Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/6dd2edb6-d2bf-3928-96d5-5d669e7b5706.roa
File:                     6dd2edb6-d2bf-3928-96d5-5d669e7b5706.roa (raw, json)
Hash identifier:          UZAg3mVUw0/YzI7tBGo4mOn2rcy2o7RoXULWBNVcyig=
Subject key identifier:   BB:24:A4:50:34:F3:9C:A5:48:70:65:BD:51:88:FB:2C:5B:29:8F:43
Certificate issuer:       /CN=045c7c3d-72a4-421d-b41a-d5e7e2534107
Certificate serial:       010D0C9F4328584ECD372293ED15B3ED55EF6280
Authority key identifier: 98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/6dd2edb6-d2bf-3928-96d5-5d669e7b5706.roa
Signing time:             Tue 11 Aug 2026 13:00:11 +0000
ROA not before:           Tue 11 Aug 2026 13:00:11 +0000
ROA not after:            Mon 09 Nov 2026 14:00:11 +0000
asID:                     3807
IP address blocks:        150.131.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cd:37:22:93:ed:15:b3:ed:55:ef:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=045c7c3d-72a4-421d-b41a-d5e7e2534107
        Validity
            Not Before: Aug 11 13:00:11 2026 GMT
            Not After : Nov  9 14:00:11 2026 GMT
        Subject: CN=8ba486c7-0270-4bcf-942f-7de296531a19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:82:b8:5a:a3:38:f8:34:6e:dc:10:3f:f6:e2:
                    64:aa:08:fc:98:e7:7a:ba:b0:1b:82:38:70:dc:f9:
                    23:1b:1d:4c:13:b5:26:f2:5b:84:07:a3:0c:9d:31:
                    17:31:5a:c7:1a:40:34:ea:1c:bb:fb:ff:85:f6:72:
                    5f:67:f6:c5:5f:f2:02:28:42:db:83:fd:91:2d:28:
                    9b:a0:86:8e:49:f8:97:95:ca:60:81:9e:93:7c:11:
                    f9:8e:ac:6a:e4:99:a8:7c:5a:31:56:a0:ba:3b:dc:
                    7a:fe:ff:58:61:a5:32:66:7b:62:43:9a:45:18:02:
                    4f:fe:27:14:f3:04:42:f5:75:c7:b3:cb:6f:66:55:
                    ca:1d:6b:b3:ee:89:a3:38:ee:26:18:ec:4d:ac:40:
                    1a:45:0e:47:9b:ad:08:5c:6f:f9:dc:ab:20:67:17:
                    64:f7:61:15:b0:23:3f:a2:ac:6e:63:34:1e:e2:f4:
                    5a:6a:fb:64:92:93:00:2b:7a:8f:23:4c:ab:f6:1b:
                    d4:83:7c:3d:65:2d:96:ac:65:65:70:d8:91:e2:d6:
                    94:57:6f:b2:f1:ff:20:1a:cb:97:27:66:63:35:8d:
                    06:db:45:6b:67:d8:0b:bc:45:d1:45:f7:9f:0d:78:
                    f6:a0:98:f8:7c:5a:fd:4a:57:9f:ac:c1:95:25:70:
                    87:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:24:A4:50:34:F3:9C:A5:48:70:65:BD:51:88:FB:2C:5B:29:8F:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/6dd2edb6-d2bf-3928-96d5-5d669e7b5706.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl

            X509v3 Authority Key Identifier:
                keyid:98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.131.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:a8:f9:56:48:a7:0c:2f:d7:f1:1f:7e:5f:e3:da:bb:33:89:
         06:96:16:29:3d:fa:91:6c:22:24:b4:5a:6d:ce:33:26:b2:f5:
         6b:15:a0:d1:ed:5f:9b:dc:f4:ca:21:f1:03:1a:00:7e:20:68:
         af:40:c9:f6:a8:05:c5:93:9f:79:2f:ae:f2:64:fd:03:58:87:
         27:a4:77:3d:0f:32:6c:ac:78:12:74:f8:6d:04:0d:6c:49:d5:
         1e:37:36:72:73:cb:10:f3:7d:d8:d8:73:3a:07:27:97:1a:be:
         c7:06:3a:77:b5:32:46:a1:a6:5f:ff:3b:84:36:b2:42:15:b3:
         dd:ab:31:f4:80:0b:59:33:ca:3b:ef:78:85:44:c1:22:3f:65:
         ab:10:47:01:24:85:44:f7:c3:55:0a:19:8b:43:0f:38:a9:d3:
         7a:4b:36:b1:ce:93:69:02:50:e1:19:0f:86:46:cd:39:77:f5:
         32:12:3f:5f:2f:c4:d7:ce:6a:8d:80:0b:81:d1:79:e6:4d:bc:
         27:85:54:25:b3:0d:65:4f:13:fa:76:6c:49:63:b6:76:11:c6:
         ed:58:b7:04:6d:e5:61:c7:3a:cb:4e:e8:b2:59:37:35:d8:52:
         0c:21:09:ea:fd:85:25:09:3f:2f:13:79:4f:0f:83:fb:58:00:
         6d:0d:22:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:59:54 2026 by rpki-client