Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/8dafa4c5-2068-3b32-b1a6-71ca6a695a7a.roa
File:                     8dafa4c5-2068-3b32-b1a6-71ca6a695a7a.roa (raw, json)
Hash identifier:          ZA3Hi6H19esXURkWPE3B2pMr/ldT7DhHhiu3iHkVeBE=
Subject key identifier:   F0:B1:5E:9B:FD:A0:48:85:D0:2E:79:E2:77:00:42:27:61:96:FF:7C
Certificate issuer:       /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
Certificate serial:       010D0C9F4328584E90BA52D7D9B3C683CCF90F80
Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/8dafa4c5-2068-3b32-b1a6-71ca6a695a7a.roa
Signing time:             Mon 20 Jul 2026 21:00:11 +0000
ROA not before:           Mon 20 Jul 2026 21:00:11 +0000
ROA not after:            Sun 18 Oct 2026 21:00:11 +0000
asID:                     19905
IP address blocks:        162.210.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:ba:52:d7:d9:b3:c6:83:cc:f9:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
        Validity
            Not Before: Jul 20 21:00:11 2026 GMT
            Not After : Oct 18 21:00:11 2026 GMT
        Subject: CN=b6d7091f-37c9-4a98-a61b-695f42686cac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b4:03:c2:b0:c5:fc:a8:b4:b4:e8:ed:01:21:
                    3b:ac:2b:bb:7d:dd:fe:0b:78:e1:74:2e:74:7e:46:
                    b3:36:62:d6:72:25:2d:0f:a2:05:79:82:ec:55:eb:
                    23:ae:59:e8:17:e9:4a:7a:49:a9:56:11:b8:40:4a:
                    54:5d:c3:4c:31:50:de:8c:e9:76:46:f2:c1:d2:83:
                    77:98:ee:cd:b1:89:8c:a1:97:72:e7:2f:57:b7:0e:
                    9c:0f:0e:14:ae:ec:d8:16:f0:51:6a:ee:66:10:db:
                    1f:6c:a9:54:12:90:d1:ff:2b:3a:58:48:92:3d:9a:
                    75:1d:97:ab:6a:1f:7b:47:a1:e6:08:41:53:ef:26:
                    73:64:d6:48:e2:d2:08:d1:ab:78:d6:5d:da:78:87:
                    d1:ed:ee:0b:f2:3d:7e:a9:a0:3d:9b:90:c2:55:7d:
                    32:b4:52:41:85:aa:d7:9d:96:cd:65:9f:ec:31:5d:
                    f0:36:33:79:8b:85:76:b7:7e:d6:67:9f:2b:4c:3d:
                    3c:73:20:6b:6f:11:9d:35:a4:43:bb:d6:1c:bc:4c:
                    67:db:88:7d:30:c4:fd:4f:a7:12:73:7f:a8:0c:f6:
                    32:48:aa:17:fd:91:61:9a:3c:5c:55:46:73:54:b4:
                    df:ed:1c:d8:1d:f6:31:40:6c:bc:4f:52:a7:d7:6b:
                    ba:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B1:5E:9B:FD:A0:48:85:D0:2E:79:E2:77:00:42:27:61:96:FF:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/8dafa4c5-2068-3b32-b1a6-71ca6a695a7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl

            X509v3 Authority Key Identifier:
                keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.210.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:9e:1d:40:ac:61:e8:55:82:ba:c4:ec:cf:25:24:75:1b:75:
         a0:72:71:cc:d1:f7:ff:86:bd:e3:5d:b5:6c:17:a6:34:cf:64:
         c7:a8:62:ba:6f:8e:7b:81:03:8c:64:fe:81:69:e9:1e:20:12:
         7a:69:4c:54:88:7a:5b:cd:ac:bd:f4:15:49:be:f4:0c:aa:db:
         6a:f3:52:ab:b6:36:af:21:ac:70:ac:bc:9c:5e:49:59:5e:d0:
         82:68:67:5c:2a:b4:82:41:ca:30:b2:74:e3:63:1e:4a:63:33:
         ed:22:7c:8b:fa:b6:06:1b:84:04:99:cc:42:f6:be:d0:b8:6a:
         76:f9:a1:89:92:e3:5a:61:87:fa:96:1b:76:09:54:04:b1:12:
         af:25:c2:1b:0a:f6:e0:69:9f:9a:61:19:ab:b7:15:de:9a:56:
         ef:29:c3:e9:4e:b3:80:f8:9b:37:22:65:b6:29:77:57:69:b3:
         6c:96:c4:29:e8:9a:f6:43:12:0e:2b:96:95:86:76:7c:23:cf:
         8b:69:35:7b:ba:0e:95:69:8f:dc:89:23:87:74:f4:c9:25:c1:
         77:7f:0f:8c:0c:75:62:4a:59:cb:b8:bf:a9:bf:d0:68:f3:ca:
         d4:d0:30:0f:cd:00:94:81:00:fc:09:11:58:48:01:d0:a6:b6:
         3c:aa:3b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:36:37 2026 by rpki-client