Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/cfd1865d-0fd7-32ef-a4b9-b653ba3aae86.roa
File:                     cfd1865d-0fd7-32ef-a4b9-b653ba3aae86.roa (raw, json)
Hash identifier:          KEqDqs7RcgFqz/4lBIdil2oILzoEtfrOWMX7+uqBE1s=
Subject key identifier:   4F:2B:E7:B5:5D:C6:8C:21:41:72:BF:ED:0C:80:51:D9:A1:45:9A:C8
Certificate issuer:       /CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4
Certificate serial:       010D0C9F4328584E5D14A4825B93C6F154219600
Authority key identifier: 4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/cfd1865d-0fd7-32ef-a4b9-b653ba3aae86.roa
Signing time:             Thu 02 Jul 2026 09:00:12 +0000
ROA not before:           Thu 02 Jul 2026 09:00:12 +0000
ROA not after:            Wed 30 Sep 2026 09:00:12 +0000
asID:                     53334
IP address blocks:        162.252.214.70/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5d:14:a4:82:5b:93:c6:f1:54:21:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4
        Validity
            Not Before: Jul  2 09:00:12 2026 GMT
            Not After : Sep 30 09:00:12 2026 GMT
        Subject: CN=d90ae672-4daf-423c-8a91-697976384512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:11:b6:fd:bf:4d:61:18:38:99:28:e4:8a:c1:
                    43:12:2a:a4:88:91:ed:3f:6b:48:4a:43:6c:78:d5:
                    cc:67:a8:db:42:73:59:24:6b:16:04:53:60:5c:ac:
                    07:ec:fb:cd:16:84:39:51:9a:07:08:fb:53:ab:2d:
                    26:bb:96:e5:58:3a:f0:f4:cb:17:79:d3:97:54:4c:
                    88:5f:dc:22:db:70:ff:d4:2a:fe:ab:8a:80:6e:2a:
                    b3:86:66:14:f2:88:a2:c7:27:a9:11:89:73:34:2c:
                    b6:ef:b5:90:1b:30:2d:22:82:bf:fa:a6:bb:38:c3:
                    23:71:05:f1:db:06:c6:5a:b2:cd:6c:7f:bb:b9:e3:
                    af:e9:10:48:2b:e4:d5:35:a4:ea:92:7a:53:7b:eb:
                    84:68:9f:de:eb:41:91:dc:45:56:36:5d:ea:09:8c:
                    fc:2f:57:4d:d6:aa:88:d5:7b:24:fb:b0:9c:b7:59:
                    1f:25:ca:0f:87:32:83:3a:23:4a:b2:a1:0f:34:c3:
                    30:2e:bc:3f:61:34:3c:ad:c8:5b:d0:ca:dd:a2:8c:
                    1f:85:4c:01:85:50:fd:00:8f:e6:a0:b9:a4:a6:05:
                    58:ee:2e:cb:b0:28:9e:66:db:33:5b:26:f4:93:71:
                    03:21:ce:b9:a8:1d:52:9e:6d:bb:ea:fd:0c:b7:cc:
                    39:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:2B:E7:B5:5D:C6:8C:21:41:72:BF:ED:0C:80:51:D9:A1:45:9A:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/cfd1865d-0fd7-32ef-a4b9-b653ba3aae86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.crl

            X509v3 Authority Key Identifier:
                keyid:4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.252.214.70/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:1e:d7:14:9d:eb:9b:69:a3:9f:0b:07:a6:06:32:43:7c:e8:
         10:98:e8:85:c3:cb:c9:61:64:76:20:c3:92:fc:b7:5c:c3:4b:
         9a:02:e0:8b:31:91:ac:f3:ef:a3:dc:85:48:e4:20:f2:19:13:
         97:47:d5:19:f8:31:c7:6d:f2:47:16:21:d0:f2:02:67:03:a8:
         30:24:e3:ba:83:16:b0:57:be:21:6c:08:43:8c:6f:e2:0b:44:
         51:19:21:29:a2:c0:6a:96:8e:d6:36:82:d4:88:b5:fa:9e:87:
         f7:c4:b3:af:42:6b:d4:fb:08:b9:ab:e1:8b:e6:c9:03:e3:80:
         ce:5f:43:18:c8:09:1d:67:ed:c8:d5:de:1d:e9:5e:51:a0:30:
         4e:2b:6f:5a:c3:7d:9d:2c:23:64:c9:a0:d1:41:07:65:e9:4b:
         95:62:90:a0:1f:c9:cf:b4:42:d5:f2:f3:fb:89:8d:32:4d:e3:
         5d:a2:87:54:91:a1:cc:92:8f:9a:fb:c0:fd:68:16:c1:41:35:
         6c:07:57:1c:3c:8a:10:a2:ca:92:cd:27:39:a0:4a:51:a1:1e:
         31:9a:3c:52:95:f1:de:7e:64:05:ea:32:ba:c3:0e:c0:77:5d:
         4e:7a:fc:0b:13:4e:97:21:24:62:94:43:3a:6f:6b:f6:99:d4:
         43:18:90:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:56:13 2026 by rpki-client