Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/4685c788-cfca-3dbe-b1b6-6ee6f414c366.roa
File:                     4685c788-cfca-3dbe-b1b6-6ee6f414c366.roa (raw, json)
Hash identifier:          oan7ORCDu2EKsMnX3eohrnhhnwJA4taJszkyh9fjBR8=
Subject key identifier:   00:17:C8:E1:4D:72:37:7F:51:1D:F5:A2:64:79:B1:F9:5B:0E:11:F4
Certificate issuer:       /CN=a01c464d-9d20-46a1-858b-c36c8c1a3776
Certificate serial:       010D0C9F4328584ED9C7535A604E3F8B73B57D80
Authority key identifier: 42:8D:86:35:2E:D5:21:76:56:74:A3:8F:E2:B7:8A:FC:03:DE:9F:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/4685c788-cfca-3dbe-b1b6-6ee6f414c366.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     6360
IP address blocks:        205.166.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:53:5a:60:4e:3f:8b:73:b5:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a01c464d-9d20-46a1-858b-c36c8c1a3776
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=16852217-7b7f-4faf-a90d-92b90db9a509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:31:49:df:21:00:d3:6f:f9:5c:d4:f0:ce:4e:
                    02:64:8f:07:6b:ba:11:a5:5b:ba:25:fc:10:8c:7e:
                    64:75:3f:e4:33:62:ec:0c:f7:4d:79:4b:e9:28:53:
                    b0:dc:e5:1d:12:c6:fd:4b:1a:d3:5a:16:d7:87:12:
                    ac:94:67:e7:81:e8:32:5c:06:6a:33:96:84:41:87:
                    2e:8c:01:8c:de:4d:7e:7a:55:2b:b9:bc:b5:38:59:
                    d8:a7:f3:75:04:5c:6c:eb:2d:4d:c7:3a:19:13:52:
                    c3:d7:06:6f:6e:a9:47:69:8a:cf:d6:89:5f:e1:ae:
                    3f:c2:bc:5f:01:9c:0a:a1:71:b7:90:35:c8:4d:77:
                    21:d9:a7:21:83:d5:dd:7f:e7:9c:40:ca:fc:8a:f1:
                    e6:9d:d1:30:25:a5:7c:bf:30:5c:28:0a:bc:11:02:
                    07:30:c4:24:70:70:be:5c:5a:2a:a9:a6:a3:11:45:
                    87:9e:55:22:b4:90:d8:cd:24:f0:13:70:4a:bd:f2:
                    d9:cd:86:67:7a:6c:b7:c5:ac:fd:1b:a4:53:3f:49:
                    6f:8b:46:b3:a7:cb:75:5b:1a:2f:1c:46:a4:59:6a:
                    96:56:d9:05:1a:77:8d:dd:4a:c5:fc:10:80:59:43:
                    ea:56:39:33:02:bf:c6:12:a2:2b:0d:6d:f9:77:d6:
                    d4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:17:C8:E1:4D:72:37:7F:51:1D:F5:A2:64:79:B1:F9:5B:0E:11:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/4685c788-cfca-3dbe-b1b6-6ee6f414c366.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.crl

            X509v3 Authority Key Identifier:
                keyid:42:8D:86:35:2E:D5:21:76:56:74:A3:8F:E2:B7:8A:FC:03:DE:9F:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.166.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:ce:d8:16:b0:e1:04:6f:f0:5b:98:68:b7:e1:05:69:af:a7:
         c1:96:f1:17:6a:81:a9:d1:ba:c8:a7:a4:b7:ba:24:0f:24:9f:
         ce:12:98:bf:6a:d6:0a:56:04:a0:ac:7d:2d:5d:63:03:43:88:
         28:93:4d:f9:83:4b:26:c5:61:e8:ab:ae:3e:1f:a6:a6:f9:ae:
         bf:b7:b9:4b:68:77:45:37:e1:c2:90:f4:67:ea:c1:e0:1a:4f:
         cd:87:af:2b:2d:ce:3a:59:4f:bc:bb:7b:ff:c0:fc:16:48:41:
         5b:86:0b:28:4d:c4:1b:e3:13:bf:79:fd:fb:00:e0:fd:6b:8a:
         87:eb:ac:62:0a:b9:98:97:a0:81:2a:d2:ef:88:29:82:99:ad:
         3b:ea:68:62:16:33:eb:87:c6:5b:1b:12:fe:62:b3:a8:25:54:
         b3:16:a3:e9:e2:a7:e4:3a:37:e2:a0:19:f6:1a:a3:79:26:60:
         10:49:53:7f:6c:b9:6d:be:9e:5c:4d:7f:4b:1f:a4:04:8f:bb:
         b7:ff:4c:cd:1e:b9:89:07:e0:8b:74:1d:5e:47:95:d2:ed:bd:
         2b:b3:c2:ad:76:78:71:a2:01:38:21:3b:be:88:20:2d:a3:66:
         33:c0:98:d9:ee:2c:6b:1f:a4:de:76:ea:0e:73:cc:40:2d:3d:
         47:8b:ef:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 08:59:12 2026 by rpki-client