Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4875c324-edea-4433-b1d5-4567eb78fa1f/b6c31942-8c2e-31b6-93d5-db0ff7a90851.roa
File:                     b6c31942-8c2e-31b6-93d5-db0ff7a90851.roa (raw, json)
Hash identifier:          KLz0ooj4ZWJwnVOArLypBzDLSvoYlFPO0F4M9gP4tZM=
Subject key identifier:   75:17:04:DC:3D:63:7E:2F:A3:6C:04:92:E1:5C:B8:EC:53:9D:52:8A
Certificate issuer:       /CN=4875c324-edea-4433-b1d5-4567eb78fa1f
Certificate serial:       010D0C9F4328584ECA7C7A10B3B851299AA6DE00
Authority key identifier: B7:BF:5C:E9:F6:DC:CA:D1:FF:D6:E6:D6:E9:94:84:82:7D:F5:98:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4875c324-edea-4433-b1d5-4567eb78fa1f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4875c324-edea-4433-b1d5-4567eb78fa1f/b6c31942-8c2e-31b6-93d5-db0ff7a90851.roa
Signing time:             Mon 10 Aug 2026 13:32:36 +0000
ROA not before:           Mon 10 Aug 2026 13:32:36 +0000
ROA not after:            Sun 08 Nov 2026 14:32:36 +0000
asID:                     397449
IP address blocks:        167.150.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4875c324-edea-4433-b1d5-4567eb78fa1f/4875c324-edea-4433-b1d5-4567eb78fa1f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4875c324-edea-4433-b1d5-4567eb78fa1f/4875c324-edea-4433-b1d5-4567eb78fa1f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4875c324-edea-4433-b1d5-4567eb78fa1f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ca:7c:7a:10:b3:b8:51:29:9a:a6:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4875c324-edea-4433-b1d5-4567eb78fa1f
        Validity
            Not Before: Aug 10 13:32:36 2026 GMT
            Not After : Nov  8 14:32:36 2026 GMT
        Subject: CN=8c869920-5801-4cd0-a946-ca4d512ad1ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8a:e9:63:2e:51:c1:99:b0:6e:86:fe:d0:23:
                    0f:12:b7:27:67:4b:7c:dc:22:4a:ff:90:c5:eb:59:
                    09:f2:b8:2c:ac:18:ea:07:fe:da:45:9b:2f:b2:ea:
                    c1:23:71:95:67:99:f5:3d:bf:a0:a5:51:38:db:3a:
                    78:24:46:2d:cc:81:e3:9a:c1:5a:60:26:2b:21:7b:
                    96:c3:76:cd:2a:24:c3:b4:9f:77:53:60:0a:ef:9b:
                    80:09:92:f6:1f:4b:c6:f6:d9:00:80:ca:cc:76:e0:
                    eb:86:11:ba:5f:53:2f:9d:61:3a:8d:d5:3b:5c:b5:
                    d3:4b:38:e2:a4:b5:a6:3a:29:97:18:55:9e:24:4f:
                    23:c0:74:be:62:7f:cb:7a:e6:c4:56:07:4f:82:a6:
                    d2:61:ee:cd:0a:29:e2:9b:4d:46:07:50:5b:4b:1e:
                    9f:cc:39:3b:b7:54:ff:6c:80:01:2d:d2:01:cd:0f:
                    6d:ea:cc:83:b5:23:72:05:49:bd:bd:da:86:2e:89:
                    5a:7b:07:95:43:5d:76:d8:b1:96:d8:cd:5f:ae:83:
                    9d:0c:c7:f5:45:32:15:67:f9:ae:67:3d:b7:af:e8:
                    82:65:55:b2:d7:5f:6c:8a:b3:ae:34:3f:40:a3:73:
                    3a:3f:42:b3:64:5f:ac:a5:32:90:6f:c7:b1:d4:d9:
                    5c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:17:04:DC:3D:63:7E:2F:A3:6C:04:92:E1:5C:B8:EC:53:9D:52:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4875c324-edea-4433-b1d5-4567eb78fa1f/b6c31942-8c2e-31b6-93d5-db0ff7a90851.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4875c324-edea-4433-b1d5-4567eb78fa1f/4875c324-edea-4433-b1d5-4567eb78fa1f.crl

            X509v3 Authority Key Identifier:
                keyid:B7:BF:5C:E9:F6:DC:CA:D1:FF:D6:E6:D6:E9:94:84:82:7D:F5:98:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4875c324-edea-4433-b1d5-4567eb78fa1f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.150.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:6e:1f:cf:33:d2:9a:83:41:07:fd:1d:e7:ef:df:3c:ac:86:
         b3:dd:80:88:c3:bd:97:01:79:24:dc:ec:2d:67:95:5b:93:54:
         68:1a:53:b5:3a:91:f8:41:b0:03:80:a5:0c:df:fb:9f:50:88:
         74:3f:68:ce:f4:32:30:47:77:d2:2e:ce:2b:6b:8c:12:6a:94:
         e6:32:65:b6:17:fe:b9:f9:e9:d5:74:f5:32:60:62:3c:d2:82:
         18:75:ff:dd:0f:13:51:0e:d0:8b:bd:ff:a1:bb:8b:09:1e:3f:
         a8:58:ba:59:6d:09:60:89:67:cd:44:a2:0a:1f:90:22:63:57:
         82:0c:2f:18:1d:bd:4e:8f:fd:00:34:d3:a0:93:42:c8:fe:81:
         24:b4:4f:d5:1a:0d:e4:99:24:dd:5f:2a:5c:58:e4:80:49:72:
         d8:58:9b:b3:0a:db:ae:c6:b8:d1:dc:2e:85:e6:0e:45:c2:e2:
         0b:1c:ea:4b:a5:b5:da:f8:e8:f3:c0:53:90:e5:c0:f2:3d:9f:
         80:75:bf:25:6c:39:28:d0:6b:ef:44:ae:99:6f:51:4f:77:0e:
         1e:01:2f:54:34:e6:15:d4:75:c5:f5:2d:b2:27:1c:47:72:04:
         14:58:e2:73:b1:b7:f1:57:90:37:11:2b:2c:e5:6f:71:3c:2d:
         73:b8:d6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 07:51:29 2026 by rpki-client