Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/f4b5b8ad-7e8c-3312-a2d8-a8f181e583a0.roa
File:                     f4b5b8ad-7e8c-3312-a2d8-a8f181e583a0.roa (raw, json)
Hash identifier:          agCxZz49kIL2tinEz5dPfrrjHmyGncYAKD6yZK+9B4o=
Subject key identifier:   9D:C2:6F:0F:5A:12:6B:08:42:07:0D:58:9D:12:AA:56:09:29:DB:BE
Certificate issuer:       /CN=796bba95-b159-4867-a648-a9ff88973be1
Certificate serial:       010D0C9F4328584F497508856E460A2E50E7D200
Authority key identifier: B6:EB:25:F4:B7:AB:73:FB:89:E9:A8:1B:DD:22:28:DA:A7:7B:5C:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/f4b5b8ad-7e8c-3312-a2d8-a8f181e583a0.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     17161
IP address blocks:        205.156.64.0/21 maxlen: 24
                          205.156.88.0/21 maxlen: 24
                          205.156.96.0/22 maxlen: 24
                          205.156.100.0/23 maxlen: 23
                          205.156.102.0/23 maxlen: 23
                          205.156.104.0/21 maxlen: 24
                          205.156.112.0/22 maxlen: 24
                          205.156.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/796bba95-b159-4867-a648-a9ff88973be1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/796bba95-b159-4867-a648-a9ff88973be1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:08:85:6e:46:0a:2e:50:e7:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=796bba95-b159-4867-a648-a9ff88973be1
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=0797d2a1-fd48-489e-869c-df3170f7426e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b5:d3:a3:30:63:80:97:df:f6:fb:0e:a2:be:
                    c6:ae:d4:60:32:a3:1e:2d:2b:fb:10:97:50:6c:89:
                    e7:45:30:72:09:35:37:6f:aa:05:51:87:0c:9f:07:
                    8a:b9:60:38:da:98:90:07:4e:fb:4e:aa:1e:c5:8b:
                    25:18:78:7d:a4:fc:6c:74:a6:da:3f:7e:fa:8a:f3:
                    17:1c:d5:f1:e3:b8:73:0d:c4:85:83:ea:69:83:94:
                    8d:9e:8e:09:55:fb:91:0c:fd:63:fc:f4:08:3b:23:
                    d7:9d:76:fe:d8:fb:95:ad:e3:f0:a6:7a:da:9c:8a:
                    27:5a:d1:b0:02:f0:7f:28:b9:9a:87:7b:5c:79:a4:
                    9e:6c:68:50:05:9c:05:ae:1b:5d:72:1d:7a:3d:8d:
                    ff:6f:f7:da:6d:c8:90:76:b1:f0:f3:e7:bd:b9:bf:
                    3c:48:27:74:e2:91:ef:2f:03:43:e0:54:d9:99:16:
                    71:7a:dc:40:1d:cb:fc:34:b3:d6:01:7e:40:d0:df:
                    38:3b:e1:ec:f4:42:e6:07:95:64:85:02:99:94:13:
                    8e:11:f9:91:00:97:69:a5:52:74:97:91:f7:d5:6f:
                    d7:30:aa:58:cd:45:ae:54:10:82:fa:f7:63:55:5b:
                    54:fb:05:03:a4:74:e9:38:d8:75:e1:82:42:4e:c7:
                    aa:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C2:6F:0F:5A:12:6B:08:42:07:0D:58:9D:12:AA:56:09:29:DB:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/f4b5b8ad-7e8c-3312-a2d8-a8f181e583a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/796bba95-b159-4867-a648-a9ff88973be1.crl

            X509v3 Authority Key Identifier:
                keyid:B6:EB:25:F4:B7:AB:73:FB:89:E9:A8:1B:DD:22:28:DA:A7:7B:5C:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.156.64.0/21
                  205.156.88.0-205.156.115.255
                  205.156.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:20:6c:fb:21:19:43:d0:5f:38:1e:ef:0e:f4:8b:e3:ad:d6:
         df:e0:fd:66:99:71:c6:4d:98:e8:61:25:b5:4e:60:f5:8c:bb:
         04:a3:a4:b6:9f:ce:16:08:aa:42:ac:06:47:f5:84:34:49:f5:
         39:68:27:5b:93:52:03:8e:d5:b7:9c:50:69:4c:17:71:f7:ae:
         5b:31:b7:3f:0c:c8:42:3d:88:4a:23:c0:c9:b0:40:ea:a6:b9:
         5c:3a:00:29:73:e2:0b:57:ca:12:7e:f7:b9:57:26:fd:c0:13:
         ac:96:8d:75:b3:7a:1a:4e:b9:0c:2b:8d:e5:b2:99:15:e4:45:
         a7:9a:02:30:99:fc:05:79:0e:00:2c:f3:ed:bd:b3:a8:ea:1c:
         d3:0d:1d:25:4e:64:98:2f:86:cf:4c:33:27:e8:b4:e1:7b:68:
         63:78:6b:16:eb:2f:a2:4f:9d:62:4e:dd:d4:95:03:30:86:12:
         00:b4:bf:a2:20:a4:16:89:ee:0d:af:7a:90:f2:a6:69:ab:2f:
         48:7e:12:74:26:f5:81:cf:8c:90:d7:24:13:68:7b:01:bc:44:
         3b:e8:0b:d1:d1:6c:ec:09:24:40:92:36:a0:8c:fe:63:a5:aa:
         73:7f:b2:71:95:b7:0f:69:e9:26:ec:93:22:75:96:f6:74:01:
         af:81:4d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:23:06 2026 by rpki-client