Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ddca76af-4c49-4bd6-b142-1774c42d55b2/921235d4-dca8-3fbb-acb6-08ba21924e2c.roa
File:                     921235d4-dca8-3fbb-acb6-08ba21924e2c.roa (raw, json)
Hash identifier:          wm8qPp1KkDcCqY39vaizuJ0E0S1g8TTGADW3hoVB1gY=
Subject key identifier:   03:92:B7:2F:E3:E5:81:2C:3E:72:D8:2D:F9:F1:61:8C:6D:45:AD:89
Certificate issuer:       /CN=ddca76af-4c49-4bd6-b142-1774c42d55b2
Certificate serial:       010D0C9F4328584E8B24E7BDD2D5D13CCBF60D80
Authority key identifier: C3:69:1A:4B:EC:52:26:1B:23:7C:5A:E5:B5:95:C9:D0:24:3E:D6:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ddca76af-4c49-4bd6-b142-1774c42d55b2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ddca76af-4c49-4bd6-b142-1774c42d55b2/921235d4-dca8-3fbb-acb6-08ba21924e2c.roa
Signing time:             Sat 18 Jul 2026 21:00:11 +0000
ROA not before:           Sat 18 Jul 2026 21:00:11 +0000
ROA not after:            Fri 16 Oct 2026 21:00:11 +0000
asID:                     398019
IP address blocks:        162.216.240.0/24 maxlen: 24
                          162.216.241.0/24 maxlen: 24
                          162.216.242.0/24 maxlen: 24
                          162.216.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ddca76af-4c49-4bd6-b142-1774c42d55b2/ddca76af-4c49-4bd6-b142-1774c42d55b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ddca76af-4c49-4bd6-b142-1774c42d55b2/ddca76af-4c49-4bd6-b142-1774c42d55b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ddca76af-4c49-4bd6-b142-1774c42d55b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8b:24:e7:bd:d2:d5:d1:3c:cb:f6:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddca76af-4c49-4bd6-b142-1774c42d55b2
        Validity
            Not Before: Jul 18 21:00:11 2026 GMT
            Not After : Oct 16 21:00:11 2026 GMT
        Subject: CN=e4dae9f3-7269-4be6-8b49-c9ebc257a53a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0b:c9:33:9a:d6:c7:5d:9d:5e:07:55:5f:39:
                    a6:43:5d:ad:3a:b6:21:09:9b:36:26:5a:b8:5b:d6:
                    fb:e4:3d:cd:97:4c:b7:64:ae:43:7c:e6:a1:98:81:
                    7c:cc:ca:46:d3:69:a0:8b:fc:f4:b2:68:63:b4:03:
                    60:be:25:77:ad:fa:95:01:83:cf:9f:84:5f:f6:11:
                    f9:90:5b:55:aa:1a:fe:e9:74:63:06:34:da:7c:4b:
                    49:ac:e3:2f:dc:c9:f8:dd:b7:49:77:7e:30:40:78:
                    2e:92:a3:92:a9:06:3f:5e:93:31:85:3a:10:4a:4a:
                    3e:e5:93:71:f3:7a:74:6e:a0:98:98:34:41:24:2d:
                    74:c4:93:bf:88:43:95:33:fb:f9:78:dd:06:a5:ea:
                    75:23:bd:78:e9:a9:fb:06:2c:0a:7c:91:7f:e8:67:
                    6b:ac:36:ec:0c:56:4a:a6:8a:aa:40:bd:98:c3:33:
                    28:cc:4d:3f:17:0b:da:4a:ba:53:c4:e3:17:63:95:
                    86:6f:28:93:66:2f:6c:cd:7d:54:e1:cb:be:dd:bb:
                    a0:30:cc:1a:18:3c:39:d0:65:27:d5:14:01:1b:9f:
                    7d:16:cf:ab:63:70:8b:19:0c:99:34:a2:04:b5:73:
                    6a:eb:be:73:74:ff:87:6b:87:c0:93:32:09:ec:98:
                    b0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:92:B7:2F:E3:E5:81:2C:3E:72:D8:2D:F9:F1:61:8C:6D:45:AD:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ddca76af-4c49-4bd6-b142-1774c42d55b2/921235d4-dca8-3fbb-acb6-08ba21924e2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ddca76af-4c49-4bd6-b142-1774c42d55b2/ddca76af-4c49-4bd6-b142-1774c42d55b2.crl

            X509v3 Authority Key Identifier:
                keyid:C3:69:1A:4B:EC:52:26:1B:23:7C:5A:E5:B5:95:C9:D0:24:3E:D6:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ddca76af-4c49-4bd6-b142-1774c42d55b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.216.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:d3:d4:ad:28:d9:a3:11:5e:0d:4b:42:c8:ba:e5:a6:5a:ae:
         2c:8c:20:0e:37:38:c0:5a:da:87:4b:8d:af:dd:ba:0b:d6:23:
         9b:cb:d7:0b:5f:f1:d0:c7:d4:2b:4b:06:40:62:50:e3:7f:49:
         c3:cc:8f:05:5a:40:8a:09:e1:73:0c:88:53:9c:80:c1:00:d2:
         e1:0d:b7:b3:62:5b:f2:14:13:21:d0:46:8a:74:51:15:57:9d:
         04:72:72:41:5a:3a:9e:f1:86:7f:09:9f:3b:b7:35:75:c4:fd:
         90:b8:d0:27:ef:60:05:1f:d6:d2:ab:2c:97:59:03:f0:f9:ec:
         24:d9:64:40:fa:ef:34:6d:bb:ea:f5:82:d0:ba:79:8a:c9:c2:
         84:36:90:50:0c:7d:d7:e9:e2:73:63:3c:65:6e:e6:ac:18:68:
         5d:85:54:c9:65:53:b4:87:dc:00:cb:21:a5:9e:9e:e1:9b:52:
         78:f8:67:06:32:30:54:c2:86:7d:5e:ad:8f:f5:c0:db:e9:59:
         dc:f8:e3:de:87:ef:80:74:fc:8a:5c:3b:cf:c2:56:65:26:8d:
         53:ca:7f:93:32:9c:00:38:79:ee:98:ff:c8:9e:6b:7e:82:99:
         ea:20:3b:eb:3a:50:44:39:b2:5e:27:6c:e2:32:40:62:fd:b0:
         4a:d2:8d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:02:00 2026 by rpki-client