Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/a121cf8c-2791-3090-beba-59c1406bbfdc.roa
File:                     a121cf8c-2791-3090-beba-59c1406bbfdc.roa (raw, json)
Hash identifier:          8chp47tTgJQGWgV9/Hx/FptqiYRwcl6AJfmJjgT76MU=
Subject key identifier:   E6:D8:71:E0:9C:7B:46:5D:6B:19:87:D5:AA:A0:A8:60:C6:08:07:7E
Certificate issuer:       /CN=2026b921-2d83-4f47-a24e-db9a3c451c72
Certificate serial:       010D0C9F4328584E89BF93CBB2349BA0B57A0580
Authority key identifier: 10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/a121cf8c-2791-3090-beba-59c1406bbfdc.roa
Signing time:             Sat 18 Jul 2026 09:00:12 +0000
ROA not before:           Sat 18 Jul 2026 09:00:12 +0000
ROA not after:            Fri 16 Oct 2026 09:00:12 +0000
asID:                     2648
IP address blocks:        132.163.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:89:bf:93:cb:b2:34:9b:a0:b5:7a:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2026b921-2d83-4f47-a24e-db9a3c451c72
        Validity
            Not Before: Jul 18 09:00:12 2026 GMT
            Not After : Oct 16 09:00:12 2026 GMT
        Subject: CN=33e4f7c8-fa4f-4f4c-9502-92d2674c9265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a4:4b:52:81:d4:4f:dc:c7:6c:b1:0f:18:76:
                    7f:ab:a3:14:16:5b:1f:3f:c7:cc:13:e4:fa:ef:51:
                    91:78:83:f6:d3:46:a4:57:04:58:7d:00:71:83:c4:
                    6c:58:99:8d:58:53:4a:fa:db:af:ea:ef:6e:35:27:
                    50:4d:a4:de:e8:63:40:5e:c3:97:87:f5:aa:90:7d:
                    1d:19:da:ed:44:35:c9:b2:c5:89:29:11:f9:06:2f:
                    6a:da:85:90:39:96:48:00:f3:52:fe:cc:4e:0d:6e:
                    b4:10:eb:cb:e1:f4:6c:69:ea:f7:85:fd:ca:5e:63:
                    8b:16:00:05:78:7c:d8:ad:d4:99:c3:d9:6a:85:02:
                    3c:80:b5:2f:62:2f:7c:31:b1:e5:ab:e6:8d:b0:13:
                    b9:e3:53:ae:01:9f:e4:67:fe:8a:c7:b3:87:8d:96:
                    98:80:bd:3c:f9:bf:b8:7a:9d:f0:c4:d2:0b:16:38:
                    a8:4d:ca:2f:b1:02:65:9a:c7:1d:41:bb:fc:c5:54:
                    e5:ea:36:81:96:57:0b:0a:cf:68:aa:6e:b5:49:99:
                    99:cf:d1:01:c8:9c:86:03:21:00:92:2f:ba:fe:8d:
                    b8:50:69:18:35:c1:ee:fd:31:2a:60:d2:d6:4d:be:
                    4a:d5:af:0c:a3:9a:fc:10:e2:16:4e:9e:8c:7f:ac:
                    9f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D8:71:E0:9C:7B:46:5D:6B:19:87:D5:AA:A0:A8:60:C6:08:07:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/a121cf8c-2791-3090-beba-59c1406bbfdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl

            X509v3 Authority Key Identifier:
                keyid:10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.163.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:2f:3c:d1:16:ea:4e:72:8f:2f:c0:bd:94:8a:fd:db:6c:fa:
         13:21:be:94:1c:5b:d0:c6:3a:22:5d:8e:19:57:10:72:02:7d:
         6e:e4:05:7b:b6:18:68:38:79:8b:b7:e1:94:22:18:e6:a6:1d:
         b0:6d:7b:17:4f:4b:15:f5:13:b2:f3:81:5e:eb:2c:19:b2:be:
         b7:db:e5:d2:1d:b9:f6:37:57:b9:eb:c6:1b:da:7a:34:11:5c:
         b0:52:d2:21:2c:76:db:8a:77:37:5d:82:d4:6d:58:65:e8:bf:
         19:7a:39:b5:65:82:0f:3d:31:9c:aa:b8:d6:ab:22:4e:16:b5:
         20:ac:f0:81:1b:1e:88:40:64:13:90:e5:a9:3e:0c:ff:7a:96:
         d9:26:29:ae:8c:1c:84:b0:64:89:2e:6c:ab:7c:37:18:97:9c:
         18:b5:0b:e5:90:b3:9c:d2:54:df:d4:49:e5:98:78:53:90:b0:
         fd:fc:64:ea:9d:fb:d0:27:42:de:36:02:4f:84:e2:7e:2b:90:
         22:3d:8a:28:e6:cb:03:bf:05:8a:4e:8b:81:d7:3c:72:20:34:
         80:bc:44:d2:a8:73:86:52:05:d4:91:cf:4c:5d:1e:bb:f1:f1:
         ac:28:04:f3:85:60:ff:fa:b5:d4:f2:a8:31:da:dc:00:eb:9b:
         ea:97:55:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:40:56 2026 by rpki-client