Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/b1a2418a-be0e-36f5-acb7-e7371ea88cf1.roa
File:                     b1a2418a-be0e-36f5-acb7-e7371ea88cf1.roa (raw, json)
Hash identifier:          LWhw4pza3Pz7M/mB7G89g5RxYOo8jpwDQkfLyPGAr5c=
Subject key identifier:   7A:6A:3B:B8:1C:4A:C8:5F:07:16:75:69:45:56:A2:F9:5A:A4:C3:23
Certificate issuer:       /CN=6c86d366-9f08-4852-b060-53c54ef6dda0
Certificate serial:       010D0C9F4328584EA0152E55A55F88564FE77B00
Authority key identifier: AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/b1a2418a-be0e-36f5-acb7-e7371ea88cf1.roa
Signing time:             Sun 26 Jul 2026 09:00:12 +0000
ROA not before:           Sun 26 Jul 2026 09:00:12 +0000
ROA not after:            Sat 24 Oct 2026 09:00:12 +0000
asID:                     32710
IP address blocks:        164.153.131.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a0:15:2e:55:a5:5f:88:56:4f:e7:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c86d366-9f08-4852-b060-53c54ef6dda0
        Validity
            Not Before: Jul 26 09:00:12 2026 GMT
            Not After : Oct 24 09:00:12 2026 GMT
        Subject: CN=66721e15-e659-45b9-976a-4c51d503c109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cf:50:9b:d3:60:a0:a1:21:d1:be:df:c0:ca:
                    cd:54:97:22:7b:50:c2:62:38:7d:33:2c:85:f8:19:
                    b3:7f:03:dc:0e:c5:f0:75:c4:18:b0:5c:11:e9:25:
                    5e:e6:ae:05:91:55:a9:aa:a6:7c:02:34:58:2e:b1:
                    69:fe:3c:f9:f9:27:cd:8c:98:7a:50:65:79:c5:06:
                    d0:34:7b:f6:68:ba:b9:01:06:af:67:a4:4f:e1:74:
                    22:d0:76:f0:3f:73:44:70:6c:de:c7:17:2b:b7:7c:
                    f5:92:30:a8:e1:cd:0e:68:c9:1f:07:0e:99:32:49:
                    0b:25:2f:a7:93:e5:3c:3c:b6:4e:db:05:57:70:43:
                    e7:73:a5:16:41:f7:1e:af:78:0c:95:27:fc:09:7e:
                    55:9e:3f:a6:c3:8f:76:8f:70:e7:94:e6:32:62:51:
                    18:c1:bf:4b:82:d1:ee:a2:b8:81:30:f0:b8:99:41:
                    d5:bf:0a:b3:b6:33:7c:e4:f6:97:c7:0b:46:59:cc:
                    1d:ef:3d:26:a7:2b:db:86:ef:a8:af:95:03:fd:54:
                    b9:ea:e2:39:56:57:4d:bc:72:48:95:80:65:95:95:
                    29:b8:8b:27:13:eb:46:f4:60:72:35:a2:a5:79:12:
                    35:3d:d6:fd:4d:9a:b4:3f:fe:19:e6:ca:92:3b:50:
                    00:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:6A:3B:B8:1C:4A:C8:5F:07:16:75:69:45:56:A2:F9:5A:A4:C3:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/b1a2418a-be0e-36f5-acb7-e7371ea88cf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl

            X509v3 Authority Key Identifier:
                keyid:AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.153.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:84:92:91:2a:fa:65:80:51:53:e4:2f:f0:8c:d3:06:00:43:
         02:12:dd:26:34:8e:74:16:0f:2e:c1:08:a2:d3:fa:d3:12:1c:
         0d:97:58:b4:1b:86:2e:d9:15:ed:24:5f:7b:86:02:a8:87:d4:
         df:51:0d:b6:2c:ec:ef:4d:c0:d4:51:52:c2:30:cc:34:be:dc:
         6a:4f:62:29:e3:6e:8e:c2:8f:4b:14:4f:48:d2:98:22:f4:96:
         20:a8:37:2c:de:82:aa:dc:59:27:5a:f2:9a:9c:d5:0e:c1:9d:
         c7:b0:15:59:b8:dc:3f:cb:bf:f2:d2:2e:04:5f:99:80:8f:db:
         10:0c:1c:e4:a1:f6:b4:9c:2e:b4:e7:1c:06:3e:25:1b:b0:9a:
         ad:f2:51:15:65:78:fe:7d:fb:e7:73:b3:b2:21:fd:6e:4e:6d:
         79:c3:2d:7f:99:55:32:0a:ef:bb:d4:21:3c:65:ae:3d:44:18:
         37:77:06:67:cb:3c:8c:d3:0e:d4:75:6a:ad:5d:58:60:07:2f:
         23:99:65:99:61:1a:dd:27:1c:32:2b:43:99:9e:73:0e:04:69:
         54:0e:c4:4f:a6:a3:aa:69:e7:9d:1f:72:90:f8:f2:f3:89:1b:
         39:b8:d4:9f:78:ce:0d:4b:05:06:d1:11:5c:80:46:d4:8d:37:
         69:71:e7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:55:27 2026 by rpki-client