Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/ba6b1a75-088e-30b8-a0f9-700a23d4f756.roa
File:                     ba6b1a75-088e-30b8-a0f9-700a23d4f756.roa (raw, json)
Hash identifier:          LzS2leHh8ngFdYgwuKrYaEAUF+1tJdtccJh3pm1tj3c=
Subject key identifier:   5A:B4:26:ED:63:7F:8E:A4:F9:33:7B:13:B7:93:4D:B3:6F:50:31:E8
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F4328584EC0A729EDDB6A1D50A7041D00
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/ba6b1a75-088e-30b8-a0f9-700a23d4f756.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     197715
IP address blocks:        104.156.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:29:ed:db:6a:1d:50:a7:04:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=f8085a27-fa80-4fcb-bfdf-32eb917e5bcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:95:6d:46:a1:e8:79:0f:1f:eb:f5:e6:d2:a3:
                    42:cf:ea:94:52:74:17:7e:a4:9e:77:53:ed:d0:a0:
                    5c:af:5b:3d:fc:51:43:bb:56:01:f5:34:fb:52:8b:
                    22:7b:f9:20:35:ae:7c:a3:32:8f:ea:0b:6e:b4:dc:
                    90:29:1c:75:11:17:fa:e0:ef:89:f9:70:85:de:b0:
                    10:68:c6:52:af:b3:36:cf:c7:f5:2a:b3:67:64:77:
                    2c:44:65:f2:8e:e3:bf:9e:1d:e5:86:0d:cf:b5:3c:
                    bf:38:1d:d4:4a:a3:36:a1:c0:35:d9:ab:04:da:60:
                    25:d0:67:af:8b:ec:a7:86:b8:8d:38:e5:a6:50:98:
                    cc:42:dd:eb:a8:fb:5e:98:1f:e8:a2:c3:73:6d:0d:
                    dc:d8:d3:01:ca:3c:3f:73:9d:6a:4f:7a:cc:9a:e3:
                    08:22:33:d1:6b:0e:b5:c6:6a:4a:8b:2d:4c:32:da:
                    93:f2:1a:6d:49:b2:06:29:d8:02:a3:61:73:ba:03:
                    af:df:8d:36:5e:fc:79:41:b3:2b:42:5b:97:d1:e3:
                    d0:99:39:91:5d:f1:b5:ae:69:70:fa:b4:39:76:27:
                    39:46:3b:2d:12:83:72:c6:0d:d8:19:5e:c9:b0:4f:
                    28:2a:fd:b7:9f:b8:93:02:7d:d2:bf:98:e2:14:35:
                    5d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:B4:26:ED:63:7F:8E:A4:F9:33:7B:13:B7:93:4D:B3:6F:50:31:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/ba6b1a75-088e-30b8-a0f9-700a23d4f756.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:38:07:73:5d:50:a7:51:2a:1e:57:59:eb:61:ca:b8:0f:85:
         79:6c:9e:ab:70:f2:ca:7b:dd:1f:e3:d2:d3:89:9a:06:69:70:
         e7:8a:33:32:56:d8:65:e4:0f:e1:79:08:15:ce:a6:ce:93:87:
         a6:4e:af:0f:55:4e:a5:66:f8:c8:cc:18:d0:db:35:f1:9f:30:
         8f:d2:38:55:6f:68:59:e1:18:dc:e6:fc:6a:e5:56:35:d1:a7:
         54:7e:ab:91:71:b6:1b:d0:4a:c2:85:9a:47:0b:f7:ab:4c:7f:
         9b:31:19:2e:2f:06:ec:cc:01:da:5d:96:1d:f0:ec:74:1e:d8:
         51:8a:a1:e9:f9:e4:ab:25:da:7f:56:cd:7c:82:cf:c2:9f:37:
         8d:9f:e9:86:00:c7:ae:34:d0:67:61:8c:29:53:8a:da:d8:ea:
         8b:e5:42:a3:b3:da:8c:44:c3:c8:1b:13:91:fe:a7:3f:97:6b:
         89:7e:e5:bb:e2:68:2e:63:ec:58:65:41:29:72:c9:8b:b7:13:
         8d:c1:03:76:88:d9:ac:09:53:e7:9e:16:33:33:b1:37:f5:40:
         39:a6:20:68:45:8c:81:ef:62:37:7c:fe:ae:78:2f:c0:f5:59:
         e2:f1:ce:83:c9:d8:76:91:ce:18:a2:52:d1:cd:26:14:b2:05:
         4d:ca:ae:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:49:04 2026 by rpki-client