Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/81acedff-a99b-311a-84dc-11dd71f0b2d1.roa
File:                     81acedff-a99b-311a-84dc-11dd71f0b2d1.roa (raw, json)
Hash identifier:          AdDFnwqFZPmrVBU1mcw2U9pwqh0TRgl79p7fw0haXwY=
Subject key identifier:   8D:C6:8A:43:D1:B2:61:EC:BE:C8:AF:11:A4:F6:04:81:EA:D9:EF:1A
Certificate issuer:       /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
Certificate serial:       010D0C9F4328584D492A5724D77B8039FF310900
Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/81acedff-a99b-311a-84dc-11dd71f0b2d1.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     14555
IP address blocks:        162.210.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:57:24:d7:7b:80:39:ff:31:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=446bf27c-1795-45ac-ae3a-9604a855c4e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ff:45:49:34:9c:a0:09:6e:1c:06:65:60:a3:
                    fb:2f:a0:2d:6c:73:23:9d:21:55:49:0c:c5:45:cd:
                    5d:a1:65:64:34:ce:8c:67:2f:2b:52:59:25:0b:6f:
                    db:31:25:f9:ee:ea:3b:4f:de:ec:b9:27:42:c3:65:
                    e4:0b:ce:56:2c:0f:dd:5f:42:9a:e5:87:f1:8c:4e:
                    51:e1:76:34:7f:e8:19:32:43:8d:9a:98:3b:b4:3e:
                    a9:da:2d:c0:34:2f:38:98:2c:09:a5:5f:bb:85:49:
                    ad:5c:8c:4c:9b:9b:5c:2b:ae:a6:8e:8b:5d:0a:42:
                    78:a6:d9:67:a5:09:a9:bd:56:74:01:2a:e4:d9:4f:
                    82:a5:77:5b:04:01:47:6a:4d:a5:c8:81:56:82:ab:
                    c5:3c:df:5e:53:99:ed:78:48:f3:0a:04:21:2f:60:
                    57:1b:c8:0f:c8:a8:ed:1b:66:6c:db:9e:56:39:af:
                    4a:44:7c:9d:dc:93:f7:1f:97:1e:e5:45:f3:75:6c:
                    ae:1f:f4:81:d7:c0:42:50:a7:03:c4:e3:1d:09:9e:
                    8e:28:72:ad:8c:da:53:14:4d:05:40:f3:3e:ca:7f:
                    8b:df:4b:09:76:9e:a6:bd:93:3d:1c:e5:bf:3a:f7:
                    0c:cf:43:ec:a7:8a:3b:9d:f2:fb:85:0f:40:12:be:
                    bd:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C6:8A:43:D1:B2:61:EC:BE:C8:AF:11:A4:F6:04:81:EA:D9:EF:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/81acedff-a99b-311a-84dc-11dd71f0b2d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl

            X509v3 Authority Key Identifier:
                keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.210.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:96:29:c6:78:d5:75:90:a1:3c:42:57:93:14:47:43:bc:23:
         26:90:fb:52:9b:96:b4:51:9b:91:22:fa:c9:9f:e8:9f:44:27:
         13:c0:6e:12:24:7a:a5:38:47:4b:bb:77:b9:9d:c7:e3:10:87:
         7a:01:23:e5:ac:80:1a:9c:cf:11:fb:8d:55:c8:9b:db:32:ed:
         a1:50:d7:fd:8a:7f:00:48:ad:1f:17:a6:12:d3:4b:8b:21:03:
         17:cb:1b:7b:a1:36:79:3f:57:b2:69:9d:ab:4f:49:2a:68:69:
         c9:58:b4:cd:81:48:90:12:b9:08:fc:08:3f:4d:f4:0a:dc:83:
         b4:7e:8d:78:ee:64:95:38:59:d4:5e:8a:33:6c:a9:63:42:41:
         62:7c:6b:a1:05:20:07:9c:12:60:ed:e1:c0:df:8a:47:39:37:
         6d:43:df:65:75:ce:84:06:6a:1f:7d:73:58:2f:df:a2:14:83:
         b2:8c:68:6c:16:4a:af:36:d8:27:82:d0:12:45:a5:24:6b:ca:
         cd:f1:42:d6:fc:f8:ca:2f:1f:11:4b:18:8d:17:5a:da:54:e2:
         b9:89:dd:b0:8e:1d:f2:87:2c:66:55:62:91:8f:5d:c0:a2:49:
         2d:ef:60:e2:04:60:d7:6f:dc:91:fc:4b:a4:d6:51:3c:ed:7a:
         90:a5:c0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:58:05 2026 by rpki-client