Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/bbdbee27-b2d9-3b51-bd13-577e8f1d4165.roa
File:                     bbdbee27-b2d9-3b51-bd13-577e8f1d4165.roa (raw, json)
Hash identifier:          XE6iaM/hwoGFsA9cYkl57Iw8BEq9degTYyUr/S42jmM=
Subject key identifier:   7D:D4:58:A3:B7:12:D1:04:C5:E5:AA:45:B1:C4:5E:98:C8:84:CC:70
Certificate issuer:       /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial:       010D0C9F4328584F3A17D008CCA65C0B0C1BC940
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/bbdbee27-b2d9-3b51-bd13-577e8f1d4165.roa
Signing time:             Sat 19 Sep 2026 13:00:12 +0000
ROA not before:           Sat 19 Sep 2026 13:00:12 +0000
ROA not after:            Fri 18 Dec 2026 14:00:12 +0000
asID:                     4540
IP address blocks:        205.236.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3a:17:d0:08:cc:a6:5c:0b:0c:1b:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
        Validity
            Not Before: Sep 19 13:00:12 2026 GMT
            Not After : Dec 18 14:00:12 2026 GMT
        Subject: CN=733cda53-33a8-469a-b047-bf7290eab3c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9f:5d:08:0e:b0:4c:9e:0f:42:06:3b:af:43:
                    1f:ee:20:1d:1b:18:be:86:a9:e4:6d:dd:9f:af:d6:
                    48:eb:72:0d:3a:81:a0:61:56:cd:c6:34:15:0e:16:
                    b9:2f:0f:02:d9:f3:d4:85:b0:e4:34:10:30:34:ee:
                    2b:2c:fe:93:e9:b9:c9:18:15:80:0b:c9:3f:a8:08:
                    b2:b8:de:11:ca:bd:21:34:45:19:f9:11:dd:d4:6b:
                    da:55:a0:f5:be:f3:af:87:b0:6c:95:64:07:f5:97:
                    84:52:8a:23:d2:5a:44:42:e8:ad:99:91:e5:1c:4d:
                    80:1f:30:c1:74:2a:fa:49:23:e3:f1:62:78:fb:bd:
                    a3:99:56:ae:3b:69:80:1d:f6:85:be:3f:81:2f:a2:
                    1f:6b:39:24:a7:aa:c2:ef:32:d5:65:c1:ea:a0:92:
                    a0:c6:3d:2c:d1:2f:b8:a4:64:09:41:7a:e2:09:f0:
                    d5:9b:cf:75:0c:4d:2b:b8:6d:16:81:6f:b1:ea:a3:
                    d4:de:1d:85:74:57:f3:88:29:51:f9:4d:8d:65:10:
                    fb:3a:f6:b3:4a:62:88:90:41:29:32:11:ac:a9:a4:
                    32:97:1d:c6:f3:93:97:82:e4:15:81:d6:ea:18:c4:
                    95:89:03:d5:08:e2:e5:73:d9:07:3e:0c:8b:bd:ee:
                    f3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D4:58:A3:B7:12:D1:04:C5:E5:AA:45:B1:C4:5E:98:C8:84:CC:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/bbdbee27-b2d9-3b51-bd13-577e8f1d4165.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl

            X509v3 Authority Key Identifier:
                keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.236.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:b0:f6:0e:bd:6c:3a:f1:38:dc:af:3c:6e:3e:e0:b2:fc:5b:
         37:02:2d:69:57:d2:a2:eb:51:97:53:7d:2c:22:35:90:91:3e:
         70:d9:44:96:60:45:55:34:15:9f:a1:cb:e0:5c:f3:1e:b6:3c:
         36:d2:8c:65:96:5d:86:bd:4d:ae:d3:65:64:60:97:9c:77:0a:
         01:6b:3a:86:04:74:86:63:01:7e:aa:ee:5e:d6:57:86:35:e7:
         73:ec:4a:81:70:c7:0f:f1:1f:6d:2a:dd:82:54:f0:56:6f:55:
         1f:87:7d:41:5c:9d:da:9e:79:da:db:3f:78:36:13:7f:e3:5b:
         db:45:88:06:03:5b:1f:81:05:a6:5b:ba:8d:56:e6:91:64:c1:
         e6:f9:79:67:ad:3c:a2:e3:1d:10:53:cd:f8:32:0a:63:f6:98:
         40:f8:1f:fe:95:9a:74:52:f0:fa:ab:70:cb:1c:68:96:29:89:
         f9:a4:64:aa:e3:d9:c4:dd:16:8e:5f:ee:0a:7e:3d:b7:0c:4a:
         50:a2:17:1a:4c:b4:3a:28:48:2b:13:8a:d4:59:77:16:79:d5:
         e8:19:1c:fc:98:74:fc:ac:3a:bb:df:9c:16:05:41:71:9d:2e:
         a4:b7:ba:48:c3:06:41:e0:22:74:81:c2:f4:eb:bd:38:32:58:
         28:0d:f0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:21:36 2026 by rpki-client