Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/f7c4b5bf-7d6f-3580-80db-3b65c9ef7997.roa
File:                     f7c4b5bf-7d6f-3580-80db-3b65c9ef7997.roa (raw, json)
Hash identifier:          tECsnHTlz0In8NqUjBqLp3YZY18vC6mTKeYpjBtZ9VA=
Subject key identifier:   79:B1:FD:09:BF:4C:9B:C0:2E:6E:D9:DD:88:65:76:CC:E3:22:17:E5
Certificate issuer:       /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6
Certificate serial:       010D0C9F4328584ECD371F60CBEA22422CC50C40
Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/f7c4b5bf-7d6f-3580-80db-3b65c9ef7997.roa
Signing time:             Tue 11 Aug 2026 13:00:11 +0000
ROA not before:           Tue 11 Aug 2026 13:00:11 +0000
ROA not after:            Mon 09 Nov 2026 14:00:11 +0000
asID:                     14618
IP address blocks:        155.63.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cd:37:1f:60:cb:ea:22:42:2c:c5:0c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6
        Validity
            Not Before: Aug 11 13:00:11 2026 GMT
            Not After : Nov  9 14:00:11 2026 GMT
        Subject: CN=261501f4-7cf1-439e-9c7b-b1f69a800031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:85:c6:e7:a5:67:fe:2e:29:83:a3:a7:88:5e:
                    1e:ed:c8:0d:24:f2:75:92:b9:1e:1b:44:4f:10:07:
                    dd:df:1d:94:b9:5f:0d:af:9f:e2:42:d2:b7:fb:61:
                    ff:f4:d3:27:d4:f3:f6:b2:61:98:18:56:29:33:ac:
                    35:c6:9a:8f:5f:eb:f3:57:5b:5d:da:45:63:2b:bc:
                    a8:d2:05:de:0f:a4:75:fe:99:2a:bd:8e:e3:d9:08:
                    9d:28:49:13:a1:28:9e:ae:7e:6b:1b:23:3c:09:bc:
                    e8:7e:8f:ce:14:f3:e3:35:61:74:1a:84:8e:31:73:
                    54:ad:8a:06:d5:8e:3b:b9:fe:e3:13:e5:52:b8:6f:
                    12:41:64:77:58:a1:55:b3:7d:79:69:31:5e:92:d5:
                    3d:b5:17:cf:84:fc:fc:61:e4:8b:96:2f:92:2a:56:
                    8e:2e:e8:fa:31:c4:53:8d:f1:32:19:2d:af:38:20:
                    d1:28:e1:f3:ba:a7:8b:6c:9f:00:90:f5:0a:66:db:
                    d0:99:9f:d4:c6:82:f0:1a:10:50:fa:da:ce:a4:70:
                    bf:e5:e1:7f:5b:e4:b6:e3:a3:e1:dd:ae:8a:59:27:
                    2f:79:ec:2b:ba:bb:7d:af:d9:22:c4:b2:90:e1:e7:
                    1d:ac:f4:a1:f0:c3:e4:1b:57:c6:e4:c3:8c:d4:74:
                    7b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B1:FD:09:BF:4C:9B:C0:2E:6E:D9:DD:88:65:76:CC:E3:22:17:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/f7c4b5bf-7d6f-3580-80db-3b65c9ef7997.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl

            X509v3 Authority Key Identifier:
                keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.63.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:31:fa:7f:4d:66:43:93:e9:7e:53:b8:c4:84:1f:75:e7:c8:
         c1:26:dc:58:10:6a:16:51:99:15:cd:18:09:b2:6f:bc:36:02:
         3d:90:6e:be:02:63:ee:fd:2d:83:5f:3b:10:46:d7:ea:8d:26:
         b9:09:ab:8c:e4:d6:14:97:d1:da:74:02:42:dd:e8:15:81:3c:
         fd:b0:14:31:39:c1:05:ca:90:56:cb:bf:c7:83:e4:0c:26:0e:
         5b:6e:1b:49:75:98:32:78:5e:bc:0c:08:e4:65:a4:f3:0d:c9:
         af:fa:cb:9c:c8:d5:49:9e:73:35:12:97:d8:db:5f:86:69:df:
         96:ad:64:58:25:59:65:b2:d6:c4:1a:e0:00:1c:9b:75:9e:ed:
         ce:3e:80:42:a0:5b:24:5f:6f:14:a2:8f:db:3e:42:20:2b:0a:
         a0:d6:4a:27:e4:1a:00:3f:69:24:5d:51:3b:23:1b:89:0c:47:
         e1:b0:8d:79:c7:54:e8:71:75:3e:a1:1d:71:6b:73:aa:80:70:
         a5:30:8a:ac:96:4d:60:62:56:7f:87:12:bf:a4:2e:6e:41:43:
         2e:25:34:14:43:a2:07:01:65:89:0b:36:df:51:d4:1e:da:53:
         96:58:3e:65:0d:59:bd:f2:a6:47:6e:8f:5a:de:f5:07:9b:f2:
         d8:da:93:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:55:13 2026 by rpki-client