Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/964546bd-d3be-387c-9014-6b3630a3ee7e.roa
File:                     964546bd-d3be-387c-9014-6b3630a3ee7e.roa (raw, json)
Hash identifier:          yyXi4HLf2J/Ulsk2AERDkoDPYqVKd0JaTldp41YtJzE=
Subject key identifier:   07:55:7D:97:B7:68:20:73:46:78:A6:06:4C:78:8D:A3:A1:FE:30:83
Certificate issuer:       /CN=8741ed4f-28ba-4cbf-a4a6-384057567d05
Certificate serial:       010D0C9F4328584F549DAA3133E9F2B2CC83AB00
Authority key identifier: B0:4F:D2:1C:43:38:06:D0:27:8E:BD:98:13:F5:43:C3:B3:48:89:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/964546bd-d3be-387c-9014-6b3630a3ee7e.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        206.15.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/8741ed4f-28ba-4cbf-a4a6-384057567d05.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/8741ed4f-28ba-4cbf-a4a6-384057567d05.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:aa:31:33:e9:f2:b2:cc:83:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8741ed4f-28ba-4cbf-a4a6-384057567d05
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=b8fdb7f6-aaa3-47c7-a20b-0700dc9122b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a9:2d:e1:ab:88:a5:39:9c:43:fb:49:32:0b:
                    7c:9b:0f:64:76:b3:98:62:2c:7e:2c:d8:a8:75:fa:
                    69:3b:09:f2:ea:9c:fd:92:7c:24:06:34:61:31:3d:
                    e5:c7:51:df:96:d7:10:d1:00:c1:87:fb:51:46:1d:
                    f2:01:e5:c9:0b:5d:ae:bc:72:f9:43:ed:be:64:a0:
                    23:d8:ed:a8:6f:61:0e:05:a3:c7:9c:be:d6:43:9c:
                    20:c3:f4:4f:8a:b4:7b:8b:96:29:6e:e0:46:f1:22:
                    65:20:39:06:9e:6d:18:92:47:1a:0f:3e:16:e8:9f:
                    95:6a:ad:21:bf:7e:15:d5:e6:80:6c:35:72:11:81:
                    82:8e:cc:89:a6:81:be:e7:e6:d2:b7:e6:00:d7:19:
                    69:c6:51:3c:34:52:92:5d:16:97:5f:96:76:9c:94:
                    e3:be:2c:2f:6a:be:70:2e:2f:e7:e6:2e:e8:c0:85:
                    cc:b0:8d:f2:55:ea:1d:3a:7b:28:2a:01:69:31:17:
                    e2:d6:39:91:66:41:22:42:d2:ff:2b:eb:34:b6:7f:
                    e2:18:3b:53:9f:f8:18:95:33:d0:a2:b1:10:6a:33:
                    e2:5e:52:f4:cc:1e:69:e8:4f:53:ac:fd:55:77:53:
                    a0:20:45:a0:bf:59:b8:5a:53:e4:65:6c:88:18:e1:
                    d1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:55:7D:97:B7:68:20:73:46:78:A6:06:4C:78:8D:A3:A1:FE:30:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/964546bd-d3be-387c-9014-6b3630a3ee7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/8741ed4f-28ba-4cbf-a4a6-384057567d05.crl

            X509v3 Authority Key Identifier:
                keyid:B0:4F:D2:1C:43:38:06:D0:27:8E:BD:98:13:F5:43:C3:B3:48:89:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.15.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:9c:02:b6:e4:7d:63:64:cc:9f:4e:ec:a4:9d:fe:a6:07:d1:
         1c:dd:df:26:6f:14:a2:fc:45:90:0c:6c:da:d0:ca:a5:e9:45:
         98:63:3c:cd:bf:70:d1:aa:a7:a0:97:4d:d1:eb:1f:60:dd:7f:
         27:5c:6e:a2:b1:15:a4:95:ad:4b:65:8d:ba:d1:b3:36:70:c4:
         67:ec:f8:e5:6c:32:11:b5:0b:43:7e:91:8a:e5:43:15:4b:53:
         f2:55:c5:eb:e4:fd:36:1b:65:a6:d0:79:31:24:70:d9:39:46:
         e1:a8:87:93:7f:58:12:24:79:21:5a:58:b9:88:e7:6e:e4:ce:
         3a:67:0c:1c:27:1c:b6:af:56:22:70:3b:a6:4e:74:b0:5d:7d:
         cf:e5:dc:ce:95:69:4a:66:cb:01:f2:fc:ae:12:78:a9:43:45:
         18:9b:ae:b4:85:4f:78:cf:a8:10:fb:52:00:6a:66:60:79:70:
         63:4f:02:a9:9a:52:24:0f:43:37:27:7a:48:85:8a:5b:1d:e9:
         2a:a4:57:c4:0f:33:96:99:22:4b:be:34:86:53:47:f8:77:50:
         c7:56:da:c2:0e:7a:46:03:99:d9:80:33:08:b9:21:a6:fb:53:
         8f:c3:4d:56:83:ea:ef:bf:5d:07:cf:81:b1:d0:58:ee:98:67:
         59:9c:ac:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 22:56:03 2026 by rpki-client