Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/4f7fc206-638d-3fed-8702-51154262e297.roa
File:                     4f7fc206-638d-3fed-8702-51154262e297.roa (raw, json)
Hash identifier:          iy5kAhbi3QpDNh6vQO1XKOZ381B/6xe4K542wGXjpXo=
Subject key identifier:   E7:74:DE:84:2D:03:3D:61:76:CC:46:9B:0F:21:48:A7:CF:5D:91:94
Certificate issuer:       /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06
Certificate serial:       010D0C9F4328584F3E47E878B9A8426842295E00
Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/4f7fc206-638d-3fed-8702-51154262e297.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     14618
IP address blocks:        147.124.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:47:e8:78:b9:a8:42:68:42:29:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=ed440a1d-0ff9-42a7-aaf2-a98eeb33c317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:73:c7:09:9a:2e:54:eb:6a:f3:c6:1f:23:0c:
                    2b:85:79:82:8f:36:5c:aa:b2:09:7a:09:63:39:03:
                    3e:f9:a3:41:da:73:34:dc:d0:1c:54:59:6d:b5:be:
                    b2:34:76:41:30:fe:2b:35:3c:b6:7d:cc:f7:3c:f7:
                    9b:19:48:d5:40:cb:12:43:ef:4e:08:1d:77:d0:90:
                    9c:12:2f:4c:59:23:9d:c2:75:3d:c5:99:d7:f0:93:
                    59:ca:c0:c3:d3:b8:49:f5:17:e4:3e:09:51:29:70:
                    c2:1f:8d:ac:f6:5d:53:21:ee:fa:15:ff:fa:5d:a2:
                    50:46:94:74:f5:1f:cb:30:f7:8e:9e:a0:12:b8:a9:
                    1d:6e:ec:6a:9a:51:7e:12:9b:cd:3a:32:56:30:dd:
                    c1:2a:e1:99:03:76:6f:e5:de:f5:b6:cb:3b:91:2a:
                    35:23:90:12:cd:a9:7c:13:ce:52:7c:66:78:03:5f:
                    e0:f2:08:46:20:de:55:f5:0d:a3:be:38:43:01:9d:
                    87:9d:5b:6d:61:cd:39:ec:c0:0b:d2:77:37:a5:a4:
                    cd:7c:12:4e:c7:f4:ed:97:de:5e:bd:12:51:07:3c:
                    ef:41:06:94:e3:68:18:c1:95:2c:7e:c7:a0:d2:07:
                    99:1f:59:c4:8c:98:ae:45:a1:b0:4e:c4:53:99:3f:
                    2a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:74:DE:84:2D:03:3D:61:76:CC:46:9B:0F:21:48:A7:CF:5D:91:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/4f7fc206-638d-3fed-8702-51154262e297.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl

            X509v3 Authority Key Identifier:
                keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:32:b0:45:4b:85:12:6b:15:f8:21:60:1f:70:19:6a:91:40:
         2f:27:eb:4d:f1:d1:1d:b1:3b:b4:83:43:90:cf:96:e1:6e:b3:
         5d:77:83:f2:9b:34:48:b8:69:a0:d5:e0:07:b9:d7:68:0f:8e:
         ba:dc:b4:d8:c1:08:72:26:6c:05:45:35:7f:1a:a7:73:49:62:
         16:03:7f:9a:26:89:0f:3f:d9:ca:ec:43:20:26:16:36:e2:77:
         e0:e0:04:88:43:05:4e:5e:eb:53:cf:fd:78:1e:fa:96:ed:28:
         58:13:9c:68:0d:8d:c9:83:46:1c:fd:de:88:0d:08:c3:78:4b:
         e8:7b:c3:65:54:87:8c:15:ca:15:f4:fa:7c:84:a6:c2:3b:bc:
         a2:fb:4c:e9:8c:d0:dd:25:2d:22:d4:c9:4b:2b:3b:7d:2b:b3:
         f9:66:6a:a4:a8:4b:44:bf:26:5b:0f:17:de:1d:44:ab:d6:77:
         bb:1f:53:23:47:5d:4b:a5:37:96:04:c1:eb:88:03:9c:b6:88:
         aa:31:76:77:b2:c2:93:1e:9e:90:78:32:2a:ab:93:9f:63:9b:
         23:d0:bb:2d:2e:5e:aa:79:43:d6:d2:9f:1a:be:f7:38:a0:51:
         b7:9c:13:9b:36:84:78:cc:36:98:77:22:8a:ad:49:f1:41:f5:
         6c:5a:66:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:21:04 2026 by rpki-client