Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d251b68-9cb8-49ab-91e3-66420fc719b5/6f856a7a-d7b5-3c23-9f27-c8353e19cfa5.roa
File:                     6f856a7a-d7b5-3c23-9f27-c8353e19cfa5.roa (raw, json)
Hash identifier:          bnWCjn8gX27okow4p+nLjFesSK1rNUqqeW00KSg/12M=
Subject key identifier:   53:17:35:84:DC:F8:BB:0A:78:14:00:42:3C:78:CD:FA:97:BC:8F:F1
Certificate issuer:       /CN=1d251b68-9cb8-49ab-91e3-66420fc719b5
Certificate serial:       010D0C9F4328584ED001E45FA822B2234AEFAA80
Authority key identifier: 90:B0:03:FA:5A:A8:85:49:1A:BB:1E:8F:56:2A:9C:FB:67:F1:C8:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d251b68-9cb8-49ab-91e3-66420fc719b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d251b68-9cb8-49ab-91e3-66420fc719b5/6f856a7a-d7b5-3c23-9f27-c8353e19cfa5.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        192.146.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d251b68-9cb8-49ab-91e3-66420fc719b5/1d251b68-9cb8-49ab-91e3-66420fc719b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d251b68-9cb8-49ab-91e3-66420fc719b5/1d251b68-9cb8-49ab-91e3-66420fc719b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d251b68-9cb8-49ab-91e3-66420fc719b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:e4:5f:a8:22:b2:23:4a:ef:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d251b68-9cb8-49ab-91e3-66420fc719b5
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=2b307d29-966c-4570-af8b-8befadd0bcf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e4:2d:3b:45:d4:d1:ec:be:9c:72:ff:f5:28:
                    7c:d0:43:55:65:8f:f3:6b:42:73:fd:9f:90:a8:65:
                    d0:5c:e8:41:33:3e:fc:b9:01:4f:c2:69:11:8f:98:
                    e3:d3:84:d8:ef:4c:ee:c5:47:2a:9c:b1:17:d4:d7:
                    52:78:42:8f:8a:4f:01:a3:6d:17:d4:5f:b7:1c:33:
                    1b:73:d5:2b:86:b6:24:ba:da:94:c7:1b:d9:89:7c:
                    46:50:28:5e:4b:57:b1:8c:65:eb:13:70:50:db:59:
                    d7:be:35:46:d5:f5:ad:f3:42:ca:d6:16:22:0e:4d:
                    8b:98:8b:69:ef:90:3f:7b:b2:03:19:2c:9e:77:58:
                    72:bd:26:a4:3a:75:ac:c3:76:69:ab:7e:c0:d7:d4:
                    12:71:4c:a3:9a:e4:4a:85:e8:f3:cf:d7:7e:32:7f:
                    72:c3:b3:f3:f5:7c:57:cd:a0:86:77:e4:41:c3:03:
                    cb:f9:d7:8c:88:1f:20:4c:1e:c6:a7:8b:56:04:96:
                    7f:61:02:ba:9e:57:13:c1:69:47:24:f8:61:a6:25:
                    30:ec:62:05:7b:2f:94:52:1e:99:a8:98:63:fb:ff:
                    ba:49:ab:f5:4f:d2:68:b6:af:8a:5d:1c:7b:38:bc:
                    32:b1:15:24:a3:e8:00:bd:87:1a:59:d5:41:25:6b:
                    6c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:17:35:84:DC:F8:BB:0A:78:14:00:42:3C:78:CD:FA:97:BC:8F:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d251b68-9cb8-49ab-91e3-66420fc719b5/6f856a7a-d7b5-3c23-9f27-c8353e19cfa5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d251b68-9cb8-49ab-91e3-66420fc719b5/1d251b68-9cb8-49ab-91e3-66420fc719b5.crl

            X509v3 Authority Key Identifier:
                keyid:90:B0:03:FA:5A:A8:85:49:1A:BB:1E:8F:56:2A:9C:FB:67:F1:C8:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d251b68-9cb8-49ab-91e3-66420fc719b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.146.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:b3:93:ba:53:8b:9b:8b:7b:9d:e2:78:52:6c:bd:17:da:1f:
         09:5a:b8:ab:86:4e:53:af:b8:ff:96:fb:ef:26:71:68:1b:46:
         69:3d:11:9b:7d:26:54:0e:34:8c:4c:6a:8a:4d:76:df:5c:91:
         4f:b2:c9:db:9d:a8:e4:34:a8:97:51:b8:b6:40:b9:7b:0f:c6:
         cb:cd:04:a7:43:a0:cc:7e:d1:1b:3e:da:9d:10:4c:3e:1b:67:
         5a:87:df:8b:38:c8:07:b5:c3:de:c9:ab:bf:2b:6a:be:82:56:
         5a:67:a9:50:41:05:03:41:62:a0:84:cd:7a:11:1e:33:65:80:
         d3:4f:67:c3:3a:5a:b3:60:ba:55:fb:e3:68:f1:d8:36:9f:0d:
         b4:e8:f1:40:a9:b4:3c:78:81:e7:8f:0b:75:ea:95:e2:c9:a8:
         f3:62:e7:99:ec:e7:b2:17:c1:ad:4f:a5:43:50:76:df:ac:19:
         02:ee:53:e7:5d:32:e2:23:0d:09:5c:e5:97:3a:a7:5c:f0:1f:
         e4:ab:17:bd:33:38:a2:54:0f:d9:69:f8:69:b4:11:85:b2:9d:
         25:30:55:24:82:65:aa:43:fe:98:45:f6:7d:e1:d3:1b:7c:0a:
         64:99:99:87:11:25:2d:f3:5a:9d:b3:bf:39:9e:88:47:57:5b:
         e8:eb:52:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:56:27 2026 by rpki-client