Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744/06537eb2-c80f-309c-8d61-2677bd769f26.roa
File:                     06537eb2-c80f-309c-8d61-2677bd769f26.roa (raw, json)
Hash identifier:          lbefk4OG54+QxGvTWSVBk3rGxzvtE8tCnoc6RcRFSzk=
Subject key identifier:   0C:27:11:BC:48:D5:BC:01:99:B6:6D:CC:69:E9:E4:C6:DD:41:FB:39
Certificate issuer:       /CN=c768f2c1-f55b-4ae8-a44c-b9b6062d3744
Certificate serial:       010D0C9F4328584F0C02C3CA961E557F9433FEC0
Authority key identifier: EE:4F:45:A3:B5:11:B2:C3:B7:83:36:11:41:5E:BA:95:F6:CB:6D:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744/06537eb2-c80f-309c-8d61-2677bd769f26.roa
Signing time:             Thu 03 Sep 2026 00:50:43 +0000
ROA not before:           Thu 03 Sep 2026 00:50:43 +0000
ROA not after:            Wed 02 Dec 2026 01:50:43 +0000
asID:                     62044
IP address blocks:        149.24.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744/c768f2c1-f55b-4ae8-a44c-b9b6062d3744.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744/c768f2c1-f55b-4ae8-a44c-b9b6062d3744.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0c:02:c3:ca:96:1e:55:7f:94:33:fe:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c768f2c1-f55b-4ae8-a44c-b9b6062d3744
        Validity
            Not Before: Sep  3 00:50:43 2026 GMT
            Not After : Dec  2 01:50:43 2026 GMT
        Subject: CN=1224422f-8452-40d6-8dc2-295f5b927e15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:35:5c:92:ad:da:2f:9d:59:f4:d4:3c:b5:4a:
                    05:f8:36:e9:6d:1e:4b:5f:ca:a2:37:54:85:fe:2b:
                    c6:eb:39:ac:79:47:5b:3b:74:98:a6:8a:81:5a:df:
                    04:ec:dd:16:aa:c1:a4:2a:d0:f6:f0:4a:43:00:e3:
                    1e:52:2a:51:0f:04:53:dc:88:05:29:4a:68:92:32:
                    04:12:7a:2f:07:e5:f9:0e:07:08:2c:ce:d7:54:5c:
                    f5:09:9f:86:09:c4:be:13:3f:68:f0:dd:2c:3f:42:
                    42:3f:ca:10:78:e7:bd:56:2d:c9:e7:8f:29:14:23:
                    9a:71:5b:af:2b:22:96:35:4c:bd:00:bb:c4:0a:2d:
                    0a:b0:e0:7c:3c:e7:e5:57:a4:39:c1:04:52:09:6e:
                    c6:65:b9:57:88:d1:07:1a:ee:db:fe:ac:a6:ca:97:
                    14:7e:95:75:73:e0:46:3a:cf:24:9b:c1:95:25:b3:
                    3e:62:4d:64:1f:fc:18:f9:bc:58:1a:82:d9:7a:98:
                    89:43:c7:56:61:cd:c1:66:d4:6d:62:ce:39:c6:15:
                    10:f1:c9:c9:2b:0b:ab:d5:f8:bf:df:a9:ed:f6:d1:
                    49:13:f5:70:d9:e4:70:88:c4:22:d3:ab:ec:e7:b6:
                    9e:9c:2d:ef:30:7b:fb:71:fc:85:2a:26:69:b1:c2:
                    9a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:27:11:BC:48:D5:BC:01:99:B6:6D:CC:69:E9:E4:C6:DD:41:FB:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744/06537eb2-c80f-309c-8d61-2677bd769f26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744/c768f2c1-f55b-4ae8-a44c-b9b6062d3744.crl

            X509v3 Authority Key Identifier:
                keyid:EE:4F:45:A3:B5:11:B2:C3:B7:83:36:11:41:5E:BA:95:F6:CB:6D:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.24.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:6d:64:67:17:11:77:a9:99:97:89:9e:53:ed:e6:7e:ad:f5:
         b8:7b:29:e3:ff:f3:ad:8c:3a:9a:32:fa:6f:f8:2c:df:39:91:
         99:e1:dc:12:fd:dc:64:7a:3b:ef:94:13:7a:21:f4:f6:66:3a:
         d9:95:76:c0:6c:b4:7a:64:fe:de:6f:2f:dd:45:48:ba:6a:51:
         d2:f6:de:94:bb:86:58:2f:34:a9:31:fb:95:1c:44:67:18:7e:
         44:eb:5d:62:73:03:1e:22:80:5d:65:99:1d:d0:74:bc:87:c5:
         ae:7f:f9:8a:10:73:55:fc:58:f1:14:3a:ec:c5:96:1c:cd:72:
         52:8b:e4:43:61:10:ea:7c:94:ef:2c:8c:9a:a8:c6:b7:c1:c0:
         36:31:74:db:60:47:2c:19:80:1a:6b:bb:3b:0d:3d:c4:28:f7:
         bf:df:f5:82:4d:d5:4c:1e:cc:21:e6:4e:4f:e6:42:e6:55:84:
         19:6d:c1:d3:43:1b:5d:04:3b:4b:5b:d7:10:a4:bd:6a:f4:4d:
         56:46:e1:9e:da:36:0d:93:82:91:e2:0a:31:c7:f0:2b:44:f7:
         58:89:b0:ab:31:93:f1:8a:86:52:e3:b8:1f:25:46:9b:18:b6:
         81:86:bf:b2:9a:39:2e:01:33:ed:c9:e1:d5:8b:2a:bc:49:86:
         90:14:a3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 16:38:06 2026 by rpki-client