Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0/511e7781-6311-316c-ae7d-3d5423cd616f.roa
File:                     511e7781-6311-316c-ae7d-3d5423cd616f.roa (raw, json)
Hash identifier:          68EMfNNTuxZkjOH2bVs7Rg4aLtfiBzzKLLIF2eY2TaQ=
Subject key identifier:   C5:24:3D:38:58:04:3D:8D:F0:9C:F4:46:52:D0:DB:51:10:B3:F3:D2
Certificate issuer:       /CN=afdb7b70-bb28-4db3-8af5-2daa1a5b10e0
Certificate serial:       010D0C9F4328584F2C2FA6EF977EF97674580840
Authority key identifier: 41:F7:1F:2B:24:78:89:7D:9D:DD:A3:40:7E:D3:9F:61:5B:F0:14:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0/511e7781-6311-316c-ae7d-3d5423cd616f.roa
Signing time:             Mon 14 Sep 2026 13:27:02 +0000
ROA not before:           Mon 14 Sep 2026 13:27:02 +0000
ROA not after:            Sun 13 Dec 2026 14:27:02 +0000
asID:                     22616
IP address blocks:        148.107.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2c:2f:a6:ef:97:7e:f9:76:74:58:08:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afdb7b70-bb28-4db3-8af5-2daa1a5b10e0
        Validity
            Not Before: Sep 14 13:27:02 2026 GMT
            Not After : Dec 13 14:27:02 2026 GMT
        Subject: CN=1e5588e7-b364-4c97-8431-d3aa9f7acc6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d4:18:78:e5:d3:7a:ea:b8:8b:51:13:f6:b5:
                    c3:35:0e:89:f3:a9:f9:81:e0:99:79:a6:71:90:92:
                    c8:4b:91:40:b4:07:32:2c:7a:b4:2e:a9:06:93:5e:
                    1f:f5:57:bc:db:8c:61:2b:71:fb:b9:04:b0:b4:b7:
                    9d:2d:bc:7d:f1:47:c0:4c:2f:be:02:cf:f8:06:af:
                    a1:b8:21:43:bc:21:2a:e6:9e:87:19:e6:f0:20:1e:
                    63:8c:a9:f8:9d:7e:be:d8:c4:17:3f:83:57:e6:ec:
                    87:5a:22:e7:16:89:c6:d0:70:e5:84:48:34:33:87:
                    e6:a1:57:78:07:09:fa:46:d7:db:63:7d:dc:16:53:
                    d5:9b:15:76:ea:5b:39:42:6f:82:b3:52:d7:23:d9:
                    9a:4e:f8:21:65:e7:ec:25:d3:b3:a3:8e:29:66:ba:
                    18:63:cc:91:5d:97:38:58:e6:45:77:5e:89:a8:02:
                    71:53:57:e7:a4:35:ce:d9:c3:1a:24:ff:1d:37:4d:
                    dc:8b:0b:70:c2:08:54:66:55:f4:29:1f:b3:a7:ef:
                    5e:72:38:51:e4:ac:a6:4c:8a:6b:ab:ee:d4:47:01:
                    d0:a5:0f:85:1a:d1:d5:22:d8:50:28:f5:3a:2a:16:
                    d1:54:7c:be:71:a2:de:ab:48:10:9d:a1:09:cb:61:
                    88:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:24:3D:38:58:04:3D:8D:F0:9C:F4:46:52:D0:DB:51:10:B3:F3:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0/511e7781-6311-316c-ae7d-3d5423cd616f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0.crl

            X509v3 Authority Key Identifier:
                keyid:41:F7:1F:2B:24:78:89:7D:9D:DD:A3:40:7E:D3:9F:61:5B:F0:14:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.107.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:01:c6:50:a2:77:69:f3:16:6a:d5:1c:0e:03:12:f8:a3:bb:
         0c:cd:ee:0d:12:6e:da:15:ad:4a:e8:eb:a3:a5:44:1e:4d:54:
         06:f0:82:ff:55:b9:60:1a:e6:93:e1:40:14:9f:ed:bc:9f:8d:
         35:50:2d:15:03:32:dd:9a:fd:d5:ab:a3:5d:c9:63:a7:83:1e:
         dc:9a:2d:14:a6:5e:bf:18:17:79:eb:b4:2a:18:9a:df:83:a3:
         99:53:1c:4e:19:67:9c:26:f6:15:c0:b0:c5:bc:21:57:17:8c:
         e3:af:ec:b1:96:3c:a2:35:65:26:dd:1b:d8:fb:d3:17:8d:26:
         4d:78:7b:6d:9d:23:a6:49:6a:ce:18:11:4f:d4:1b:b3:04:d9:
         15:34:d5:ed:a2:73:eb:bd:cc:ae:2a:b1:d6:a7:bb:85:82:bc:
         f5:1e:a7:9a:07:d7:de:a8:bd:0a:ce:f4:4f:95:bb:5f:be:27:
         e0:4b:8c:cf:61:26:0f:ca:58:c2:d6:31:53:83:23:50:d3:26:
         e4:1a:6d:14:b9:a5:b2:4b:38:c1:88:c5:6a:01:66:57:c1:d6:
         61:07:f7:f3:13:dd:97:f2:42:73:20:32:3f:24:3f:fc:dd:a1:
         87:ac:2b:bc:4f:78:ee:6a:7f:04:86:ba:fa:bc:f4:ea:cd:99:
         78:a8:f2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 16:38:26 2026 by rpki-client