Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/18f724ef-383e-3bf8-a08f-9ae025c5ab0c.roa
File:                     18f724ef-383e-3bf8-a08f-9ae025c5ab0c.roa (raw, json)
Hash identifier:          2MUZIP1gPFgYb4noNZ5H8IhJcvHNldD/37nWoP4qR3w=
Subject key identifier:   6A:82:90:EC:6A:7F:AB:AD:43:80:29:88:5E:C8:8E:A2:ED:20:C6:73
Certificate issuer:       /CN=6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c
Certificate serial:       010D0C9F4328584EED5240D9B51B3AC7394FA340
Authority key identifier: 89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/18f724ef-383e-3bf8-a08f-9ae025c5ab0c.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     20148
IP address blocks:        205.159.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:40:d9:b5:1b:3a:c7:39:4f:a3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=ebc1cf54-177f-474c-b5cb-2d5a995f5e3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:36:86:6a:93:c3:4f:7c:4c:7c:ea:73:1d:8f:
                    a8:ab:c6:2e:75:5e:5b:25:7e:38:e0:b0:c9:ac:71:
                    2d:3d:75:2c:8c:90:03:b1:ae:5f:1c:06:50:6c:13:
                    0d:51:b0:b1:bf:4d:84:32:a1:f8:cf:4a:af:60:1a:
                    3f:8f:80:3b:be:b7:c5:86:73:07:62:22:8f:34:98:
                    95:5b:13:77:c8:23:6f:fb:d1:b4:49:82:a6:11:be:
                    54:a8:05:a9:ce:d8:e4:66:e2:6a:4d:39:00:39:1f:
                    9e:cb:b2:81:a1:8a:2b:27:0c:f4:56:66:6d:ee:e1:
                    57:ab:da:f5:6a:4c:84:99:20:57:bb:04:bb:ad:76:
                    2b:6e:8e:f9:69:8b:e6:44:66:a2:2f:e4:cc:2d:32:
                    b8:c4:98:cf:5a:b4:81:84:6a:69:e5:95:cd:76:e0:
                    28:c6:05:e8:2c:b6:de:af:9e:5f:85:c4:61:25:4c:
                    4a:a0:f5:88:52:b6:8b:d5:a5:97:25:cd:94:5e:19:
                    2c:ba:41:19:52:e2:59:29:01:69:88:64:59:64:8d:
                    99:98:3b:d0:07:48:c6:24:fb:5f:1b:5c:fb:55:f0:
                    4d:6c:6e:a8:de:d6:a4:65:f1:c7:e6:54:2d:4a:38:
                    ec:3f:fd:91:c0:1c:49:e6:5c:27:03:89:9c:cc:d8:
                    19:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:82:90:EC:6A:7F:AB:AD:43:80:29:88:5E:C8:8E:A2:ED:20:C6:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/18f724ef-383e-3bf8-a08f-9ae025c5ab0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.crl

            X509v3 Authority Key Identifier:
                keyid:89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.159.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:95:5a:0b:70:5f:8a:dc:3e:59:70:b3:4c:b8:1d:0a:df:1c:
         8d:9e:2e:10:9a:4c:9b:8b:9f:6b:b5:ad:b9:68:27:fc:a7:73:
         f4:19:80:79:b0:6f:01:14:05:c5:5e:a4:58:d1:20:c5:e2:30:
         2a:7e:7b:6c:06:e0:cb:04:9f:d6:7b:28:71:fe:57:99:ca:29:
         f6:df:02:31:e4:1c:55:91:10:91:01:25:6b:b9:6d:7e:79:bf:
         8c:66:2e:16:88:a3:73:33:b6:07:2d:27:52:9e:79:4a:d3:c2:
         bb:21:2b:39:60:df:b7:ed:ce:16:f1:46:01:9a:2d:d3:7b:f4:
         a6:bf:c4:ed:30:86:b1:d1:9a:f1:95:76:bc:bc:8c:57:b8:70:
         74:49:4b:ff:4a:21:3f:e4:00:f7:11:e4:b4:b0:0a:ec:ee:aa:
         7b:c2:a1:f1:2c:50:69:94:ff:bb:1e:e8:ae:79:77:63:f0:5e:
         0d:b4:7a:80:2c:f1:e4:d0:5d:bb:e8:e1:de:91:60:e9:7b:a7:
         5f:99:79:30:a8:8e:f2:5c:d7:c9:a6:60:8a:7b:3c:c0:51:c0:
         2a:00:62:3d:2d:75:95:70:29:af:37:9d:02:01:72:b1:c8:7d:
         21:d5:b3:6c:5f:6b:14:56:7c:0a:98:16:dc:80:0a:26:bf:7b:
         75:d6:40:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 06:39:16 2026 by rpki-client