Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/cb488f32-86e5-3329-ab25-329e6d993cf9.roa
File:                     cb488f32-86e5-3329-ab25-329e6d993cf9.roa (raw, json)
Hash identifier:          WSl9KMg+Omf7xSE0un+GfVDFkizLQFi96Ahav5QtB9E=
Subject key identifier:   DA:44:63:02:26:0D:C1:75:71:54:9D:07:11:8F:27:57:6C:FF:75:C1
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F4328584EA78738AE38BEC5F3C52B0340
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/cb488f32-86e5-3329-ab25-329e6d993cf9.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     109
IP address blocks:        144.254.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:38:ae:38:be:c5:f3:c5:2b:03:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=fb0396f0-ca6f-4657-a88d-ee545b1e07bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f2:23:72:2c:e2:09:42:ae:c9:1a:b4:9b:f9:
                    e0:af:0e:df:be:7e:6b:1c:df:97:59:8b:fe:4b:8d:
                    61:83:5b:7f:45:f5:43:5d:ee:ba:c2:58:7d:4d:fa:
                    bc:83:28:c6:05:04:14:b6:4a:ab:5c:04:35:90:96:
                    5e:d2:1a:cb:78:ef:18:5c:59:ef:8b:47:d8:99:d1:
                    93:60:42:9e:c1:c9:ce:cd:f8:52:f1:81:bf:4c:a3:
                    dd:f2:e3:ec:33:90:c8:cf:a0:46:6a:ad:7c:bc:b5:
                    23:9d:ac:a5:39:33:62:9e:0c:3f:65:8d:fd:8b:ec:
                    53:0b:08:ee:fd:c5:7f:af:fb:dc:d2:1c:55:91:63:
                    25:da:4c:15:88:4f:2a:c5:61:63:b8:53:74:cb:ef:
                    9f:5d:22:1c:88:66:ff:5f:1c:52:4d:d2:80:a2:57:
                    4a:dc:09:de:9d:a6:cb:db:42:22:fe:a6:bb:87:19:
                    cc:d5:5f:4d:18:76:b7:ab:4f:44:d2:c1:4e:40:25:
                    0b:7b:7e:c2:c4:7a:07:ff:c3:40:5d:56:73:00:5b:
                    3d:02:c9:22:76:e9:e6:8b:64:9e:75:01:e7:5a:17:
                    2c:ca:cf:8f:b6:29:47:58:cd:2b:1c:5a:dc:5c:fc:
                    60:36:5f:67:72:6f:cf:b9:00:5d:9a:62:0a:1a:95:
                    f7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:44:63:02:26:0D:C1:75:71:54:9D:07:11:8F:27:57:6C:FF:75:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/cb488f32-86e5-3329-ab25-329e6d993cf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.254.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:3f:ce:eb:a1:f8:ff:57:3e:b2:c9:76:27:0c:ae:8d:66:c9:
         32:46:de:e6:72:a0:df:33:52:19:ed:d2:8d:21:02:7a:6b:3f:
         5c:b0:d1:59:b4:bd:bd:d8:45:fb:a6:fe:35:d4:f7:22:e9:13:
         48:3c:25:38:f6:b2:35:be:25:9a:0c:3d:91:b0:07:1a:d4:ff:
         7c:d4:df:93:7f:05:3c:47:2e:0c:3a:cc:fa:c5:8c:be:4d:3e:
         ee:90:93:4b:06:08:9b:0a:7e:38:6d:44:9a:50:ae:43:44:b7:
         49:f9:cb:30:62:8a:97:a8:85:7e:09:1e:38:05:c4:ba:f1:60:
         4e:33:ae:44:71:f3:97:bf:38:7c:4b:3c:d5:28:ee:e5:73:ec:
         13:e2:94:95:da:d7:02:60:b6:a2:b2:06:b1:1a:59:81:27:38:
         cc:c6:41:d5:aa:c8:2d:30:38:0d:aa:86:53:de:da:92:ed:59:
         eb:73:08:5a:75:69:71:bc:1b:1a:4e:d7:ad:23:29:bc:26:35:
         ab:27:22:36:86:ba:e4:91:42:56:87:4e:40:30:65:a7:a9:98:
         86:07:72:cb:1c:46:e9:93:a0:85:e3:68:df:53:11:d2:fe:83:
         12:83:31:81:07:32:f8:16:f9:ca:9d:20:65:4a:18:9e:9a:d3:
         42:d8:3a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:33:56 2026 by rpki-client