Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/5073304d-b7dd-3e55-a332-e1e2f3a67372.roa
File:                     5073304d-b7dd-3e55-a332-e1e2f3a67372.roa (raw, json)
Hash identifier:          gzZYdj9Z3KNt2Kf/TH3S3BM9lPK1Hpn96GvxSKpc1KE=
Subject key identifier:   39:A5:D4:8E:3C:58:E1:04:3F:EB:32:BE:C5:41:6E:F5:F2:F1:16:F5
Certificate issuer:       /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
Certificate serial:       010D0C9F4328584DB0759258FDAE4B46A7E3BCC0
Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/5073304d-b7dd-3e55-a332-e1e2f3a67372.roa
Signing time:             Fri 01 May 2026 13:00:30 +0000
ROA not before:           Fri 01 May 2026 13:00:30 +0000
ROA not after:            Thu 30 Jul 2026 13:00:30 +0000
asID:                     19905
IP address blocks:        170.10.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b0:75:92:58:fd:ae:4b:46:a7:e3:bc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
        Validity
            Not Before: May  1 13:00:30 2026 GMT
            Not After : Jul 30 13:00:30 2026 GMT
        Subject: CN=919d6528-23ef-40fe-9c79-b3799b896741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:15:c9:b2:fc:8e:17:ba:ee:17:94:5c:be:62:
                    9f:55:c3:29:f7:12:15:0c:8f:14:bd:55:51:16:2f:
                    50:d2:d4:80:dc:f2:d8:d8:3f:b7:86:1c:d3:63:11:
                    45:b8:d4:af:3b:d6:ba:e5:e8:9e:22:6f:22:ee:50:
                    1a:01:c2:ca:a8:5b:e6:69:a2:ce:01:a3:6b:f7:13:
                    89:fc:ca:8b:d9:78:3c:c1:9a:90:82:c5:24:0c:08:
                    e6:98:eb:e5:fd:0f:0b:e0:2f:49:e3:a3:fd:48:f1:
                    e2:44:d9:a2:a4:ee:28:5a:50:0b:33:fd:2e:95:c9:
                    94:55:19:7c:c2:5d:f0:24:0e:a6:b8:fb:e7:d9:44:
                    ae:6f:1c:91:75:e0:81:6c:95:01:fa:2a:18:68:7f:
                    b3:1d:67:47:da:54:d6:5f:27:31:8b:75:19:e2:7a:
                    76:bf:1e:f0:69:4d:11:a3:b0:64:09:d0:27:e1:0f:
                    a1:f8:6b:2e:70:c0:e9:03:9d:40:27:18:2a:52:d6:
                    74:ed:6c:c6:c7:33:39:36:dd:8b:6b:e9:f9:e7:7a:
                    18:f0:65:aa:03:da:b1:b6:33:0a:72:b1:9c:25:c7:
                    fb:1d:01:e2:e3:e8:53:05:57:c8:73:4a:ae:a7:ff:
                    29:91:13:e7:1b:19:00:8c:49:7a:cf:6d:8d:bd:d1:
                    8f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:A5:D4:8E:3C:58:E1:04:3F:EB:32:BE:C5:41:6E:F5:F2:F1:16:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/5073304d-b7dd-3e55-a332-e1e2f3a67372.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl

            X509v3 Authority Key Identifier:
                keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:c4:93:6b:23:43:da:81:4b:ab:5b:f7:41:da:15:11:09:ae:
         8e:f4:1a:51:8e:66:c5:eb:17:88:9f:9a:e8:2d:80:d9:95:da:
         09:ba:0c:22:f3:7d:3d:a2:f5:1f:b5:79:29:af:58:a4:2e:18:
         bd:03:6e:d2:68:41:8e:01:17:2a:f0:13:62:c8:dc:17:d4:9e:
         60:2e:44:ac:bd:4c:7f:20:01:9d:87:ce:9c:e3:81:ff:90:81:
         ab:18:2b:80:38:51:38:e5:26:fc:a1:e4:2a:ef:87:fc:9a:7c:
         d6:c6:84:77:52:7f:fb:36:2d:cd:de:f5:d3:ab:ff:d9:ce:43:
         4b:5f:0e:b3:a6:c1:96:ad:90:d9:74:8d:c0:78:41:d9:d9:32:
         6c:31:2e:ba:6d:e1:c2:64:32:ef:05:13:7d:4b:fc:a1:3b:ae:
         65:5f:60:7c:db:b6:c0:72:ca:57:74:29:4b:c8:0a:11:cf:d3:
         44:0e:0c:e3:1d:3e:a7:ff:ca:09:49:9b:3e:7b:9e:b3:59:96:
         c7:ad:ca:9a:ee:51:cf:31:47:f5:4d:f8:45:dc:2d:8a:bd:64:
         b2:c7:01:30:a6:99:aa:a5:e5:83:75:4e:ea:76:38:ab:d7:d5:
         15:37:15:a3:f6:30:88:bc:cf:a1:87:8f:49:83:66:f5:f4:f2:
         e4:69:fb:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:32:40 2026 by rpki-client