Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/36d4e5ce-3fa3-3a57-b42e-d578d62fcc6f.roa
File:                     36d4e5ce-3fa3-3a57-b42e-d578d62fcc6f.roa (raw, json)
Hash identifier:          GtW9ovCXgTZAVOYK4M9NWOa7L9fIaaIpr4ciRSwM9+0=
Subject key identifier:   4E:A6:05:36:3D:D0:49:CD:C8:85:02:ED:15:4A:2C:AF:0C:D0:61:29
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EBCC2F801A384C47623D3B7C0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/36d4e5ce-3fa3-3a57-b42e-d578d62fcc6f.roa
Signing time:             Wed 05 Aug 2026 15:33:19 +0000
ROA not before:           Wed 05 Aug 2026 15:33:19 +0000
ROA not after:            Tue 03 Nov 2026 16:33:19 +0000
asID:                     205299
IP address blocks:        149.86.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bc:c2:f8:01:a3:84:c4:76:23:d3:b7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug  5 15:33:19 2026 GMT
            Not After : Nov  3 16:33:19 2026 GMT
        Subject: CN=2bc95bc8-0a97-4e7a-943a-c3b3432c5d85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:08:bf:87:8e:06:18:3d:60:ad:ad:5e:63:ac:
                    eb:20:66:6d:c5:08:0c:3c:9c:f5:65:9d:94:5f:fc:
                    7f:f5:4a:06:a8:24:99:3d:f5:42:1b:4c:54:bd:74:
                    cc:f4:62:fb:68:47:71:07:bc:cd:2c:4a:61:e6:5f:
                    a8:bb:ed:84:71:b1:a5:0b:d2:4b:2c:97:ff:06:fc:
                    4a:c1:85:4f:a3:59:aa:d6:83:0d:39:32:2b:bc:c6:
                    54:e9:e1:2b:31:ba:26:a8:20:56:ac:f5:c4:0f:cc:
                    3e:ef:d1:29:99:b6:4a:bc:86:ff:e9:96:74:ba:67:
                    77:d1:27:d1:d9:a6:34:0c:28:3e:fa:6c:d1:a7:45:
                    c5:10:c2:f9:23:f4:fb:cf:7b:54:83:f0:9b:6d:12:
                    36:b4:59:7b:68:fe:cc:df:88:1d:c6:4b:44:5b:8f:
                    a4:12:f0:8f:55:20:22:48:7c:57:bc:c0:f9:2a:85:
                    8e:b9:85:0f:21:cb:bb:38:36:23:02:7b:60:d1:85:
                    f4:d4:91:1c:a4:3f:0f:7d:68:c3:1c:77:96:03:e9:
                    88:58:53:9e:c5:b7:75:69:ee:b7:d7:38:65:f7:c6:
                    51:c6:1f:17:62:cc:3d:8e:d3:ed:87:65:ba:03:a6:
                    91:01:38:2f:cb:8b:b9:57:f9:ab:1d:7c:c7:e7:aa:
                    51:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A6:05:36:3D:D0:49:CD:C8:85:02:ED:15:4A:2C:AF:0C:D0:61:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/36d4e5ce-3fa3-3a57-b42e-d578d62fcc6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.86.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:16:fa:a9:06:28:ce:12:bb:34:6d:3a:d6:44:b4:34:55:a3:
         63:fd:37:99:66:46:1e:d8:ed:ee:7a:d2:75:39:7a:38:3d:f7:
         22:33:ab:88:89:7b:e5:87:c1:b8:10:5a:22:c9:3c:6f:21:e8:
         c2:54:d4:f0:ea:42:7e:e5:f5:ce:92:b2:92:26:34:c6:6a:f1:
         fc:56:f4:63:ff:05:09:fc:bd:58:52:8a:e4:d0:69:46:c6:46:
         aa:00:c9:ba:7b:38:28:70:8d:8a:05:34:2c:63:77:71:78:ff:
         b0:2f:c6:d0:da:53:20:20:88:e9:24:53:13:bc:fe:13:f0:b0:
         b0:7b:c7:cd:1b:ae:db:9a:e3:cc:34:dc:78:ec:16:7b:cc:74:
         3b:e8:11:8d:87:14:28:48:20:56:43:b6:68:52:04:7d:1f:3f:
         cb:cb:1c:89:c1:be:0f:8a:b1:bd:39:49:77:3b:f5:a2:12:da:
         e1:0c:f3:f3:80:a6:f7:8a:0d:d5:9c:99:3b:92:94:94:2d:d4:
         2a:c7:06:58:65:f6:cd:a0:6f:ea:7b:bd:8f:cd:d0:21:52:66:
         b7:2e:ad:4d:00:6d:5f:a7:ba:ee:94:2a:48:48:1c:ff:1c:d3:
         1b:1d:ce:d1:ee:98:dc:5a:82:c6:b0:f9:1e:4c:c6:28:97:55:
         50:c5:52:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 19:10:44 2026 by rpki-client