Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/90d6b0eb-18b3-37de-b777-9baf4e3f9089.roa
File:                     90d6b0eb-18b3-37de-b777-9baf4e3f9089.roa (raw, json)
Hash identifier:          mttvklK8CmAH8Y1o9alCUxeBnwN0KyKCtgRRBVzAP9c=
Subject key identifier:   8A:42:E1:95:9D:B3:42:63:57:AA:DA:9B:59:E8:B6:03:2D:83:90:0C
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F4328584E921FA339115FDF4CA09E7800
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/90d6b0eb-18b3-37de-b777-9baf4e3f9089.roa
Signing time:             Tue 21 Jul 2026 09:00:12 +0000
ROA not before:           Tue 21 Jul 2026 09:00:12 +0000
ROA not after:            Mon 19 Oct 2026 09:00:12 +0000
asID:                     393365
IP address blocks:        162.244.102.0/24 maxlen: 24
                          162.244.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:92:1f:a3:39:11:5f:df:4c:a0:9e:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: Jul 21 09:00:12 2026 GMT
            Not After : Oct 19 09:00:12 2026 GMT
        Subject: CN=97b3cc1e-7903-4d90-bff3-d9666686fa16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:55:5b:4b:4c:83:01:6d:df:82:2e:8c:48:00:
                    22:b7:70:55:74:4a:67:e2:a2:df:ff:d3:c2:9b:fe:
                    48:98:87:10:1a:17:5d:1b:d4:66:57:48:51:ad:38:
                    9e:ec:78:09:01:59:9d:7d:d0:59:3d:72:b8:26:77:
                    6e:a0:43:65:c0:6b:ca:f1:58:7e:22:a3:d8:da:13:
                    67:ce:0a:df:56:d3:a8:9e:01:da:c2:d8:e5:f1:b5:
                    17:ef:8f:66:1a:40:1f:b4:11:49:8f:67:53:38:31:
                    45:5b:4c:cb:4b:8e:80:ae:02:7c:81:55:fb:6d:9d:
                    6c:8e:2e:b7:3f:39:2c:13:3e:1c:72:e2:70:ca:0e:
                    d4:86:c0:62:31:e3:ee:ec:17:2f:70:7b:f8:7d:5b:
                    1f:75:a6:9b:d7:0d:cd:f9:04:73:13:0d:78:1d:33:
                    42:30:d7:32:43:97:e5:3e:89:da:43:0f:30:25:89:
                    11:db:0e:af:be:a1:84:35:16:48:92:b2:55:45:6a:
                    fb:1c:f8:81:b4:35:7d:be:b8:14:83:d3:1b:0d:3c:
                    19:8f:41:72:cf:38:f4:41:e1:66:5e:59:95:35:c0:
                    be:58:5d:97:c7:b6:3e:ef:da:ea:ef:84:4e:1f:c2:
                    f5:c1:3a:24:ed:93:cc:33:bd:f5:4a:34:bb:52:c3:
                    5f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:42:E1:95:9D:B3:42:63:57:AA:DA:9B:59:E8:B6:03:2D:83:90:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/90d6b0eb-18b3-37de-b777-9baf4e3f9089.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.244.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:5a:03:eb:24:3f:a5:a8:68:42:43:3b:c9:ca:f8:88:57:39:
         ba:a5:29:e3:a8:81:82:e3:e6:ff:34:a7:4f:5f:18:03:e9:39:
         c3:e7:f7:e4:47:03:1c:17:b4:7b:c8:4e:bf:ea:ee:46:aa:58:
         1c:5d:6a:11:12:c5:40:6c:07:9c:e2:9a:2e:0b:82:29:b7:1b:
         bb:c1:25:4c:50:5d:f1:ae:42:2c:00:c5:da:e9:35:1b:d0:78:
         f1:7c:ac:f0:2d:0c:b0:a4:09:44:70:36:73:b1:dc:d7:ac:9c:
         58:92:fa:3b:07:77:08:7c:fc:9e:a2:28:0d:78:a2:6e:68:93:
         bf:65:bd:59:0c:9c:dd:87:b3:c8:ac:0b:bc:86:bb:05:b7:8f:
         95:21:76:f9:8f:5d:ab:04:ad:5b:b3:23:ef:0a:bc:b8:34:94:
         9d:53:9d:4e:30:c1:a7:14:87:da:f9:a3:79:35:c3:f2:03:29:
         71:19:c1:c5:73:dc:35:b2:2c:42:75:8f:a6:dd:4d:6a:a4:80:
         6c:e4:9d:98:78:22:58:58:a2:81:0e:c8:31:06:a0:0f:c4:6e:
         f4:07:d9:ec:68:42:80:50:0a:10:48:dd:80:09:db:71:f7:d2:
         48:5b:46:02:10:84:d8:16:e2:de:71:ab:bb:ff:da:0d:4d:93:
         c7:09:50:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:58:24 2026 by rpki-client