Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/90d6b0eb-18b3-37de-b777-9baf4e3f9089.roa
File:                     90d6b0eb-18b3-37de-b777-9baf4e3f9089.roa (raw, json)
Hash identifier:          rVb4+1fZVReimyAGImVVvT70PAQl5VaZ/HjY62T4/XI=
Subject key identifier:   AB:68:03:99:50:6A:D3:98:6B:08:83:23:8D:FA:2D:01:3C:C8:5A:B6
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F4328584DB1DACAAD961F83929426A300
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/90d6b0eb-18b3-37de-b777-9baf4e3f9089.roa
Signing time:             Sat 02 May 2026 01:00:24 +0000
ROA not before:           Sat 02 May 2026 01:00:24 +0000
ROA not after:            Fri 31 Jul 2026 01:00:24 +0000
asID:                     393365
IP address blocks:        162.244.102.0/24 maxlen: 24
                          162.244.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b1:da:ca:ad:96:1f:83:92:94:26:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: May  2 01:00:24 2026 GMT
            Not After : Jul 31 01:00:24 2026 GMT
        Subject: CN=f7ad7285-5a36-4e70-adec-ecac2c96f331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ed:72:ac:92:95:c3:1b:04:2c:e3:8f:da:35:
                    c8:40:a0:34:65:ed:af:11:df:25:08:5c:c1:07:62:
                    b3:48:2e:d2:46:c7:26:bb:5f:e5:d9:a8:d3:31:8b:
                    d8:3e:20:7d:49:31:8c:9a:01:8e:47:d0:a5:de:24:
                    59:1b:8e:c3:87:d9:fa:76:d7:7f:7c:8d:36:1b:20:
                    05:48:51:21:b4:19:ad:09:29:ae:32:2b:0e:ea:d6:
                    35:e8:5b:69:67:3a:cb:84:d7:42:1b:8d:b9:a6:cc:
                    7b:ac:a0:03:c3:d1:91:2c:2e:3a:fe:1e:4d:bc:b5:
                    57:fe:a1:49:71:bd:b7:49:b3:f1:a1:46:ca:c6:82:
                    3e:e9:20:a4:74:44:47:75:90:da:23:da:f5:20:f1:
                    59:1a:45:46:82:74:6a:1f:83:0f:f9:c6:f1:51:1a:
                    c9:9e:86:c9:68:f8:9b:d1:15:3f:57:53:55:a2:83:
                    f1:90:a6:75:8d:e7:73:04:3e:bb:23:df:df:6c:d4:
                    81:b4:61:64:48:6d:09:cf:b7:60:0b:45:aa:ef:e5:
                    17:d6:31:2c:71:26:08:7a:04:31:b4:91:ba:04:36:
                    d3:94:4a:26:37:c6:30:9f:f4:73:82:b5:74:8b:39:
                    64:46:b6:f7:20:d5:3f:0a:05:13:d9:2d:5d:80:fd:
                    20:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:68:03:99:50:6A:D3:98:6B:08:83:23:8D:FA:2D:01:3C:C8:5A:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/90d6b0eb-18b3-37de-b777-9baf4e3f9089.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.244.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:d9:f2:e6:dd:f4:44:9f:b3:e1:e1:a5:d2:02:d4:2a:75:d0:
         2e:de:6b:0d:f9:61:95:9c:f5:13:04:a3:04:6d:b7:03:e3:d3:
         e9:45:7a:26:e9:35:dd:06:28:e2:e1:42:e4:5f:26:a6:c4:aa:
         86:90:7f:34:cd:71:c7:7c:73:dc:aa:ce:54:9d:f9:e1:03:0b:
         2c:35:ae:a8:53:88:7d:c4:1d:35:f8:55:80:62:0b:88:fe:2d:
         b6:5a:2d:de:62:7d:72:87:81:85:cf:7d:64:b2:a3:90:1e:aa:
         6d:68:79:b4:62:3b:c1:37:33:5f:02:fb:ec:02:45:9a:e1:96:
         5a:ca:3a:1a:69:47:65:41:7a:b1:84:c0:9a:fd:c2:ae:97:7a:
         de:fc:97:2c:97:d7:fe:27:52:8c:1f:eb:65:b8:4b:25:b6:60:
         50:c5:4e:96:7f:6e:92:dc:c3:22:3e:37:2a:fe:69:ef:dd:bc:
         eb:89:fd:05:c6:a1:81:f9:5e:9f:11:88:ad:0c:0d:bf:80:39:
         9e:d9:25:5f:38:d0:d4:ab:d7:0b:cc:bc:38:e9:84:1f:86:46:
         0e:ed:26:c6:d5:3e:8f:32:4a:b4:8a:c7:f4:00:26:4c:8e:4b:
         d6:d6:70:3f:ce:1b:0f:f9:5c:71:9b:fc:c1:b0:3f:50:0d:41:
         9c:4c:49:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:09:38 2026 by rpki-client