Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6540401b-bc62-439f-9a85-287ef16081ad/01db8c84-cf0d-3a90-8732-b3fb421e02e2.roa
File:                     01db8c84-cf0d-3a90-8732-b3fb421e02e2.roa (raw, json)
Hash identifier:          U8yWUaOhO0e0pWZASjUoVu+FN5+RVUq6vmZFVkoPcPY=
Subject key identifier:   17:44:48:BF:D8:71:13:71:FD:8E:14:F5:BD:D5:82:BA:5B:32:11:F1
Certificate issuer:       /CN=6540401b-bc62-439f-9a85-287ef16081ad
Certificate serial:       010D0C9F4328584EA794222B5F7C6BFCA2C4B248
Authority key identifier: A2:7C:FE:71:E6:65:08:81:9E:CA:16:C7:7B:98:38:5A:8A:0F:F1:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6540401b-bc62-439f-9a85-287ef16081ad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6540401b-bc62-439f-9a85-287ef16081ad/01db8c84-cf0d-3a90-8732-b3fb421e02e2.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     46656
IP address blocks:        204.145.120.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6540401b-bc62-439f-9a85-287ef16081ad/6540401b-bc62-439f-9a85-287ef16081ad.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6540401b-bc62-439f-9a85-287ef16081ad/6540401b-bc62-439f-9a85-287ef16081ad.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6540401b-bc62-439f-9a85-287ef16081ad.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:22:2b:5f:7c:6b:fc:a2:c4:b2:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6540401b-bc62-439f-9a85-287ef16081ad
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=0df0f6a1-f172-4bbb-9fe9-a955bb6c2eaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0e:3b:80:ae:f4:5b:2b:cd:84:f4:49:77:9f:
                    ab:44:7c:17:54:73:92:65:f0:f8:91:2d:5b:e3:da:
                    ff:49:5a:f6:48:1d:94:ff:2b:d9:54:83:44:a1:70:
                    83:96:d3:a2:40:ec:67:80:32:46:f5:95:0e:b8:d9:
                    dc:28:bf:02:d8:08:0a:be:52:0e:1e:2c:df:9a:5a:
                    83:ba:58:1f:7f:a8:a4:e9:47:19:65:bb:85:d1:ee:
                    8a:79:b8:12:4f:ac:c5:53:18:5f:1c:8c:6e:68:3c:
                    7b:a9:08:b7:fd:29:2a:f1:af:3b:78:3c:1f:73:9e:
                    2e:a1:6d:e3:b1:26:01:bc:2e:81:99:51:61:39:ef:
                    6b:c0:2f:5d:cf:d9:e7:d4:5b:55:66:a2:ab:45:73:
                    51:d5:9f:ad:da:74:7d:2e:a2:b5:63:42:10:c0:24:
                    19:52:a4:58:db:45:54:0b:2b:0c:93:c9:e7:f4:be:
                    a6:c3:12:4a:c7:4e:7a:99:c9:3c:f9:a4:bd:e6:7a:
                    83:01:57:ef:a1:90:1f:aa:74:f5:ec:0d:e2:fa:ff:
                    a0:42:5d:d4:ca:e2:02:1e:8f:ed:ea:01:47:3c:92:
                    de:b5:2f:9b:1b:55:8e:1b:15:41:68:3a:2d:e3:4a:
                    55:1f:aa:d1:db:62:8c:68:b8:a8:59:1f:43:f4:63:
                    30:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:44:48:BF:D8:71:13:71:FD:8E:14:F5:BD:D5:82:BA:5B:32:11:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6540401b-bc62-439f-9a85-287ef16081ad/01db8c84-cf0d-3a90-8732-b3fb421e02e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6540401b-bc62-439f-9a85-287ef16081ad/6540401b-bc62-439f-9a85-287ef16081ad.crl

            X509v3 Authority Key Identifier:
                keyid:A2:7C:FE:71:E6:65:08:81:9E:CA:16:C7:7B:98:38:5A:8A:0F:F1:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6540401b-bc62-439f-9a85-287ef16081ad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.145.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:0b:12:1f:fd:ea:37:6b:c4:f6:f5:c3:eb:57:e8:38:eb:ff:
         a1:4e:e2:44:26:1b:fe:b9:f8:71:1a:11:7f:c2:26:d3:9d:c4:
         d5:a2:1c:ff:7a:e1:4f:f3:4e:4e:3f:85:d8:d7:23:3e:61:78:
         4c:d4:7f:24:3c:df:75:0e:b2:72:12:8b:7d:e1:f1:33:91:79:
         bb:e6:fb:3b:83:23:2b:b1:d7:06:9d:b3:e5:fc:80:cc:aa:96:
         61:48:50:80:3a:3a:2f:ca:4b:b6:a9:21:73:c1:18:b0:38:da:
         ac:6c:5f:25:67:f6:45:52:cc:1f:1e:f7:56:a6:15:da:0c:19:
         1a:7f:e6:97:dd:1c:bb:c7:9e:e5:32:52:12:d8:5c:0e:e1:ad:
         af:ac:64:ef:be:6a:13:22:13:a6:c2:97:cf:c6:c8:d8:6c:4a:
         08:65:62:0c:67:e6:85:01:75:95:2c:84:5a:cf:31:9f:9f:8f:
         0d:dc:ad:ea:23:a6:5a:09:3f:fa:6e:ad:cd:1b:40:62:f2:f4:
         33:07:45:e0:cb:8a:2d:25:09:a6:65:10:e2:b6:4a:0e:f7:0d:
         d8:90:98:3c:47:ad:eb:7f:a0:f4:1b:6d:a0:81:cc:42:59:75:
         50:98:64:b1:48:af:9d:fb:0b:9f:dd:3d:fd:45:0f:ae:ee:64:
         48:a9:dd:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:42:31 2026 by rpki-client