Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/1016c453-3950-3157-8238-b1385cd19da0.roa
File:                     1016c453-3950-3157-8238-b1385cd19da0.roa (raw, json)
Hash identifier:          LDqoELT4k+FlE7unR6dqbke2t/640RZg7Ykk45FjLXY=
Subject key identifier:   2D:AC:50:1B:24:9E:C5:42:1B:79:1E:07:A3:0A:DA:94:21:52:53:81
Certificate issuer:       /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
Certificate serial:       010D0C9F4328584EF7176DAA79CCF4D0CDFF3640
Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/1016c453-3950-3157-8238-b1385cd19da0.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     32128
IP address blocks:        158.106.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:6d:aa:79:cc:f4:d0:cd:ff:36:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=1e81bca9-0e11-443c-acfe-03f87042df8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:53:a4:b9:c7:08:12:2f:18:2a:c2:eb:85:b5:
                    a7:68:8c:18:f7:b0:65:d2:76:a1:df:39:b6:84:d6:
                    9e:24:01:fa:18:00:05:67:c7:de:7d:67:0f:76:9f:
                    b9:89:ba:5b:e1:ab:80:47:14:79:0e:a4:3a:c6:9a:
                    6f:f4:41:82:03:ab:86:27:53:2f:5d:3e:d9:97:84:
                    b3:39:80:fb:1a:92:e6:c8:8f:fb:16:bf:87:fe:df:
                    10:d1:d0:be:d8:12:97:9c:d1:2d:b7:cd:b3:bc:dd:
                    c7:ee:b3:b2:9d:14:a9:0c:05:8c:79:98:2c:47:3f:
                    fe:c8:bf:1a:9f:46:59:13:1b:a0:1d:7c:34:48:36:
                    35:90:73:eb:44:9f:01:31:79:ab:09:37:2d:ab:4a:
                    57:12:eb:a5:29:0d:bb:05:d6:1d:d5:91:53:10:a9:
                    b2:85:ba:32:9e:5a:18:d6:25:83:d0:31:f3:50:47:
                    c2:fc:93:45:fd:b0:6c:90:ee:f6:c0:85:70:6d:23:
                    51:f9:f8:9e:d5:ea:60:7d:d8:4c:3f:c6:60:24:7f:
                    65:95:ca:4e:0d:65:a7:cb:93:19:68:6e:29:87:89:
                    53:e9:61:96:3b:1d:a8:92:c2:e6:85:a7:74:d6:0e:
                    e5:0e:f1:55:d3:6a:86:da:7a:63:87:83:2d:a2:37:
                    8e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:AC:50:1B:24:9E:C5:42:1B:79:1E:07:A3:0A:DA:94:21:52:53:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/1016c453-3950-3157-8238-b1385cd19da0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl

            X509v3 Authority Key Identifier:
                keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.106.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:d7:39:01:ac:68:91:3c:3d:68:9d:dc:16:cd:2c:f6:71:a6:
         60:1a:50:f5:08:e9:58:e2:38:d4:3d:cb:4b:9a:f8:69:ec:a9:
         83:29:57:58:18:02:75:a6:7b:17:f7:ad:c6:e6:90:f9:99:93:
         ab:7c:f4:15:f8:6a:e6:64:27:52:24:7c:d2:67:97:ac:4a:03:
         1f:20:98:72:c4:7d:4c:1a:05:c1:b7:5a:d8:f4:49:a2:38:d9:
         68:a9:5c:16:3c:b0:9a:d0:b2:2b:27:77:ec:90:87:e0:08:c5:
         c6:c2:5c:14:15:33:59:ee:08:46:bf:50:50:92:ba:25:f6:e0:
         3e:6b:a1:5e:30:0a:c6:31:b9:12:e5:ab:bb:76:62:74:0e:f3:
         8d:bc:e0:ad:fd:49:ac:92:6b:7c:ed:81:1e:1b:7b:9e:92:27:
         8b:43:08:4e:aa:18:a7:26:0d:7b:b8:af:99:36:76:49:79:da:
         a0:b1:45:02:59:47:98:b9:ed:c0:d5:51:25:3e:63:41:66:2c:
         f6:f4:3b:9a:0c:fd:b3:70:3f:8d:e5:2f:e9:05:00:9d:d7:36:
         1a:b3:27:49:7a:42:46:35:e6:7b:bc:4d:e9:ea:5e:13:b3:cf:
         9c:bf:e8:46:ba:df:de:14:07:20:2f:ac:1f:7d:d9:0d:55:a1:
         0f:42:08:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 13:27:25 2026 by rpki-client