Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/6f81cc44-a7fe-36e6-a639-96dab6980bdd.roa
File:                     6f81cc44-a7fe-36e6-a639-96dab6980bdd.roa (raw, json)
Hash identifier:          zqYVicqlNbbm9XQxSdAAvOgvISu2MSR5KWb/OaA9vME=
Subject key identifier:   DA:18:D7:BF:94:E8:04:AC:0D:65:29:BE:E2:3A:A3:3F:94:F4:9B:DE
Certificate issuer:       /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06
Certificate serial:       010D0C9F4328584E15E49F50612A286B33C70430
Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/6f81cc44-a7fe-36e6-a639-96dab6980bdd.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     396982
IP address blocks:        147.124.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:9f:50:61:2a:28:6b:33:c7:04:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=8df0e2ef-a5cf-459c-b3b3-3d9515b49021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ac:c7:d1:15:b4:6b:35:b6:dd:88:93:f0:4e:
                    a8:ce:7f:fe:b9:4a:7a:d4:7c:12:f7:be:ac:b3:11:
                    b0:7e:c3:9c:cd:d3:5a:65:5c:5e:e8:b3:3d:7c:fb:
                    2d:77:5c:36:b2:b6:a5:85:cd:42:71:da:e3:21:2f:
                    ff:9d:05:23:8a:e7:ee:ef:d2:56:f4:e4:68:c1:ab:
                    f3:e0:d8:55:4c:39:95:4b:b3:26:11:bd:08:f8:2c:
                    76:4a:4a:71:f7:24:a9:da:12:ee:c2:54:b5:2e:b8:
                    2c:88:eb:b7:83:b6:1e:e4:9b:d5:3e:70:92:18:92:
                    56:5f:8f:0d:12:4b:2b:a6:36:3e:f6:c7:c6:b0:13:
                    3b:69:a0:24:2e:4f:2d:9c:c6:73:15:2f:82:56:65:
                    d0:2c:2a:9c:2a:c4:5b:03:67:0d:8a:7a:30:a1:d8:
                    7b:93:68:ff:37:14:e8:69:44:77:a1:d7:65:81:d1:
                    5f:bf:42:11:d9:44:65:b1:55:bd:0b:e2:8c:f4:e5:
                    85:80:b8:85:9d:cf:18:fd:7a:e7:4e:f4:81:75:27:
                    be:f7:dd:83:a4:7a:74:d1:8d:1b:05:eb:d8:a3:dd:
                    df:71:a0:50:78:a4:78:53:d1:cc:01:84:b2:0b:6e:
                    7a:f9:bf:e8:c7:97:e9:ce:c6:9c:b3:32:4d:68:cc:
                    fe:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:18:D7:BF:94:E8:04:AC:0D:65:29:BE:E2:3A:A3:3F:94:F4:9B:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/6f81cc44-a7fe-36e6-a639-96dab6980bdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl

            X509v3 Authority Key Identifier:
                keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:e8:b4:98:b8:7d:98:51:33:9c:11:9e:8a:1b:f7:03:4c:eb:
         19:7b:a6:3f:02:e0:dd:6b:98:5f:c0:cb:9e:e9:7b:e1:0a:5c:
         a3:62:60:e6:f7:65:55:42:75:84:00:5e:5c:2a:26:de:c2:0a:
         9d:50:c8:72:db:27:04:b6:a8:ef:ee:9c:24:61:26:de:7c:90:
         5c:13:05:3e:51:4f:62:6e:24:93:a1:98:e3:ba:b4:31:7d:02:
         81:0a:b4:02:55:cc:79:85:35:67:52:d2:60:4f:76:55:71:18:
         e7:3d:1d:b4:7b:d9:c4:93:09:f4:5a:c6:47:a4:4a:0c:6a:18:
         33:a1:eb:ed:37:e5:65:71:b8:e7:f9:8f:79:35:d2:22:20:ec:
         26:2e:ac:bf:87:dd:62:43:a7:ff:a1:aa:d1:5a:ee:ba:66:86:
         5d:a8:8a:40:1f:7c:61:13:cb:38:6c:d4:e0:e0:3e:b6:7a:da:
         44:fe:6e:de:84:b9:1f:7b:c1:0a:df:63:21:b4:d6:58:a6:43:
         9a:c4:99:ed:00:91:f0:02:d4:8d:44:c2:2b:c9:14:fe:d2:6c:
         0f:1e:00:3e:fa:1b:cf:05:d4:71:f5:c9:4b:25:13:b9:c9:20:
         22:7a:3e:d8:f4:fc:09:09:95:07:2c:7f:83:93:6d:31:b9:00:
         b1:f9:3b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:51:10 2026 by rpki-client