Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb292964-d520-3147-a59f-6d9044254d41.roa
File:                     bb292964-d520-3147-a59f-6d9044254d41.roa (raw, json)
Hash identifier:          /rp/YtPMN3RJ+X77JzKgfpbDdOCBwWE+EV4fW9j4G+M=
Subject key identifier:   9A:E5:6C:B9:84:1E:4F:A9:09:BB:DC:6E:39:04:72:BF:7C:9E:B6:08
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EDC923EE7C0FA7159AC320980
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb292964-d520-3147-a59f-6d9044254d41.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     297
IP address blocks:        184.105.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:3e:e7:c0:fa:71:59:ac:32:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=732c897e-324b-420b-867a-6de7088d1090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:96:9b:45:01:f7:cf:d5:64:88:0a:df:c7:eb:
                    f2:0f:36:76:16:37:63:4d:19:97:71:5a:0a:47:45:
                    5d:bc:9e:82:08:aa:94:e7:dc:6f:95:91:37:5c:c3:
                    11:b6:56:71:49:77:20:7b:57:40:a0:f6:66:dd:e2:
                    e7:33:26:9d:2a:14:44:97:9f:fa:d6:cb:d3:65:b7:
                    7f:2b:9a:f5:29:f3:96:a8:3a:90:f7:0d:b5:ae:41:
                    d1:fa:ba:bd:6b:63:5f:b7:53:07:32:47:3e:1b:93:
                    9d:f6:86:93:86:ee:17:b4:d6:1a:c8:51:45:cd:18:
                    ea:f6:0b:28:64:67:ca:f5:9f:42:1c:d9:0a:5f:35:
                    be:1d:6b:e0:ad:05:b4:39:5f:9b:85:f2:94:db:51:
                    1e:a2:34:9a:98:77:91:eb:98:09:b1:cd:87:53:1f:
                    a8:df:16:fd:ca:81:a0:7b:7a:b7:73:d3:ad:35:be:
                    81:9c:de:2c:3e:7b:37:75:76:40:19:57:f2:97:14:
                    48:dc:0c:48:99:8f:c2:b8:6d:07:6c:80:7d:a9:3f:
                    7c:2f:ee:fe:0d:a3:bb:d5:8c:3d:44:e8:5e:92:e5:
                    18:71:e9:63:21:2b:32:1f:6b:df:10:29:4a:25:fd:
                    ca:21:22:a4:e4:92:c7:b6:d9:56:d8:d7:74:ea:f4:
                    58:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E5:6C:B9:84:1E:4F:A9:09:BB:DC:6E:39:04:72:BF:7C:9E:B6:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb292964-d520-3147-a59f-6d9044254d41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:36:13:e0:10:ec:df:07:d1:b2:86:63:b4:42:76:9b:87:46:
         9b:30:f5:fc:f7:09:0f:cc:e3:57:f1:fe:44:83:84:df:b2:ef:
         37:7c:9b:0b:a7:97:cf:b4:55:3d:07:38:64:8b:de:54:01:0a:
         7d:4a:6e:99:ea:4a:5b:a3:8c:fe:0c:a7:f3:8f:38:ba:97:08:
         c3:48:42:b2:74:17:48:f7:04:14:9c:35:0f:03:a5:28:7d:bb:
         0f:63:18:9c:6e:21:7b:92:b2:19:31:0f:3b:57:22:02:58:95:
         f0:16:3e:d2:f6:9b:c3:4b:e0:99:79:d0:c3:7c:26:6f:3a:61:
         57:e9:2a:4b:06:fd:42:9c:4e:e8:8a:8b:6d:c2:73:9d:02:32:
         79:5c:c6:e2:fb:5a:88:65:e5:d7:13:43:61:2a:e6:a5:ec:4e:
         d7:0b:00:ce:3f:46:2b:d7:82:de:d7:06:65:74:da:3c:a9:15:
         dc:54:b1:90:52:5d:ae:a8:99:3a:8f:a5:f1:c5:c5:99:75:76:
         72:80:43:b0:71:03:84:54:e9:f3:23:49:64:e3:68:82:1e:e4:
         e5:5c:cd:d1:31:a2:ee:5d:b2:a2:51:61:1c:81:d2:bc:37:c8:
         eb:ef:e9:86:5a:59:76:96:cf:bc:3b:4a:7e:db:e4:21:48:9b:
         67:17:27:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 08:28:59 2026 by rpki-client