Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d86fdaf4-369c-338b-84f9-7b070357186a.roa
File:                     d86fdaf4-369c-338b-84f9-7b070357186a.roa (raw, json)
Hash identifier:          IoLo/MqFf/NU1HgcrsCJKa75Gq0AtZE/75TwEgDPzfw=
Subject key identifier:   B9:AA:02:2D:BD:BC:3F:5F:FD:63:79:98:22:7E:4B:CD:CE:A9:C0:4C
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584F3052676C329C23782B1F7080
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d86fdaf4-369c-338b-84f9-7b070357186a.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     396481
IP address blocks:        152.44.189.0/24 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:67:6c:32:9c:23:78:2b:1f:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=1387d4ea-7032-4f59-844b-bcd205d30cce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8b:ec:ae:f8:f1:bb:a5:69:23:64:bf:0d:fe:
                    47:6f:8e:c1:91:81:55:3f:80:42:26:3b:3b:1b:2f:
                    5e:53:e6:8b:68:4e:94:62:42:d9:da:54:5b:43:12:
                    24:d4:c2:2c:03:a7:81:5b:8b:c4:cc:90:20:71:c6:
                    e3:e5:bb:8d:ff:1f:c0:22:7e:8a:9f:4d:c8:64:86:
                    7a:c0:1a:56:3d:b6:34:76:2a:80:7f:11:9f:c9:5c:
                    fb:1d:ce:4f:95:e6:06:66:f9:db:13:f5:cf:f8:ef:
                    9c:bd:c7:8d:15:63:06:51:f5:41:51:2a:02:86:46:
                    76:0e:87:8d:cf:95:ef:73:1b:b3:c0:32:2d:7d:04:
                    76:77:c0:34:ad:f5:87:43:99:28:ac:dd:86:65:02:
                    0d:38:32:bd:69:92:58:2c:9d:ff:a1:65:6e:ce:dd:
                    d6:28:d5:57:a7:88:1b:ad:be:55:81:43:82:d3:f5:
                    95:09:77:74:6d:95:d6:0c:46:4c:d6:bb:f7:20:9c:
                    54:04:24:9d:5d:d7:5c:e4:bc:46:1c:7e:2d:12:6c:
                    38:76:36:3a:d2:b9:84:72:45:47:d7:3f:24:56:48:
                    59:4c:01:58:02:ee:9e:9d:57:3c:60:79:bf:2b:cb:
                    c1:0f:05:05:70:46:75:75:97:a6:49:cd:c9:00:10:
                    6d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:AA:02:2D:BD:BC:3F:5F:FD:63:79:98:22:7E:4B:CD:CE:A9:C0:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d86fdaf4-369c-338b-84f9-7b070357186a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.44.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:ca:13:fa:e2:f2:b5:26:95:d2:f4:c2:80:f5:2b:2f:44:bd:
         de:b4:3e:b7:04:61:63:37:04:08:b1:b9:9a:9c:f6:ef:9a:76:
         e7:e8:dc:51:94:aa:51:bb:a0:1d:f1:42:bf:05:1e:f3:c8:0e:
         2b:56:3c:97:37:9d:21:97:d4:a0:10:3a:93:71:8f:fc:df:1c:
         79:5d:0c:c5:70:21:f6:9b:39:01:ab:ac:3b:12:b0:91:3a:f4:
         da:4e:57:64:63:01:f1:dc:97:ff:62:b9:48:72:0b:e2:40:1c:
         af:03:86:ce:c2:52:eb:57:a7:d4:02:35:75:cc:cb:56:6d:7c:
         4e:21:fc:1e:a7:6e:3e:77:05:0e:4c:be:f2:8a:62:42:d5:13:
         0a:0c:a4:4a:5c:97:98:bf:48:5a:61:47:4b:f9:5c:31:9b:c9:
         1a:2b:b0:cb:83:b2:0c:9f:d2:26:b5:06:1b:d7:0d:56:f9:64:
         46:b6:9a:81:ec:ae:02:1f:ec:15:60:40:3b:6f:c6:e3:5d:2e:
         bd:8c:f1:bb:b7:b9:45:81:79:7d:8b:2d:23:4b:51:45:0d:db:
         ee:19:70:e3:01:d7:44:36:cf:e0:88:99:84:19:f2:50:0e:32:
         a7:8a:37:43:55:6f:e6:bb:ef:5b:7c:c9:89:7a:e4:fa:b0:5e:
         6f:e6:ec:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:41:47 2026 by rpki-client