Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/b8f1b0d4-5487-3c51-9f61-4e97726e3695.roa
File:                     b8f1b0d4-5487-3c51-9f61-4e97726e3695.roa (raw, json)
Hash identifier:          BXdD5RXwtQkbNqWHC7GhHHWmGeoENKXsEibwC/hBE24=
Subject key identifier:   86:3A:39:F2:04:E3:CD:88:F7:40:68:09:3A:6F:BA:A9:8C:49:DF:B6
Certificate issuer:       /CN=580e739b-bb2f-4e02-9a24-4813328e39cf
Certificate serial:       010D0C9F4328584F4974D36A0FCAF162E7889FD0
Authority key identifier: E7:79:6E:D4:0C:02:40:FD:99:B7:72:46:72:82:E5:A1:D4:89:C8:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/b8f1b0d4-5487-3c51-9f61-4e97726e3695.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     3736
IP address blocks:        204.138.71.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/580e739b-bb2f-4e02-9a24-4813328e39cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/580e739b-bb2f-4e02-9a24-4813328e39cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:d3:6a:0f:ca:f1:62:e7:88:9f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=580e739b-bb2f-4e02-9a24-4813328e39cf
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=16bf8194-a49e-4293-907d-cdef0dcfcb4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ad:d7:4a:f7:ba:27:a4:71:71:0e:69:cb:73:
                    69:e3:a6:23:17:3e:fc:f8:c8:8a:3b:e5:51:f8:a1:
                    f8:8e:d0:c5:02:37:36:f4:2b:b2:4a:cd:a3:3a:37:
                    b9:68:10:36:db:93:61:b1:17:79:71:2d:0b:2e:c4:
                    07:59:c2:fd:f9:d6:bb:c8:6c:3d:64:8a:23:d6:12:
                    ca:d2:2a:70:c0:69:08:55:a7:b1:b1:e6:7f:d0:06:
                    5f:a9:28:53:c7:79:dd:0b:dc:cd:53:11:2f:23:fa:
                    67:0c:00:df:28:90:55:f3:38:49:ab:f5:24:b9:aa:
                    7b:dd:f7:49:39:c8:ea:09:68:16:87:ca:76:ed:19:
                    0d:ff:32:83:a8:fc:8b:98:e9:7c:73:0a:5f:d4:d3:
                    c3:34:01:cf:1f:ec:d1:c7:35:59:97:f0:19:c1:6f:
                    0b:2c:14:e3:b1:ea:67:7b:72:a8:1c:5c:94:e1:77:
                    02:29:e9:37:6f:6c:6e:0d:b1:f9:a4:95:f2:9c:54:
                    91:d6:3c:f6:d1:36:8d:40:fc:94:72:de:0c:a5:10:
                    ca:5f:ba:98:59:01:14:64:51:64:32:b0:8b:b9:e1:
                    b7:57:93:69:2b:7c:d2:77:5f:f9:3b:0e:fd:ab:8e:
                    e9:17:d8:91:bb:9f:60:aa:c6:45:c0:f8:7c:82:4e:
                    a6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:3A:39:F2:04:E3:CD:88:F7:40:68:09:3A:6F:BA:A9:8C:49:DF:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/b8f1b0d4-5487-3c51-9f61-4e97726e3695.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/580e739b-bb2f-4e02-9a24-4813328e39cf.crl

            X509v3 Authority Key Identifier:
                keyid:E7:79:6E:D4:0C:02:40:FD:99:B7:72:46:72:82:E5:A1:D4:89:C8:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.138.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:6f:79:a0:10:f5:37:fb:5e:46:24:50:95:b6:12:5e:53:95:
         e9:20:8c:fa:63:4f:b0:7b:ef:b8:10:2a:07:e5:dd:0e:5f:3f:
         ec:8b:74:9e:07:a8:59:c0:97:7a:24:21:02:19:e6:89:24:a3:
         f4:b4:9b:ba:a4:ab:d0:b6:21:e5:a1:a0:f0:d8:f8:eb:7b:8e:
         68:6f:0c:8b:0e:44:22:19:b8:5a:99:1c:26:1d:29:2b:69:90:
         c7:fd:e2:1f:79:ac:f5:6b:15:53:cb:fb:37:46:03:d3:98:e7:
         ab:9d:98:fd:27:9c:ca:0e:ce:ee:30:4d:0e:52:a4:1e:72:c6:
         6a:f6:59:d8:b7:6a:47:5d:af:37:03:fe:74:d4:61:ec:43:5b:
         92:90:c0:21:f4:3b:27:bb:6b:5e:23:62:71:c2:dc:b6:5c:9e:
         78:35:6a:63:a1:cb:bb:7b:4d:fb:96:c0:24:89:df:43:2a:0a:
         2b:d6:10:ac:83:b1:21:b0:31:4c:2a:bc:cc:0a:54:42:eb:58:
         85:5f:6d:0e:9c:f6:bb:d9:45:49:02:1d:e0:a2:13:68:a8:fe:
         f3:7c:b3:a0:86:1e:ce:8d:97:fa:73:de:ef:3a:af:d1:56:29:
         da:ab:5f:7d:f9:cc:c4:40:b1:c6:6f:5d:b9:05:16:77:3c:e8:
         5b:3f:60:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 01:39:51 2026 by rpki-client