Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/1a03881d-15b9-3670-8bcf-c8a38716b63a.roa
File:                     1a03881d-15b9-3670-8bcf-c8a38716b63a.roa (raw, json)
Hash identifier:          TQ61xJoTh97lP0oL+ZiDkSVBdazql1NEBGepEZtg2Uk=
Subject key identifier:   30:F1:78:47:0D:1A:27:DE:5E:77:56:8B:1D:37:64:0E:14:5C:5F:45
Certificate issuer:       /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
Certificate serial:       010D0C9F4328584D1F4A239EC56FDD9B611D6940
Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/1a03881d-15b9-3670-8bcf-c8a38716b63a.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     14555
IP address blocks:        162.210.96.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:23:9e:c5:6f:dd:9b:61:1d:69:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=58f20681-8bca-4bbe-b1b9-5498dcab9416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8b:35:6c:84:be:f5:07:c3:5f:3e:1b:59:02:
                    e2:10:ec:e9:37:37:69:8c:cb:7d:49:e0:43:73:a9:
                    14:08:2b:52:67:7c:c7:35:c1:92:b8:66:88:10:97:
                    e3:97:a5:4b:3d:c2:c4:c7:5e:7a:d5:62:08:59:53:
                    5e:e3:25:4d:e9:38:65:4d:3e:f8:e1:7d:f2:ae:a1:
                    79:2f:d9:55:ef:01:e7:99:90:05:6a:94:69:68:6d:
                    83:76:fa:37:53:ff:fa:2c:6d:50:75:92:d5:90:8b:
                    34:f9:4b:8d:2c:f9:28:e2:97:85:3d:67:48:ec:14:
                    99:33:ee:28:3b:7b:90:5b:17:05:44:bf:9c:71:ff:
                    fd:77:40:71:5a:e4:99:ae:f6:39:44:fb:66:06:89:
                    1b:62:29:73:3c:d5:a8:d1:ce:72:82:38:9a:68:96:
                    65:31:24:d4:82:a2:4b:69:56:04:ba:6b:4d:04:07:
                    ce:47:30:78:5f:74:1a:fa:9b:05:71:ee:38:69:d7:
                    23:b4:33:ad:17:bc:1f:4f:46:c1:15:05:0b:58:91:
                    d3:6f:15:a0:b4:32:f1:07:57:89:b6:e4:78:04:3d:
                    12:10:03:33:8a:cd:dc:c6:bd:65:98:81:cb:65:4a:
                    d7:d2:0a:8b:9f:b8:88:4f:b4:23:eb:93:17:4d:e2:
                    e7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F1:78:47:0D:1A:27:DE:5E:77:56:8B:1D:37:64:0E:14:5C:5F:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/1a03881d-15b9-3670-8bcf-c8a38716b63a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl

            X509v3 Authority Key Identifier:
                keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.210.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:2a:55:da:89:4a:b2:77:b7:9a:6e:bd:14:1b:f2:a0:0c:f5:
         ab:8c:29:53:fe:45:cc:59:e2:80:9e:06:c9:4d:36:3c:2f:b1:
         16:df:61:22:10:79:11:71:f9:d7:f4:9c:70:db:07:96:20:81:
         25:4d:7f:7d:87:4d:f7:fb:04:a2:83:67:0f:31:a8:c9:2b:1d:
         1c:07:24:42:ff:a7:32:af:77:7a:3d:4a:26:88:32:05:66:ed:
         c2:64:18:e5:c5:87:78:26:55:d2:09:0a:7a:68:da:23:c0:45:
         26:45:3f:8b:54:87:68:23:8c:2c:45:87:f3:59:08:58:c9:19:
         63:d3:e8:06:a0:c9:8d:ae:25:1e:c4:f8:7c:b4:ce:2b:07:a7:
         59:af:80:13:7e:50:85:42:0c:7e:e0:24:14:59:b8:03:d7:5b:
         91:79:86:9b:9b:39:54:bf:88:ef:e3:0c:53:4e:c2:d8:7e:9c:
         b5:da:e5:02:10:33:20:33:3a:44:5f:7d:3c:40:e5:1f:65:2d:
         25:b2:ae:af:72:8f:ab:19:09:69:1b:38:a2:ba:94:5f:0d:ce:
         76:27:df:03:16:3a:c6:1a:b6:88:98:bc:9b:cc:74:6b:57:dc:
         a1:40:ba:dd:c4:39:a0:b8:96:2d:9d:60:cf:4e:a8:1a:b6:a5:
         68:03:f1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:57:39 2026 by rpki-client