Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/bbafee31-46f6-3ca6-abab-6d00e2297780.roa
File:                     bbafee31-46f6-3ca6-abab-6d00e2297780.roa (raw, json)
Hash identifier:          vcCW4HcaNWURfWUMOvmWHUXVlplLbqnuE2zKQx71G6k=
Subject key identifier:   59:BC:15:C8:84:D3:9E:B2:50:5C:A0:FA:C8:3A:CA:A1:CE:0E:37:58
Certificate issuer:       /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial:       010D0C9F4328584F15CCFDE038CEA1D71590DD80
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/bbafee31-46f6-3ca6-abab-6d00e2297780.roa
Signing time:             Sun 06 Sep 2026 13:00:12 +0000
ROA not before:           Sun 06 Sep 2026 13:00:12 +0000
ROA not after:            Sat 05 Dec 2026 14:00:12 +0000
asID:                     6079
IP address blocks:        131.106.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:15:cc:fd:e0:38:ce:a1:d7:15:90:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
        Validity
            Not Before: Sep  6 13:00:12 2026 GMT
            Not After : Dec  5 14:00:12 2026 GMT
        Subject: CN=aa6988b8-2389-447f-acca-8bca648594bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a9:35:39:d9:7a:0e:ca:94:8e:19:d5:de:4c:
                    bc:d2:c1:94:60:e5:07:e9:dd:75:2a:0a:21:ab:05:
                    79:50:91:c4:b3:de:93:6f:8b:c6:1a:e9:d4:c3:9f:
                    0a:36:25:1a:80:7a:ce:80:1d:55:55:b1:b9:03:e4:
                    d2:44:55:1a:98:bf:af:a5:2a:c9:d8:5b:88:ab:6f:
                    77:36:a3:ea:12:71:85:50:85:4b:39:5d:2b:e1:4c:
                    45:5a:bc:df:ba:46:d7:e8:7a:3d:7f:4c:de:fe:d4:
                    1f:1e:98:f7:26:76:f2:a0:41:eb:62:28:5c:ee:c2:
                    71:f5:14:b5:da:1c:79:a3:2d:e3:22:23:4a:e3:77:
                    dd:39:19:ae:48:03:ff:31:ad:81:54:04:ce:c5:55:
                    88:77:a8:68:fd:23:7a:fc:cd:d3:e3:a7:1f:38:6b:
                    fd:2b:24:2a:72:04:c7:03:8a:bf:92:e6:84:73:2a:
                    50:eb:54:a9:4f:34:71:96:ee:41:09:f2:b8:32:92:
                    a2:d1:c8:e1:52:46:01:8c:75:8f:81:d7:28:57:f1:
                    9e:7d:7c:a4:32:90:99:77:bd:10:86:3f:71:3e:d6:
                    f2:79:c5:f5:83:76:08:59:7a:4f:66:2d:35:fc:b7:
                    3c:65:cc:54:3d:3b:35:b7:ab:80:3e:b3:16:38:0d:
                    35:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BC:15:C8:84:D3:9E:B2:50:5C:A0:FA:C8:3A:CA:A1:CE:0E:37:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/bbafee31-46f6-3ca6-abab-6d00e2297780.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.106.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:af:65:c0:ae:67:60:3d:d8:78:15:72:05:d3:14:5b:35:fd:
         5c:ec:5e:d9:4f:e9:e2:a3:3b:78:fb:51:3c:ac:a0:4f:0c:8a:
         87:c4:d4:c2:db:b0:fe:2a:82:55:04:da:e2:b5:f6:98:f2:a7:
         e3:15:29:74:3b:d4:bc:71:b2:06:15:59:0a:53:36:64:12:6e:
         38:6f:88:d6:f5:1c:bd:56:af:59:78:bb:6b:3c:58:15:db:01:
         9a:4e:f5:09:6b:31:fe:39:bd:51:4e:9f:c8:31:ba:d7:3f:39:
         68:9f:48:df:98:03:7b:c7:fc:84:74:30:c3:92:7c:83:dd:07:
         53:55:72:0f:01:86:3f:e0:0e:b5:c9:21:12:34:82:42:c6:08:
         b9:8c:c1:63:29:f9:49:33:1d:fd:07:ec:77:61:70:9f:c1:dd:
         ca:8e:76:1b:22:47:65:56:fb:3f:ef:ae:53:62:a2:5c:48:20:
         09:23:84:13:65:49:7f:84:e2:fd:99:e9:69:cf:6b:80:1b:8b:
         7e:e0:6a:a8:b6:e4:9c:a3:d5:c7:2a:15:25:42:0e:a5:5c:b0:
         93:38:70:6c:c3:91:10:13:3d:0a:31:cd:d9:48:92:4c:46:55:
         1c:55:75:e8:27:c9:c6:6d:87:e0:f7:52:f8:5a:fc:d4:d8:45:
         26:53:ea:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:52:06 2026 by rpki-client