Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/baf94aea-92c9-395f-bc80-e9f80301e654.roa
File:                     baf94aea-92c9-395f-bc80-e9f80301e654.roa (raw, json)
Hash identifier:          mbX+LXzo4j/iujPlE0F3Kf3rLZGtY2GtTumjOl4kW1A=
Subject key identifier:   15:C0:37:E1:B1:F3:6A:01:BF:D0:8D:85:23:4D:20:CA:EF:28:46:D2
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584EA798C76873DE0C6009F4F240
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/baf94aea-92c9-395f-bc80-e9f80301e654.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     0
IP address blocks:        174.134.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:c7:68:73:de:0c:60:09:f4:f2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=807a4d72-491e-4bcf-ad4c-3be1791f0b96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:a3:4b:7e:27:65:4a:f0:74:96:9b:eb:f8:03:
                    16:a6:9b:58:4f:45:dd:4c:44:93:09:67:ab:a3:d5:
                    70:91:4b:4b:51:54:5a:f0:2b:fd:00:20:d4:83:d1:
                    b6:a9:f5:d3:32:f6:77:47:c1:de:0b:84:06:20:bf:
                    3b:14:83:53:6a:4e:57:3a:61:60:0e:4d:53:46:9f:
                    0c:63:2c:15:dd:c8:ed:3d:0d:ac:13:00:b4:fb:48:
                    97:b5:5b:82:0c:6f:ae:77:e1:cd:f9:e5:61:3d:d5:
                    9d:d3:03:a9:3e:f6:c2:ad:f5:23:dd:77:29:e7:99:
                    15:c6:b6:87:76:00:34:ea:11:2e:d7:34:e2:a2:14:
                    37:2d:2c:e9:bb:71:aa:c9:7f:41:d1:03:1c:2a:ad:
                    c9:73:bf:11:e2:86:1c:47:cc:42:58:fe:b9:cf:fd:
                    4f:53:f4:e2:4a:0a:87:72:65:7c:08:86:24:4a:44:
                    07:1d:d0:d5:e9:6f:23:3d:6a:a3:3d:90:9e:f1:96:
                    b1:bd:08:14:08:e3:f2:b8:e7:3a:ab:f3:26:82:d7:
                    b7:2e:ff:07:bb:c8:88:cf:80:4e:a4:0f:78:c8:39:
                    44:0b:33:36:ff:cf:3a:8f:ee:e0:ec:85:7b:d9:7f:
                    f8:01:43:a9:da:c3:b3:09:67:61:78:be:2d:1a:6b:
                    00:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C0:37:E1:B1:F3:6A:01:BF:D0:8D:85:23:4D:20:CA:EF:28:46:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/baf94aea-92c9-395f-bc80-e9f80301e654.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.134.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:78:57:80:aa:20:c9:79:7a:65:fc:f8:cc:97:50:9c:29:8f:
         89:14:63:ec:09:0a:c4:72:fc:fa:8b:53:cf:c4:16:ca:1d:3c:
         0e:b8:24:b2:47:10:57:84:78:7d:3f:4a:95:14:f2:51:95:d9:
         71:35:67:37:72:43:e1:4a:05:80:cc:37:4e:2e:b2:41:d5:5c:
         53:d5:d5:57:49:4d:6c:24:98:b5:21:36:7d:00:08:ec:cc:cc:
         13:b1:17:8e:a5:19:d2:d3:8f:5b:0b:e4:42:3a:b3:0b:68:cc:
         76:14:a5:f3:09:13:5b:13:1d:e7:6d:ad:c7:a1:06:1a:2b:70:
         5b:92:c7:05:de:f3:49:b0:b4:66:09:35:df:e6:5b:f2:cb:88:
         98:dc:90:24:9e:72:9e:af:0b:f0:7f:75:26:6a:e8:09:cd:90:
         01:81:62:3b:f3:ae:74:8d:22:72:76:f1:e8:47:76:1f:d6:0a:
         27:86:18:f1:91:09:90:d4:d2:ad:3f:6a:f9:38:ef:7e:fc:d5:
         1d:f3:4c:15:79:0c:6d:8c:5c:04:bd:c5:a3:57:3d:d8:6e:11:
         d9:6f:51:48:de:80:1f:98:1c:76:3f:22:7d:94:d6:99:64:5d:
         70:f3:2f:ee:e8:83:25:d1:a9:f8:b4:c1:71:b4:70:c2:09:77:
         de:23:c6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:57:29 2026 by rpki-client