Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/6e935ba7-eeed-3ba5-9a90-345c4292fbd5.roa
File:                     6e935ba7-eeed-3ba5-9a90-345c4292fbd5.roa (raw, json)
Hash identifier:          VKGFT4HlKiiYFZAKNY7zJrZWB8Tgny9pKUHpl+gzw18=
Subject key identifier:   C7:49:E3:F5:28:47:14:EB:A6:E8:54:5D:12:C3:18:A9:11:9D:25:1B
Certificate issuer:       /CN=109078e4-3ad5-4242-9f3e-058161c97a9f
Certificate serial:       010D0C9F4328584FAB28A745702D18CE84558C80
Authority key identifier: D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/6e935ba7-eeed-3ba5-9a90-345c4292fbd5.roa
Signing time:             Fri 30 Oct 2026 01:00:13 +0000
ROA not before:           Fri 30 Oct 2026 01:00:13 +0000
ROA not after:            Thu 28 Jan 2027 02:00:13 +0000
asID:                     2572
IP address blocks:        150.199.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:ab:28:a7:45:70:2d:18:ce:84:55:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=109078e4-3ad5-4242-9f3e-058161c97a9f
        Validity
            Not Before: Oct 30 01:00:13 2026 GMT
            Not After : Jan 28 02:00:13 2027 GMT
        Subject: CN=2fb2ba9f-df50-42a4-83a6-0eeec0d62739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:42:28:eb:29:33:e6:20:69:dd:11:62:c4:13:
                    92:02:31:5b:52:89:6c:11:b5:cf:23:e4:8d:e6:1a:
                    e5:c5:85:e8:12:a5:00:85:4d:74:4d:b9:92:7e:93:
                    3d:1a:4c:7a:d6:0c:ce:ba:c6:13:d5:5d:c0:a9:c0:
                    09:0a:73:0d:fa:dc:9c:98:15:2c:b0:c9:cc:41:c6:
                    e7:34:ec:4c:92:98:53:0d:fc:fb:2b:42:42:c5:78:
                    c7:ed:a9:b8:41:dc:c6:cc:71:6e:57:c4:51:9a:0e:
                    58:99:56:1c:f8:b6:32:c0:f4:94:af:ea:6c:46:36:
                    53:e3:a9:d3:e5:5d:5b:69:bf:1a:94:f2:77:51:ac:
                    3a:19:85:6e:a0:d8:bc:a4:07:ef:db:22:69:07:c7:
                    a0:b2:16:58:20:0b:d2:e7:1b:31:c9:9d:ef:76:66:
                    8b:ca:66:59:f7:60:5c:92:62:a4:47:9d:81:24:3e:
                    2f:a0:f6:43:e4:27:01:62:f2:a0:5f:85:f1:eb:94:
                    d7:2d:0f:de:d7:38:fc:06:4d:a1:9f:b3:81:99:98:
                    0e:54:f1:10:18:c9:3e:6b:6f:8b:b1:31:ac:ce:a9:
                    c6:35:77:69:cb:f9:0c:2c:e2:b4:0f:bf:79:65:97:
                    d1:66:38:fb:cf:aa:e0:25:24:f8:fe:93:c3:4e:fc:
                    3e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:49:E3:F5:28:47:14:EB:A6:E8:54:5D:12:C3:18:A9:11:9D:25:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/6e935ba7-eeed-3ba5-9a90-345c4292fbd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl

            X509v3 Authority Key Identifier:
                keyid:D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.199.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:4d:27:d4:43:87:db:be:9e:3f:93:83:0e:b7:bf:1e:0b:53:
         fd:bc:54:9b:9c:a7:38:1c:a6:87:ec:56:0e:19:a0:46:3f:8a:
         f4:36:01:82:00:82:05:d9:08:af:90:78:6e:b7:c0:47:ab:36:
         cf:96:cd:c8:1a:d2:4e:31:5d:1e:e9:5f:e9:98:98:ad:e5:0f:
         bd:7c:b7:09:17:12:b6:ed:41:a0:51:28:4a:41:24:ac:8b:61:
         f9:c9:84:dc:95:a9:39:0a:c0:7b:2e:84:72:83:16:c0:77:25:
         51:68:31:6f:d3:12:8a:5b:8a:c0:2a:4a:95:95:ac:8d:ff:f8:
         03:5b:77:1e:21:c0:69:59:d4:b3:43:c7:34:75:d1:d4:d3:bc:
         45:f3:94:6e:dd:9a:8a:7d:58:d9:23:0e:0c:b3:01:e0:97:f2:
         07:e5:26:19:c9:08:da:f4:a9:f8:a9:2e:e6:e7:13:88:44:63:
         7c:74:37:ee:16:c2:96:51:65:66:82:58:ce:b4:ef:61:34:41:
         b9:18:c4:ae:03:b6:63:a3:b4:f6:d6:1e:00:32:fe:97:49:df:
         be:50:0c:98:42:1a:15:79:3d:88:20:32:f4:09:ae:a8:b5:34:
         0c:fb:3a:a3:0a:18:1d:12:f6:51:c9:db:57:2f:e6:d1:2a:70:
         ee:4d:e8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 02:45:38 2026 by rpki-client