Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/e9e5bca2-5780-3ae5-8904-89af2a588865.roa
File:                     e9e5bca2-5780-3ae5-8904-89af2a588865.roa (raw, json)
Hash identifier:          krwr9ZpKJK6DBRXXBuibhW0XHLpn4ESkQv1bexlmW+M=
Subject key identifier:   E3:22:F6:08:C1:F9:49:23:7C:D6:44:D7:D0:64:80:97:DE:A2:AF:19
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584E48248D30E6362B2F4E522600
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/e9e5bca2-5780-3ae5-8904-89af2a588865.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     20253
IP address blocks:        162.222.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:8d:30:e6:36:2b:2f:4e:52:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=e14b8669-5f24-4af6-81cb-bfafdb402308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c6:9d:46:40:ef:74:95:2e:d2:32:4a:a0:b9:
                    75:fd:21:be:f8:5f:53:8f:76:9b:d4:56:c1:82:1d:
                    5a:27:52:f2:5c:04:3b:c9:21:23:bc:b5:b8:44:db:
                    41:ca:8c:bb:41:26:97:95:42:78:52:5f:50:d1:17:
                    44:e3:88:69:8d:f7:ab:21:54:81:f1:08:31:77:6e:
                    8e:b0:78:93:54:d8:20:36:1c:c8:f4:ae:36:25:d8:
                    ad:9a:19:1e:de:d5:d7:64:7a:7e:03:2c:d9:7f:7b:
                    aa:47:65:67:14:4f:6e:8d:91:ba:92:74:ac:22:d7:
                    20:02:05:34:24:7a:8a:d3:1b:da:db:ce:f7:ed:09:
                    7a:c5:d7:0b:bb:fd:6d:29:c6:1f:0c:0d:05:7d:c7:
                    9a:b6:3b:e2:08:7c:47:e4:c0:9a:9d:da:f4:ef:90:
                    e5:c3:a2:6e:75:c5:c8:d6:b2:bf:8e:dc:3d:01:b8:
                    0d:7f:a6:f0:88:ab:e8:66:30:46:86:91:a6:27:38:
                    1d:7d:5a:04:a4:55:77:d5:9e:73:b2:0c:f3:f4:4b:
                    ee:53:15:e6:ca:df:84:d4:12:c2:75:05:cb:3b:09:
                    66:1f:87:f3:b7:52:43:6c:17:3c:81:9f:ba:78:51:
                    9a:0a:6a:fd:0f:64:8a:1b:92:8e:c5:6d:f3:87:7f:
                    f4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:22:F6:08:C1:F9:49:23:7C:D6:44:D7:D0:64:80:97:DE:A2:AF:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/e9e5bca2-5780-3ae5-8904-89af2a588865.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.222.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:d7:8f:9e:08:a6:32:f6:01:f5:40:62:4c:fc:ce:97:af:66:
         14:8e:b2:7a:f1:73:6c:3f:fe:ac:1e:ae:db:71:fb:0c:b6:ab:
         19:b2:4b:08:ff:9e:f9:1c:f0:56:d6:81:39:2d:4e:e5:c9:3e:
         55:30:84:80:b9:d7:a1:96:9c:68:99:1c:da:74:bc:95:1f:ea:
         7e:b2:56:a0:f5:c8:9c:41:36:0a:dc:8c:4d:d6:18:2d:b2:48:
         48:c4:e9:a0:a0:df:9a:92:a9:61:70:55:9b:ca:04:3c:c4:0a:
         37:1a:70:27:cb:f8:60:89:4a:ec:5a:e6:a0:fd:3a:85:14:0b:
         df:f1:bd:a0:60:ce:66:fd:fa:5e:de:55:9a:5f:5f:dd:4c:dc:
         e3:46:a6:4e:c7:87:35:c4:dc:ec:fe:1f:14:e6:13:6d:63:02:
         2b:fb:11:25:25:2f:94:39:d9:71:d1:51:3e:06:7a:41:79:14:
         da:43:55:d1:c3:46:8b:1f:00:5f:73:a5:89:dd:15:3b:ad:b5:
         ec:53:aa:71:3d:22:af:ff:12:ce:f6:28:7f:63:79:93:dc:5a:
         fd:4a:5d:e5:97:31:52:79:2e:6c:6c:8b:98:de:81:50:45:e2:
         77:4d:ad:44:c1:f6:19:ee:27:68:ad:5a:4e:6f:fb:df:f5:d6:
         03:cb:27:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:04:59 2026 by rpki-client