Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/594cd308-547c-3ed8-8764-4e761539998d.roa
File:                     594cd308-547c-3ed8-8764-4e761539998d.roa (raw, json)
Hash identifier:          B+Xo/rzB2FksZCnRyF471YZeMp2S1PvKwDqZPpLMZLY=
Subject key identifier:   39:6E:CB:5C:60:4B:95:A1:A8:7D:C2:C0:3E:0C:B5:98:C1:11:11:CC
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F7E7DDC6013B3770EE3B74740
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/594cd308-547c-3ed8-8764-4e761539998d.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     54288
IP address blocks:        184.105.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:dc:60:13:b3:77:0e:e3:b7:47:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=c9ceeeb1-7074-4ca7-9aaa-d310139058be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:7b:b2:7c:cf:0d:7d:2c:1b:cc:44:98:07:b2:
                    14:aa:36:3a:ef:75:0a:d2:3d:42:9b:6a:ae:5f:11:
                    ea:66:7e:23:d5:b4:c0:8c:96:8f:dc:d0:ae:43:88:
                    90:04:6b:aa:bc:b7:2c:e3:69:15:98:e7:e9:0c:eb:
                    d9:e4:d4:ba:f5:0c:fd:73:34:07:cf:6a:fc:4e:32:
                    b0:4f:f4:a5:1f:15:90:8a:91:fa:93:10:67:e9:0c:
                    b8:22:e5:f3:39:38:f7:db:fc:9f:bf:c1:bc:a8:1d:
                    8d:23:f5:7d:66:41:33:88:94:50:0f:5b:92:a8:13:
                    ff:6d:76:c4:c7:1f:78:19:14:6f:ad:80:22:0b:d8:
                    cd:2b:09:6a:5d:03:69:04:88:bc:2f:4e:67:49:59:
                    72:e0:0d:9e:f8:50:db:6f:44:04:86:92:51:ac:88:
                    28:d2:22:ef:b1:70:a1:37:2e:59:8c:7d:39:05:3c:
                    b9:11:55:21:76:7e:dd:51:27:0c:8c:58:e2:e5:b3:
                    8e:7d:f5:26:c3:54:80:07:70:d6:a4:02:e9:73:62:
                    ed:b8:45:a0:91:87:05:6b:1f:a1:6a:9c:92:b3:2f:
                    0a:44:90:76:c8:66:0e:b1:fc:da:3d:39:26:7b:a2:
                    e1:8c:f1:64:83:55:e1:90:75:a8:11:cf:f6:95:5c:
                    ca:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:6E:CB:5C:60:4B:95:A1:A8:7D:C2:C0:3E:0C:B5:98:C1:11:11:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/594cd308-547c-3ed8-8764-4e761539998d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:01:c3:cd:bd:eb:7d:16:61:78:cd:16:63:2f:ca:cd:c9:bd:
         6b:83:45:80:c4:14:0c:a9:27:9e:fc:12:0c:b0:9f:9d:29:49:
         5d:4e:33:76:c1:c5:08:cb:03:42:d5:b3:88:be:ce:92:b3:27:
         20:02:c3:b2:48:f4:8d:a9:58:90:a5:78:4f:9f:ee:65:d5:78:
         ec:17:e4:c0:c8:d6:ff:16:2c:aa:6f:69:a1:63:e8:62:48:0d:
         15:72:d7:f6:f1:79:bb:5b:58:1a:04:bb:07:b1:8b:83:4f:8e:
         d0:c3:1d:0b:a3:22:32:15:17:af:ea:eb:28:97:46:0c:bb:0a:
         34:71:36:a5:69:ac:2c:0d:e9:bd:b2:d1:2e:be:72:96:4d:c5:
         ab:73:53:60:8c:b2:94:33:46:9b:ca:d9:fa:81:18:19:10:2c:
         0b:08:ad:30:24:61:bf:36:c7:9c:b2:c0:ec:6b:ee:d1:d8:09:
         c9:ca:39:dd:48:9e:9e:ef:41:2d:f0:80:40:66:54:e7:3e:a1:
         9f:f4:19:03:05:6d:bb:a6:bf:b9:67:c8:f7:26:37:40:f1:74:
         f8:e4:0b:d0:2d:86:ee:fa:68:7f:e8:74:e5:d7:01:f6:f7:0c:
         5a:4a:fd:c0:4c:fe:d1:4c:7f:28:59:b5:aa:d9:ba:76:65:56:
         9d:a0:aa:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:48:16 2026 by rpki-client