Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/f20452b5-8a48-30a5-8c9f-acc502b8b6b4.roa
File:                     f20452b5-8a48-30a5-8c9f-acc502b8b6b4.roa (raw, json)
Hash identifier:          cJR0RTF+jLAfT5r74ng+g2Q/UY7m7LF3ptfsXlkr3tM=
Subject key identifier:   51:4C:44:6A:CB:45:25:AC:42:3C:C8:62:81:44:3B:D3:AA:DB:75:87
Certificate issuer:       /CN=9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec
Certificate serial:       010D0C9F4328584EFECDA0793F8F850B7E3C2A80
Authority key identifier: B6:F3:A8:F6:CC:10:73:46:38:5F:AB:6A:C9:47:D8:74:32:0F:94:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/f20452b5-8a48-30a5-8c9f-acc502b8b6b4.roa
Signing time:             Sat 29 Aug 2026 07:18:09 +0000
ROA not before:           Sat 29 Aug 2026 07:18:09 +0000
ROA not after:            Fri 27 Nov 2026 08:18:09 +0000
asID:                     11179
IP address blocks:        140.106.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fe:cd:a0:79:3f:8f:85:0b:7e:3c:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec
        Validity
            Not Before: Aug 29 07:18:09 2026 GMT
            Not After : Nov 27 08:18:09 2026 GMT
        Subject: CN=18dcc1a5-722c-4d6f-9e06-b862c99c7902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:0b:29:5d:9f:09:76:b1:f4:19:80:12:1e:c3:
                    55:28:7b:da:51:e6:f4:f5:72:80:6b:51:5a:b1:c6:
                    7f:48:3d:1b:ca:12:17:7d:89:ef:85:2e:d8:56:d1:
                    be:2e:a5:00:13:26:3c:01:c8:ad:e3:a2:f9:84:07:
                    16:b3:1e:b6:a0:44:63:32:9a:d7:ac:db:ce:33:d6:
                    13:11:26:ad:5b:fc:0b:ef:a7:62:3d:89:47:d1:2d:
                    c1:a7:67:7d:5c:4f:7a:20:ac:68:55:e4:e2:e4:d3:
                    f3:48:32:ec:e8:9c:6e:c6:c9:bd:46:8c:b0:58:87:
                    76:bd:e2:6a:df:03:22:b2:ae:33:51:24:6b:6b:2a:
                    1e:5d:39:e4:eb:aa:c2:11:f7:af:47:e9:80:65:62:
                    14:c2:7a:12:cd:26:43:24:c9:a5:bb:81:e1:3c:d5:
                    b0:00:34:84:fb:ae:4f:0c:33:98:e5:db:cf:21:67:
                    7f:30:ed:d7:d5:26:f3:b9:11:93:a7:42:9b:50:b9:
                    b0:62:75:5b:64:7e:4c:4d:2f:61:02:ad:bd:68:b7:
                    01:9c:e3:a5:69:55:48:d6:76:6d:50:8a:7c:3b:c4:
                    92:83:7a:32:07:57:c6:8e:c9:8b:1c:8b:70:3a:4d:
                    a7:d7:15:5a:52:94:19:16:80:62:39:c7:dd:77:91:
                    d1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:4C:44:6A:CB:45:25:AC:42:3C:C8:62:81:44:3B:D3:AA:DB:75:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/f20452b5-8a48-30a5-8c9f-acc502b8b6b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.crl

            X509v3 Authority Key Identifier:
                keyid:B6:F3:A8:F6:CC:10:73:46:38:5F:AB:6A:C9:47:D8:74:32:0F:94:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.106.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:d5:26:c2:58:9f:46:3a:a7:76:a3:11:e1:5a:8b:b8:18:b6:
         f6:f1:df:8f:03:7a:0d:87:d8:6a:1d:fa:ce:56:58:ca:77:cb:
         88:44:ae:ba:28:ca:ca:f1:c8:15:bf:ab:8f:46:3d:26:42:1e:
         ed:c9:72:b5:4b:46:ca:7a:3f:88:9b:3a:86:74:7d:b2:0c:f0:
         81:85:54:9e:d1:66:2c:86:db:7d:34:69:ab:2e:1b:f0:ea:18:
         19:c0:5a:04:c4:ea:63:47:92:15:b0:6c:34:ef:ae:79:fc:de:
         50:3f:b2:4d:7e:bb:17:7c:ad:45:20:c5:62:10:fb:ed:ee:b9:
         0b:9e:70:3e:40:7b:5e:0a:02:61:30:f7:36:d8:63:2a:84:76:
         0f:f0:bf:c9:a9:d3:ae:49:c7:92:41:cc:1b:57:f6:e3:c5:89:
         5d:eb:88:b2:aa:9f:18:57:4d:08:58:62:b3:bf:62:4b:e3:dd:
         ec:2c:4b:0c:79:7a:e4:33:f3:76:47:9f:37:b6:61:f9:76:18:
         5f:23:75:68:c8:47:68:e0:6b:dd:32:d0:5f:3a:ee:36:72:59:
         da:9f:8a:e5:4c:0a:b8:79:22:b5:48:24:1b:c1:8c:1d:20:a6:
         3b:86:5c:7e:de:55:90:1f:e7:a7:02:46:50:ca:1d:46:a0:a8:
         ea:e3:15:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:08:35 2026 by rpki-client