Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/be97c91f-e7a5-3d64-a9ee-7537b3eb686e.roa
File:                     be97c91f-e7a5-3d64-a9ee-7537b3eb686e.roa (raw, json)
Hash identifier:          9W/IDLfVwVCHFwJK7omz7gp2/RRDmJTrzpdWTFZzyf4=
Subject key identifier:   F8:FD:5A:83:2D:17:65:6B:E6:6C:76:0A:A4:83:1B:64:AE:FE:8A:51
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584EE0C2082C258400147F8530C0
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/be97c91f-e7a5-3d64-a9ee-7537b3eb686e.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     0
IP address blocks:        138.112.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:08:2c:25:84:00:14:7f:85:30:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=a0679ab9-8c4e-44bd-8a18-38ad8e8eec58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e1:fd:17:7c:76:d1:4d:b6:5e:43:78:f8:4e:
                    3e:17:17:de:62:c0:ed:a3:70:f8:e8:83:a6:13:48:
                    4a:56:c6:0b:b9:b5:32:1f:38:0b:12:a9:cd:e6:ac:
                    1f:d4:79:e1:2c:ce:d8:f4:38:dc:4d:b4:51:f2:d8:
                    57:72:cc:51:68:a5:be:8f:17:b4:dd:f9:3a:a8:e9:
                    8b:ce:c3:a4:05:f8:fd:d1:52:72:a9:9d:75:60:09:
                    89:56:88:c7:30:26:6b:dd:4e:1e:c6:dc:27:ee:e5:
                    c8:48:d8:c8:cf:9e:d7:8e:57:6d:b1:9c:d5:42:71:
                    4d:ac:70:a6:ff:8f:05:8c:e3:56:70:35:85:1c:09:
                    ae:58:5c:b6:8d:35:b4:61:a6:e6:04:91:ff:bd:ea:
                    59:e5:18:58:75:47:c0:9a:a0:3b:6a:14:00:ad:1d:
                    89:1a:2f:77:eb:6d:9f:40:4b:b1:0e:ea:8f:88:a4:
                    03:a0:3e:b5:99:dd:c3:13:e9:5b:5c:69:b1:d9:41:
                    e7:35:ea:87:ce:1a:86:29:f3:7b:69:be:43:46:95:
                    30:3c:0b:0c:b8:60:9e:a9:e9:61:a1:ea:c7:b8:3b:
                    4a:32:79:47:ae:7b:80:4e:1e:af:a0:90:0c:06:15:
                    98:4a:da:3e:bd:fc:42:ed:d3:5d:5d:fa:b6:7e:58:
                    d2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:FD:5A:83:2D:17:65:6B:E6:6C:76:0A:A4:83:1B:64:AE:FE:8A:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/be97c91f-e7a5-3d64-a9ee-7537b3eb686e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.112.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:51:e6:4f:51:92:ae:16:74:6d:d0:70:42:2c:46:81:ff:ca:
         9e:cf:63:7f:31:13:dc:5a:3b:a6:b6:45:15:19:71:9d:ae:e3:
         fa:3a:d9:ae:36:1f:04:9e:0e:23:42:45:9e:9b:b2:b0:2d:00:
         dc:8c:01:a5:9d:5a:93:a7:c2:20:db:06:6e:d0:83:a0:33:06:
         fa:f1:fe:46:9c:1c:33:43:b7:0b:36:77:04:3b:35:e9:7f:00:
         3d:fb:04:91:ee:47:5e:44:6d:fc:df:ad:14:89:7e:16:13:c5:
         f4:df:ac:83:c0:08:8e:19:5e:9c:89:24:ff:11:ea:6b:a0:32:
         1d:7d:b1:13:92:1c:bc:3d:99:df:e9:57:63:1d:d6:13:60:28:
         35:64:9c:22:fa:48:9d:ad:a7:d7:66:59:6f:f2:26:08:f1:63:
         ec:5b:95:47:ef:dc:c6:01:0b:0f:d7:56:94:0b:2b:31:5f:e1:
         b0:6d:61:b1:2b:c5:83:ea:ab:4b:8a:b2:29:1e:8d:d0:57:45:
         eb:b2:98:3c:63:13:03:f7:5a:81:45:54:2e:8f:3f:9a:92:34:
         22:24:96:32:b9:c6:70:6c:b8:85:94:93:b1:92:ce:64:e8:45:
         57:ef:3a:36:fd:c1:a8:19:d8:ca:9a:0b:db:7e:e2:11:f8:ba:
         14:5d:dc:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 22:28:51 2026 by rpki-client