Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/fc0068d0-a6ed-3e6d-8858-d68416365766.roa
File:                     fc0068d0-a6ed-3e6d-8858-d68416365766.roa (raw, json)
Hash identifier:          LBKEg2Sqbomf9D/A95Bi2jo/D9b2/FPZY91k/bnTndQ=
Subject key identifier:   88:3C:3E:D1:1D:93:1F:5F:D9:7D:79:E0:5C:77:F6:FC:5C:0F:D1:20
Certificate issuer:       /CN=7770be2f-95a3-43e4-a139-53984564db4a
Certificate serial:       010D0C9F4328584DC5659671CA6E3E93EAC05880
Authority key identifier: 8E:FC:B1:77:D6:58:1B:C2:CE:12:0D:5D:2A:E9:67:7A:33:C7:6E:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/fc0068d0-a6ed-3e6d-8858-d68416365766.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     14618
IP address blocks:        162.213.204.0/24 maxlen: 24
                          162.213.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/7770be2f-95a3-43e4-a139-53984564db4a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/7770be2f-95a3-43e4-a139-53984564db4a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:96:71:ca:6e:3e:93:ea:c0:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7770be2f-95a3-43e4-a139-53984564db4a
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=c514d425-d84a-45f8-a6c1-faadad906a2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a1:2a:fd:3a:62:40:84:08:41:2b:22:a8:f5:
                    87:44:b3:1f:f0:f4:ad:9e:ee:0b:28:de:7f:10:a5:
                    95:57:5c:98:8d:54:4e:2e:08:08:d3:bf:c7:62:3e:
                    d7:f9:d8:7a:37:8c:f3:c4:ae:36:a8:a5:7b:b1:55:
                    e4:25:95:e5:77:2d:7c:b5:9f:d8:c2:0b:ab:44:94:
                    85:38:35:b3:a4:4b:9e:e2:8b:b5:5d:b5:bc:d5:3a:
                    f2:a2:b9:b8:c9:0d:56:8a:a8:6e:86:e0:20:12:40:
                    f1:79:7e:c7:8c:a3:28:cf:07:15:b5:99:5e:df:17:
                    a1:e5:1a:b5:82:72:e6:9b:68:cd:4d:55:5b:10:2b:
                    f9:d2:d7:4e:01:b8:4f:44:51:2d:f7:4c:32:9f:54:
                    f8:0d:03:2f:cb:e6:2a:af:ed:fd:02:07:e0:88:54:
                    67:e7:7b:5c:87:cb:f9:9c:2c:24:7c:4f:fb:be:04:
                    d3:78:68:10:39:74:bf:7e:42:a6:43:d0:ab:c5:6f:
                    d3:03:0a:f5:cf:60:d5:80:2e:7a:90:4b:a5:36:d0:
                    7a:af:c4:99:04:67:c9:81:c3:4a:7b:54:46:ee:59:
                    63:35:5d:dc:e7:61:a0:99:75:b2:7a:dc:64:c0:9f:
                    23:5e:dc:83:4f:3f:6f:a4:61:e2:e4:db:19:34:35:
                    98:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:3C:3E:D1:1D:93:1F:5F:D9:7D:79:E0:5C:77:F6:FC:5C:0F:D1:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/fc0068d0-a6ed-3e6d-8858-d68416365766.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/7770be2f-95a3-43e4-a139-53984564db4a.crl

            X509v3 Authority Key Identifier:
                keyid:8E:FC:B1:77:D6:58:1B:C2:CE:12:0D:5D:2A:E9:67:7A:33:C7:6E:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.213.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:11:33:10:58:63:ff:3c:43:00:3c:cc:1a:48:75:de:cb:a4:
         38:20:9d:20:36:bc:db:37:44:b4:1a:04:f2:04:0b:55:c0:9a:
         96:d3:75:59:bc:72:7e:4d:76:83:92:df:e6:a1:a7:fb:29:8f:
         bf:24:52:4e:a8:07:8c:49:e9:8b:d3:e8:2b:a3:b2:51:b3:e2:
         9b:f1:e6:c9:5a:43:35:25:81:62:ad:25:dd:dd:84:8b:65:82:
         c2:98:ce:6f:83:a4:9b:ac:d3:08:54:e0:43:20:95:ef:05:bb:
         06:e6:cc:2b:86:a9:91:b2:15:d4:ab:f7:77:5c:bc:c9:c4:9c:
         21:b3:2e:02:3e:dd:a0:61:c0:df:ea:8c:7e:1a:00:09:d0:33:
         08:75:9f:b2:6a:7d:9d:3c:54:c2:b3:bc:0e:b1:5b:5a:5d:84:
         24:23:4d:22:1b:86:d9:62:70:fe:c6:05:33:6f:6a:09:be:53:
         5c:de:9d:02:57:2b:64:a1:29:b1:1f:18:6b:5e:23:5c:67:bb:
         73:21:4b:28:38:18:cd:79:f0:54:a0:c7:0a:10:cb:2c:26:d6:
         99:25:35:af:9d:65:4c:92:be:ab:a0:1e:fe:c0:8b:93:12:48:
         bc:1d:ef:b3:c8:b4:89:9a:eb:70:c2:e7:63:fd:57:62:89:10:
         c5:de:20:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:19:56 2026 by rpki-client