Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/0b60ba4e-3809-3036-aeb8-df72baa10446.roa
File:                     0b60ba4e-3809-3036-aeb8-df72baa10446.roa (raw, json)
Hash identifier:          iM/88vUjPg3v6vg4vjisYeE85n4mfgTwwxB2qYmirBI=
Subject key identifier:   CC:FC:F6:64:6F:29:B2:2A:9A:79:2B:A9:FA:BD:D3:2E:C3:A6:C6:17
Certificate issuer:       /CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
Certificate serial:       010D0C9F4328584EA788239583861761B2765D00
Authority key identifier: 5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/0b60ba4e-3809-3036-aeb8-df72baa10446.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     1299
IP address blocks:        204.156.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:23:95:83:86:17:61:b2:76:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=adcb99f1-42b8-40f5-8181-051cd3ccc564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c8:86:55:c7:80:35:62:f8:e0:23:01:9a:16:
                    63:e6:23:4d:08:55:93:7a:be:c2:fd:53:6a:07:d0:
                    aa:24:6f:98:81:ef:8b:53:47:96:9c:76:d3:98:db:
                    cc:32:de:1c:83:41:56:e5:ca:59:e0:b9:e7:e7:0b:
                    7d:d1:52:56:96:b9:c5:86:4a:25:d4:08:cd:63:3e:
                    1a:84:00:95:37:50:1a:01:e1:96:eb:ac:f3:3a:38:
                    d0:0d:b2:dc:bd:3a:e4:98:d7:5c:81:97:ef:02:7e:
                    65:cf:7d:81:ac:15:d9:7b:57:58:6f:38:04:b6:77:
                    b9:54:2e:57:00:4b:72:b6:35:59:0c:70:5d:76:96:
                    35:37:98:29:bb:7c:33:78:aa:2e:d9:ec:35:9f:32:
                    33:e1:9f:3c:17:f3:86:40:41:5d:61:b8:57:fc:28:
                    4c:12:94:4b:5e:03:60:71:58:aa:f7:9e:8e:4e:02:
                    b9:34:de:05:fb:94:38:3d:b6:16:44:38:0c:f4:7d:
                    90:b7:90:63:53:da:1e:e8:15:12:05:55:e9:a9:80:
                    d3:ae:ee:58:f8:73:5d:d8:f5:47:82:4c:44:ff:4e:
                    05:c3:f4:da:1c:fb:34:74:90:f2:a2:ca:29:95:67:
                    21:2f:be:07:88:49:b6:01:5a:cf:2c:aa:ca:90:95:
                    a7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:FC:F6:64:6F:29:B2:2A:9A:79:2B:A9:FA:BD:D3:2E:C3:A6:C6:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/0b60ba4e-3809-3036-aeb8-df72baa10446.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.crl

            X509v3 Authority Key Identifier:
                keyid:5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.156.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:1c:b5:d8:68:9d:f6:62:27:63:1e:5b:03:5b:42:df:f8:9e:
         f7:c1:34:81:4a:7f:86:b9:34:bd:28:00:2c:f8:2b:ed:70:b8:
         a0:0d:67:ab:33:53:90:f1:c1:1b:68:ca:34:20:f9:a0:98:12:
         a4:c1:ae:29:36:eb:e0:73:0e:c8:44:6e:4b:23:07:fc:bf:de:
         26:10:d5:90:87:12:24:fc:de:5a:06:ac:de:32:49:fe:a6:4c:
         e3:58:22:27:48:2d:76:57:1f:22:9d:a6:43:75:b2:8f:86:c7:
         47:cc:3b:f9:46:f8:8a:8b:9c:e9:c7:45:11:3e:b3:e0:04:ae:
         e1:ce:48:9f:88:55:cb:6f:c9:ff:ee:c2:22:96:0a:b4:f1:7d:
         bb:e0:a8:eb:ab:69:74:64:e9:75:78:a3:bc:46:fa:f4:ac:39:
         fc:fb:f9:4f:8f:1b:41:52:9e:95:e8:19:30:04:f3:e0:2c:b8:
         2e:71:1e:8b:a1:b0:1a:7b:72:98:cd:60:9d:10:fb:9e:d1:7d:
         56:e2:07:85:9c:11:61:ad:37:6b:37:ca:9f:d4:d6:20:a2:f3:
         a8:8e:13:7a:73:ca:a7:a7:be:bd:f7:dd:48:5c:c7:2f:00:3a:
         f6:a8:d8:0f:63:d9:7c:29:9f:a3:fe:8c:ac:fc:7f:ee:41:c9:
         fe:e9:89:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:41:55 2026 by rpki-client