Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/5328e4cc-f6ba-3ad8-8949-dc48a7161c1b.roa
File:                     5328e4cc-f6ba-3ad8-8949-dc48a7161c1b.roa (raw, json)
Hash identifier:          SwBaDz/3l2OjWGYEvDFsH8bwaC7SYPWEDQiBJKIkBN8=
Subject key identifier:   A9:FE:84:F4:3F:E5:96:9A:58:6E:5A:B5:22:0C:20:4F:0A:68:B5:C4
Certificate issuer:       /CN=d426c818-fe62-465f-8184-d4f8176e2692
Certificate serial:       010D0C9F4328584F8F3DB42B7F990F4871F17050
Authority key identifier: F0:5F:A9:A7:39:32:76:56:38:8F:91:60:69:64:D6:40:25:0E:3C:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/5328e4cc-f6ba-3ad8-8949-dc48a7161c1b.roa
Signing time:             Tue 20 Oct 2026 01:00:12 +0000
ROA not before:           Tue 20 Oct 2026 01:00:12 +0000
ROA not after:            Mon 18 Jan 2027 02:00:12 +0000
asID:                     6507
IP address blocks:        151.106.250.0/23 maxlen: 23
                          151.106.252.0/24 maxlen: 24
                          151.106.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8f:3d:b4:2b:7f:99:0f:48:71:f1:70:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d426c818-fe62-465f-8184-d4f8176e2692
        Validity
            Not Before: Oct 20 01:00:12 2026 GMT
            Not After : Jan 18 02:00:12 2027 GMT
        Subject: CN=b5582bbf-a6ee-4cb7-9c70-869ce6dd94d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5c:01:8a:85:00:cd:3b:1d:46:cf:fa:9f:8b:
                    69:39:55:4f:65:65:99:a9:4d:be:d4:b1:8b:09:de:
                    1d:dc:45:d4:06:09:4c:41:88:d4:8d:6c:6c:c2:37:
                    0e:bb:af:64:64:8b:cc:87:4a:7a:42:30:8a:f3:2b:
                    a5:db:6f:7e:d4:36:0e:49:f7:2a:81:2a:b7:4d:fd:
                    2a:81:c5:bd:28:7e:08:fc:ba:96:1f:2a:f4:60:95:
                    91:18:e8:be:80:31:a5:f9:fe:0e:01:54:8a:10:f4:
                    6f:60:e3:39:95:1b:97:dc:e1:55:98:2e:d3:25:69:
                    19:df:8e:31:0c:92:bc:90:1f:68:76:5c:6a:9d:9f:
                    37:de:f2:b8:4a:29:83:4c:71:b6:78:ce:91:59:5e:
                    bf:93:dd:6b:40:c8:46:45:08:92:f2:a3:0e:af:7b:
                    05:6d:05:68:36:c6:2e:f4:5b:69:95:65:1e:85:9c:
                    c6:aa:61:be:28:97:94:cf:04:a4:05:bb:ea:d3:15:
                    82:6a:fd:84:9e:0a:3a:58:8b:00:59:95:be:28:d5:
                    09:09:b5:9d:f1:0b:8d:70:f3:f6:7e:44:31:35:41:
                    91:f9:6c:a3:64:96:36:56:f6:5f:2f:8e:40:98:1e:
                    a4:c5:66:9d:0f:01:20:64:f5:3b:a5:b2:09:ed:a9:
                    7d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:FE:84:F4:3F:E5:96:9A:58:6E:5A:B5:22:0C:20:4F:0A:68:B5:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/5328e4cc-f6ba-3ad8-8949-dc48a7161c1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.crl

            X509v3 Authority Key Identifier:
                keyid:F0:5F:A9:A7:39:32:76:56:38:8F:91:60:69:64:D6:40:25:0E:3C:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.106.250.0-151.106.252.255
                  151.106.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:d5:fb:58:fc:ae:2e:e7:30:fe:15:14:60:1a:4d:51:36:20:
         c2:5c:d3:cf:cb:77:6a:84:ba:89:81:93:79:d3:d1:1b:fa:e0:
         7b:a1:dc:ec:f2:cf:f8:21:19:6d:d5:9d:2b:87:36:6d:bb:9d:
         f6:cf:80:9d:3a:95:49:2d:71:a9:b8:63:43:1a:cf:97:d1:38:
         aa:77:b8:48:42:60:c5:85:4a:ab:68:d4:36:19:84:dc:64:8d:
         56:ed:3d:b8:e8:3e:59:5b:69:65:34:ba:23:29:a9:d0:e3:e5:
         60:28:3a:38:46:38:a0:22:2e:be:a9:ee:d5:af:43:4b:b9:93:
         3b:74:f4:7e:8c:b2:74:a1:31:e4:be:71:ba:e4:92:56:2c:d9:
         66:84:1c:2f:a9:61:8a:c4:e5:71:cb:5f:4f:3d:6f:30:ff:72:
         3e:ec:6f:8c:2a:0e:b4:49:06:ba:cc:08:a6:71:72:35:d3:e9:
         5c:8e:58:b3:8a:a1:d8:0b:b2:d0:d5:78:d5:8b:c6:50:94:a4:
         df:07:70:7c:d0:0c:dd:56:7c:f1:f8:53:67:c9:6e:00:7b:44:
         11:9e:df:82:ef:97:69:aa:18:97:b3:22:50:94:bd:d4:19:e3:
         3c:d3:9a:aa:cb:cf:f5:fc:9a:13:a9:5a:1a:0e:92:10:88:ee:
         62:43:36:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:10:53 2026 by rpki-client