026 by rpki-client