Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/bfa3188f-a0e1-34ed-adac-4444a7b639b8.roa
File:                     bfa3188f-a0e1-34ed-adac-4444a7b639b8.roa (raw, json)
Hash identifier:          2cNnoKkqIfMmw4Y/L+yQ/0DsI7p2VFiYrsHe4hZZnUA=
Subject key identifier:   C5:BE:46:33:DF:D1:79:14:DC:01:CD:28:36:F7:39:20:36:77:6C:75
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F4328584F31B7C21CE21733B18CBC6FC0
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/bfa3188f-a0e1-34ed-adac-4444a7b639b8.roa
Signing time:             Wed 16 Sep 2026 13:00:12 +0000
ROA not before:           Wed 16 Sep 2026 13:00:12 +0000
ROA not after:            Tue 15 Dec 2026 14:00:12 +0000
asID:                     394437
IP address blocks:        206.198.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:31:b7:c2:1c:e2:17:33:b1:8c:bc:6f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: Sep 16 13:00:12 2026 GMT
            Not After : Dec 15 14:00:12 2026 GMT
        Subject: CN=829b8061-5572-4a6d-8139-0d60b78cb70a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6a:aa:29:17:c7:41:4b:51:52:44:d7:ef:20:
                    a3:4a:ea:5b:9d:ce:7b:5f:43:cc:99:8f:69:2c:36:
                    96:7c:e8:de:7b:9a:6f:78:d6:aa:a0:2e:12:b9:71:
                    68:a3:02:15:3f:5b:45:a4:20:c7:08:fa:94:a5:11:
                    6d:4c:94:f7:3b:44:81:d7:67:44:56:0a:04:5f:23:
                    53:4f:2e:8e:58:5c:be:17:3b:5d:cd:6d:ca:cb:71:
                    9e:4b:c6:2e:39:56:15:bb:9b:e8:75:0d:d1:16:1d:
                    35:49:fa:39:59:c4:f2:b8:31:7c:4a:22:67:87:a4:
                    1b:62:fc:a0:52:ae:2e:ba:3e:91:24:d8:c6:9f:ab:
                    4a:79:60:74:08:81:8c:53:0f:d5:6b:af:5f:f6:58:
                    81:aa:76:39:55:85:03:fa:6c:32:b5:f7:06:b3:2a:
                    e9:1a:be:01:57:a1:32:38:d5:41:3d:01:29:73:18:
                    c3:ee:6a:52:f6:87:d7:1e:67:d3:a7:e6:74:8a:60:
                    fa:28:42:30:75:ab:ff:9b:29:2b:51:f4:4c:2a:11:
                    82:6a:40:5a:94:7e:37:03:ba:72:e9:4e:1f:3e:3b:
                    f9:4e:98:67:43:ac:98:1d:06:2e:64:d6:a0:1b:d9:
                    d3:1f:7c:ad:8d:61:06:b4:d9:38:73:15:40:f4:52:
                    bd:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:BE:46:33:DF:D1:79:14:DC:01:CD:28:36:F7:39:20:36:77:6C:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/bfa3188f-a0e1-34ed-adac-4444a7b639b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.198.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:c6:7c:16:15:d3:be:ca:57:3b:b7:1a:9c:fb:2c:a1:30:a6:
         75:13:b8:69:fe:c0:a2:fd:9e:fe:33:4d:a6:a0:a3:ad:48:0b:
         05:c1:c2:7e:52:e8:85:f3:59:7a:8a:a5:8a:19:a2:be:9e:a3:
         52:77:5b:60:25:2c:3e:04:aa:35:73:8a:95:5f:fd:1c:d6:97:
         0b:b4:88:a0:18:1d:fb:da:69:29:4a:b7:7a:1a:f8:d0:9e:85:
         db:31:c0:95:8e:7f:51:0f:a0:f3:06:7e:d0:e9:88:ad:f8:22:
         97:75:4c:5f:1c:d7:34:4b:1d:bb:d2:48:c8:85:cc:2b:51:48:
         fc:22:d9:4b:4f:fd:81:b5:a6:33:5c:90:ad:4e:ba:36:43:d1:
         9c:83:d9:a9:95:9a:66:0c:9a:f2:ac:8c:1d:84:64:25:e2:0d:
         b0:46:b4:f8:33:c2:9b:1e:da:69:1d:7c:f8:e8:df:10:34:c9:
         03:59:4c:6e:93:c8:89:f4:d4:ff:91:a0:2e:13:c7:f7:30:4c:
         e0:57:a1:77:6a:9d:4e:64:80:56:7f:c8:de:2c:30:56:8a:d5:
         e3:93:f6:d9:05:df:e3:6d:17:fc:8e:27:90:69:fb:0b:64:82:
         21:40:f1:04:f4:18:e2:b4:27:44:84:e6:08:a5:54:86:e3:8c:
         27:d5:b8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:30:48 2026 by rpki-client