Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d4693cd5-f007-3e1d-bdde-b80179c8090b.roa
File:                     d4693cd5-f007-3e1d-bdde-b80179c8090b.roa (raw, json)
Hash identifier:          lvmDn/SUSWida6LuasE6xG6pWjupHB9W/itSXzYleIc=
Subject key identifier:   B1:B2:33:71:F2:80:7C:77:AB:35:21:48:5F:38:5C:F4:CB:6C:F7:7D
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584D143D4BEA9E46D661F2D9A780
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d4693cd5-f007-3e1d-bdde-b80179c8090b.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     19886
IP address blocks:        171.162.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:4b:ea:9e:46:d6:61:f2:d9:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=9c84d79f-ab5b-4ea9-a3b8-5dde66294c17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:57:99:6d:46:9c:90:8c:59:03:0e:13:b6:e6:
                    9c:aa:13:c2:8a:1e:d6:23:17:4f:19:97:5e:72:b8:
                    3d:ce:b6:49:cb:7c:81:0d:19:06:2b:df:92:d5:4c:
                    ee:64:fc:d4:aa:57:06:05:b5:8a:00:64:25:ee:cd:
                    56:be:3d:84:ea:d7:00:10:c3:b2:26:ea:32:da:89:
                    ba:e0:0d:56:a5:d7:ed:af:ad:32:41:df:79:6e:93:
                    dd:0a:21:54:da:02:78:3e:b0:24:93:fa:7d:47:4b:
                    35:7d:2c:07:6e:f8:43:f4:c8:6b:60:61:e4:f9:ad:
                    bf:ab:67:91:5e:d3:fe:74:9f:49:eb:c7:45:f1:02:
                    e0:45:de:21:82:ac:a5:fa:62:61:57:a2:c6:4a:85:
                    fd:d0:f2:6e:43:ff:1e:c9:e2:84:fe:4f:34:78:f9:
                    27:a6:56:b7:60:19:28:d7:60:c1:1d:a0:3a:a7:58:
                    d1:81:6d:1c:0d:9c:9f:44:68:b3:76:8f:bc:e0:0e:
                    20:ff:b5:b0:01:7d:1c:a9:ab:63:a9:07:5c:43:00:
                    50:f2:f2:1f:1a:2c:b5:a1:1e:e0:2b:c0:66:fa:d0:
                    ea:db:68:e9:2d:a2:37:b0:a6:83:22:4b:d3:0c:ed:
                    d4:d9:9e:97:63:56:aa:9c:15:2e:f4:dc:09:40:09:
                    e9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:B2:33:71:F2:80:7C:77:AB:35:21:48:5F:38:5C:F4:CB:6C:F7:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d4693cd5-f007-3e1d-bdde-b80179c8090b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:22:94:72:f6:3d:ed:f4:d0:8c:17:e8:7a:9e:8d:39:f5:32:
         56:20:7d:32:42:27:89:29:15:3b:b8:f4:f5:96:4f:4d:3c:7f:
         57:66:30:04:94:42:f9:6b:2f:27:3d:01:8b:50:c4:fe:95:ea:
         03:31:94:8e:0f:8f:c8:59:9b:26:c5:8e:92:eb:03:0a:ef:2c:
         8b:4a:f4:78:cf:ee:f8:17:6f:43:12:45:b4:0b:d8:0b:13:a7:
         ce:7c:cc:f7:50:c9:ca:11:56:c3:df:16:fd:e3:08:9a:f5:75:
         db:b0:ad:82:ce:65:bc:c5:57:24:84:b7:fc:8b:bf:b2:d3:05:
         29:f1:a4:b1:dc:e9:8b:cc:b9:20:63:39:05:14:fb:3a:e4:93:
         3d:11:b4:a1:76:12:d7:b8:b0:ff:7d:4a:d7:51:76:8c:f0:3c:
         6a:eb:fe:11:43:e0:a0:d1:58:b6:8f:b5:da:d8:3b:e3:20:17:
         80:df:ce:ff:54:57:ec:e5:3c:f2:f6:ce:12:6f:4f:a9:45:9a:
         6e:28:e1:30:77:3c:3f:14:98:dc:f0:2f:c0:b2:32:7e:3c:70:
         a0:66:c1:06:93:c1:34:fc:88:69:d3:63:75:d6:e6:4e:4f:10:
         64:5e:1a:6e:4e:7a:7d:fc:f6:23:e8:55:17:d3:65:4e:c3:6b:
         ba:e8:a6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:14:30 2026 by rpki-client