Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/06af1d82-f2b5-3070-9ee7-6972446c5441.roa
File:                     06af1d82-f2b5-3070-9ee7-6972446c5441.roa (raw, json)
Hash identifier:          XGvu7xUWegLUPz3zsv/A97KAJPua4dv84M8Tjhn7PgU=
Subject key identifier:   06:C1:9B:0C:35:F6:74:B1:46:AF:71:C5:1F:F8:5A:23:8F:61:1F:4F
Certificate issuer:       /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial:       010D0C9F4328584F15CCF3996715DF3F9B1D1C00
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/06af1d82-f2b5-3070-9ee7-6972446c5441.roa
Signing time:             Sun 06 Sep 2026 13:00:12 +0000
ROA not before:           Sun 06 Sep 2026 13:00:12 +0000
ROA not after:            Sat 05 Dec 2026 14:00:12 +0000
asID:                     6079
IP address blocks:        24.148.0.0/18 maxlen: 24
                          24.148.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:15:cc:f3:99:67:15:df:3f:9b:1d:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
        Validity
            Not Before: Sep  6 13:00:12 2026 GMT
            Not After : Dec  5 14:00:12 2026 GMT
        Subject: CN=660417cf-37fc-4e72-bc84-1637dd72e000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:98:02:61:d7:10:54:24:d3:6f:eb:86:42:3f:
                    b4:ff:9a:c9:04:3d:ce:a4:11:b4:de:6f:d4:76:ca:
                    24:85:69:5e:49:f2:74:fe:a1:7f:ef:af:47:05:85:
                    84:95:b8:13:46:e9:b1:a0:6a:21:ed:13:85:71:86:
                    45:e2:c1:c6:33:a1:35:a8:61:9b:d1:fe:8b:19:81:
                    51:76:31:60:f9:20:53:46:8f:c7:c3:25:99:58:e7:
                    81:80:30:e5:0d:d2:d2:92:4b:5d:83:7b:63:eb:25:
                    a5:93:85:9e:90:bc:3d:7e:af:74:c5:3e:2e:cf:2a:
                    2c:1a:31:a4:0c:29:8c:11:cf:f3:04:e0:36:68:e3:
                    d4:52:96:5c:0c:2c:79:90:51:b6:cb:7b:cd:f3:9d:
                    6a:1c:f1:ed:02:07:ee:9e:10:e0:e3:aa:9c:12:46:
                    59:59:5c:a7:9c:a7:a0:9c:b6:6b:a0:c3:2e:60:59:
                    09:54:ed:c1:5c:a5:6d:50:54:33:33:ea:63:3e:43:
                    22:14:de:ae:d1:14:27:c4:cf:4c:93:1c:28:a5:cd:
                    5d:e5:6e:8b:3f:32:0d:97:30:87:85:40:63:34:c5:
                    32:b0:36:5e:30:96:42:50:0a:9f:7a:e7:68:be:11:
                    44:b0:d9:ea:c4:f3:1c:ff:22:6d:09:97:81:b0:4a:
                    65:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C1:9B:0C:35:F6:74:B1:46:AF:71:C5:1F:F8:5A:23:8F:61:1F:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/06af1d82-f2b5-3070-9ee7-6972446c5441.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.148.0.0-24.148.95.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:d3:d6:e5:f1:34:dc:ac:85:3c:e5:16:20:41:0a:65:26:19:
         2e:ac:87:7f:0e:07:3c:0d:9d:29:51:d5:81:f5:07:9b:b0:4c:
         5b:e0:53:38:2a:8a:35:e9:3a:40:54:16:9a:58:f1:c9:90:61:
         e2:79:54:a1:6e:4b:6b:80:e0:05:5f:74:79:4d:14:95:db:ce:
         37:cc:12:7d:2f:0a:17:1a:fd:13:dc:e7:90:fc:6d:60:da:3d:
         f4:aa:27:4f:e9:5d:fc:b1:a8:96:92:99:f5:e5:4d:3f:fc:65:
         c6:c3:6b:de:87:75:60:a3:a0:1c:f1:fa:9f:55:2f:e6:22:48:
         d4:92:05:5d:6e:2f:54:21:e0:25:db:91:ac:dc:da:7b:3c:8e:
         d9:b7:9d:87:cd:ca:8a:9e:c9:76:3c:a3:04:6a:ea:85:81:ae:
         ea:70:34:cc:40:f1:7e:10:5b:13:9e:78:52:2d:cd:48:b9:a0:
         27:39:e8:5f:bb:2f:7a:d4:05:44:ab:24:75:7a:47:5f:74:9c:
         64:ee:12:ea:6f:74:95:64:b6:dd:a3:9e:e2:53:29:77:b3:35:
         c0:5d:8d:30:1f:8a:a9:6e:61:b6:6c:fd:38:05:b0:f7:2f:30:
         1a:f1:a2:59:ad:83:15:6f:d6:c4:7b:ee:9e:b3:23:bc:db:8e:
         30:8e:57:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:10:29 2026 by rpki-client