Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/5f3ec8cb-ba80-3e4e-967f-64266aa7f690.roa
File:                     5f3ec8cb-ba80-3e4e-967f-64266aa7f690.roa (raw, json)
Hash identifier:          Sc55/thJkzZ102J+Ea3qddk8MrSTYTpmTU3kAMyJuGc=
Subject key identifier:   1F:E6:EC:1F:C0:34:D9:FD:F0:66:76:97:B1:AD:75:E9:FF:06:B5:1F
Certificate issuer:       /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06
Certificate serial:       010D0C9F4328584ECE9C741DAB0AF43319E05B00
Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/5f3ec8cb-ba80-3e4e-967f-64266aa7f690.roa
Signing time:             Wed 12 Aug 2026 01:00:11 +0000
ROA not before:           Wed 12 Aug 2026 01:00:11 +0000
ROA not after:            Tue 10 Nov 2026 02:00:11 +0000
asID:                     396982
IP address blocks:        147.124.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ce:9c:74:1d:ab:0a:f4:33:19:e0:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06
        Validity
            Not Before: Aug 12 01:00:11 2026 GMT
            Not After : Nov 10 02:00:11 2026 GMT
        Subject: CN=fc67e88a-a96c-4f35-a030-d2f6efc600d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e8:75:29:91:ed:03:c8:ca:aa:dc:d0:3a:87:
                    4f:d6:9d:78:ee:df:6d:91:df:2c:2a:0b:2d:7e:99:
                    04:9c:e5:74:2e:35:ee:e2:68:7f:f0:d4:4e:e1:d2:
                    10:5e:43:d9:da:83:83:91:f3:da:70:f4:8d:31:41:
                    ee:77:01:78:4b:5b:dc:c4:f3:76:f4:df:0e:c8:fa:
                    63:65:dc:8b:20:37:2b:21:6e:e4:49:bb:77:70:cf:
                    a2:1f:34:ec:eb:9f:2c:2f:f3:61:39:41:9b:92:d3:
                    bc:51:7a:0d:80:6a:ac:bb:b3:47:2b:bf:b0:8c:f3:
                    0a:30:22:b4:2a:e5:e8:37:d2:97:b5:86:43:38:ef:
                    ce:6f:6a:df:d6:42:f5:9a:af:05:51:7e:18:22:0d:
                    79:73:38:b4:2a:0d:92:2c:95:bc:6b:84:3d:3c:06:
                    36:f9:60:e4:6b:ab:65:08:e5:4c:ab:f6:28:6d:fd:
                    69:cf:1f:96:8d:c3:14:90:23:bc:d0:70:37:1c:a3:
                    46:6a:c6:b4:41:db:d9:ec:6c:52:f4:f4:fb:c4:10:
                    57:50:b3:eb:1a:65:e6:e2:e3:19:e0:4a:f1:96:d0:
                    c2:75:bf:38:46:81:f2:d4:d8:b3:51:26:f6:71:d1:
                    69:b8:cc:77:94:d5:5a:19:5b:dd:ce:6d:c6:38:32:
                    4f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E6:EC:1F:C0:34:D9:FD:F0:66:76:97:B1:AD:75:E9:FF:06:B5:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/5f3ec8cb-ba80-3e4e-967f-64266aa7f690.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl

            X509v3 Authority Key Identifier:
                keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:47:25:e5:51:c0:12:03:0b:1e:87:0c:3e:18:c1:c8:be:3c:
         09:67:dc:30:19:18:a2:bd:a2:3d:b2:48:26:4a:62:4c:94:e4:
         74:cf:b6:49:b5:da:42:86:ab:e3:09:3e:68:83:ae:0b:c2:64:
         65:59:ae:70:66:15:61:e2:1b:01:de:b5:ad:ca:de:85:2c:a2:
         89:a9:3d:e8:72:3e:b4:36:6a:c9:79:2e:8e:f2:24:55:64:ef:
         66:2b:55:f3:18:1b:d3:6f:79:07:34:f8:fe:6c:dc:02:86:33:
         53:9c:91:89:9a:79:bc:6a:11:43:ef:ef:66:36:64:2d:86:ef:
         c4:f6:94:9f:ad:4c:d4:7b:9e:50:74:39:98:99:5f:69:b4:ba:
         bc:41:9c:a3:a6:16:10:8d:9b:79:fa:2d:ce:9f:5e:97:84:c5:
         84:36:c9:3a:bd:bd:e5:60:ba:a7:65:50:aa:12:b8:90:70:c6:
         32:8d:d5:f9:ef:0e:e3:54:05:f9:ce:29:15:46:3d:56:e5:e6:
         6a:f2:be:ff:15:0f:63:15:9f:a0:9f:5a:24:49:f7:74:88:c2:
         99:b0:3e:f1:72:83:2b:a7:66:85:57:83:71:ed:da:5e:96:e0:
         00:3c:bf:4d:e5:be:92:7d:07:7d:c3:bd:13:7f:51:02:63:ec:
         97:7a:cb:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:32:34 2026 by rpki-client