Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8791e16b-9da1-34bf-aa77-2a7e4f2381a4.roa
File:                     8791e16b-9da1-34bf-aa77-2a7e4f2381a4.roa (raw, json)
Hash identifier:          5olJQix5SxoK9cI8oBY7nC26nL4YG8K+JqI+qTyAfoM=
Subject key identifier:   7E:C8:F7:2F:FA:3C:A0:1A:42:E4:2E:F3:0F:C5:62:F6:CE:DC:C4:0A
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EDC9235F454A3604F823A7C80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8791e16b-9da1-34bf-aa77-2a7e4f2381a4.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     394996
IP address blocks:        184.105.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:35:f4:54:a3:60:4f:82:3a:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=6b9809fa-81a5-43ea-98af-cd9c334ecef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:56:57:2f:8d:af:a3:d6:95:7b:c4:1f:2a:79:
                    92:42:66:5a:47:b7:3b:3d:d2:a5:75:74:be:48:48:
                    64:2d:56:ed:12:30:01:5f:78:d5:46:27:cd:af:db:
                    63:5b:30:44:42:6f:9f:b2:7f:c3:b2:5c:60:27:f6:
                    a4:8e:a7:62:ac:e7:89:1a:be:13:43:0a:df:13:49:
                    09:51:f0:d3:0a:82:ff:37:53:cd:b3:54:03:b5:83:
                    d8:64:c9:47:fb:0d:da:60:c3:de:66:9c:e2:90:c9:
                    e1:0e:60:86:bd:68:4a:37:1d:bd:d7:a5:ad:3d:e3:
                    ea:d8:f0:b7:f8:38:4f:82:92:21:b7:26:e7:c7:61:
                    c2:c8:54:05:1f:b3:30:c6:0c:80:31:c2:a5:20:f7:
                    75:5d:e2:9e:a5:cc:63:63:12:7b:b9:dd:1d:54:41:
                    c7:fe:4b:56:be:5d:64:c9:59:bd:f5:c4:d4:f9:25:
                    4e:35:32:12:ec:d7:ab:36:7a:4f:18:4d:c5:35:02:
                    63:d1:08:c1:f4:a8:72:a1:e2:bc:6e:63:34:64:bd:
                    02:5a:91:0b:9b:ef:46:2a:a6:57:b7:da:22:35:30:
                    8d:f3:a1:41:29:54:9c:38:61:b6:65:e7:6b:82:1f:
                    a8:64:ee:cb:19:15:08:d5:b7:09:9b:2f:30:6b:77:
                    94:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C8:F7:2F:FA:3C:A0:1A:42:E4:2E:F3:0F:C5:62:F6:CE:DC:C4:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8791e16b-9da1-34bf-aa77-2a7e4f2381a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:6f:65:f7:df:0e:1e:a3:c0:72:dd:d0:10:b3:da:b2:9b:79:
         42:71:26:22:28:c9:ef:10:6c:8c:c7:e5:1d:56:14:c6:92:47:
         b6:2b:ea:8d:f8:c6:6c:68:78:5d:c2:6f:a6:ea:34:8f:8f:83:
         12:4a:ab:45:49:8e:cc:cb:48:83:7d:ba:e3:8d:c6:55:82:55:
         0d:89:56:b9:6e:e5:fa:04:4e:d7:4b:78:af:9a:e6:ef:ae:24:
         a4:d1:69:11:72:4b:28:53:07:aa:9c:73:cd:8f:8f:60:3f:3b:
         06:97:65:34:a8:5e:a9:aa:2b:df:83:db:da:a6:09:29:f7:01:
         bb:90:eb:1a:f2:c1:d8:33:98:1a:67:ff:3c:16:f5:5e:a2:40:
         0c:68:db:54:4d:64:e9:e4:38:47:9d:7b:dd:59:b6:e5:69:b9:
         3f:a4:be:f7:66:c7:8d:d2:61:a5:bb:d6:a6:41:4e:21:9f:20:
         4e:fa:28:7f:41:e6:82:fc:44:a0:37:20:47:22:f3:ac:80:35:
         e3:e9:2a:76:05:15:04:ac:10:06:27:5b:ac:0e:7b:3c:09:7c:
         28:cd:4a:13:0d:0e:1c:5a:58:c1:d4:d2:11:5a:8d:fa:77:1e:
         15:2c:c0:cc:1e:bb:62:fa:1a:73:f2:d5:bd:c5:de:8a:65:e4:
         4e:9b:2c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 07:51:25 2026 by rpki-client