Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f/eccc8711-7d7a-305d-b9da-a967dd11d788.roa
File:                     eccc8711-7d7a-305d-b9da-a967dd11d788.roa (raw, json)
Hash identifier:          ga6CZ7tV7LnIKeG3a/yNWHkJ+Gjc2pTYisfOB9Gr8ow=
Subject key identifier:   B5:AD:11:34:C8:DA:7C:C4:37:4D:B9:90:73:6F:A8:58:24:83:AA:A5
Certificate issuer:       /CN=b32df622-e1a5-4db3-ad43-9b54a4586e4f
Certificate serial:       010D0C9F4328584DB1DACF20836963351AB57F80
Authority key identifier: B1:65:BC:25:E9:9C:02:29:A8:E2:EF:A3:D5:A7:1F:26:B8:E8:3D:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f/eccc8711-7d7a-305d-b9da-a967dd11d788.roa
Signing time:             Sat 02 May 2026 01:00:24 +0000
ROA not before:           Sat 02 May 2026 01:00:24 +0000
ROA not after:            Fri 31 Jul 2026 01:00:24 +0000
asID:                     395267
IP address blocks:        162.27.159.0/24 maxlen: 24
                          162.27.167.0/24 maxlen: 24
                          162.27.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f/b32df622-e1a5-4db3-ad43-9b54a4586e4f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f/b32df622-e1a5-4db3-ad43-9b54a4586e4f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b1:da:cf:20:83:69:63:35:1a:b5:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b32df622-e1a5-4db3-ad43-9b54a4586e4f
        Validity
            Not Before: May  2 01:00:24 2026 GMT
            Not After : Jul 31 01:00:24 2026 GMT
        Subject: CN=d04cfef4-9eb7-4acb-8637-c7bf6347b059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d5:b0:4f:16:6d:44:74:d4:4c:34:2c:d4:e3:
                    ea:40:d5:eb:55:ae:30:be:9b:cb:74:04:1e:63:50:
                    cd:e7:db:61:2c:cd:35:fa:ce:e3:8f:63:89:75:eb:
                    13:3d:9a:78:0c:79:eb:40:bc:ab:fb:79:3f:80:30:
                    93:38:e3:42:2c:b2:82:a6:f2:72:8d:33:0b:a6:86:
                    91:dd:fb:cb:db:68:c7:da:73:37:4f:ef:8e:96:cd:
                    06:f6:c5:fc:83:8f:0b:ad:c2:67:4b:59:b2:64:8b:
                    01:b2:fe:1b:2f:08:98:fe:a7:f7:82:35:62:9b:d0:
                    8e:d8:b9:0c:91:ed:eb:d1:28:e8:46:48:8e:5e:89:
                    d1:28:e7:bd:0c:cf:f2:4f:2e:c8:fb:f4:40:6c:6a:
                    cf:1b:c7:8d:fb:6e:cf:54:a1:35:d5:49:0c:79:c4:
                    c6:d6:d2:4e:ca:53:02:aa:39:d7:20:7b:03:db:1d:
                    23:8e:8d:a6:91:31:01:32:ae:72:bc:a4:d8:26:e6:
                    a1:64:6a:d3:1f:05:b5:e6:7a:47:9c:81:0a:64:be:
                    f4:d8:9a:b2:a7:0f:07:9d:40:7e:03:32:e3:24:7d:
                    ea:1a:2d:37:27:05:7b:3c:1c:fa:9e:b7:3e:ef:00:
                    d0:de:ca:2a:13:64:92:2b:ee:d8:23:65:f4:93:0c:
                    a4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:AD:11:34:C8:DA:7C:C4:37:4D:B9:90:73:6F:A8:58:24:83:AA:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f/eccc8711-7d7a-305d-b9da-a967dd11d788.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f/b32df622-e1a5-4db3-ad43-9b54a4586e4f.crl

            X509v3 Authority Key Identifier:
                keyid:B1:65:BC:25:E9:9C:02:29:A8:E2:EF:A3:D5:A7:1F:26:B8:E8:3D:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.27.159.0/24
                  162.27.167.0-162.27.168.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:55:a7:76:57:6a:07:61:33:d7:28:53:26:3a:7f:e8:ee:b3:
         92:75:a3:57:17:12:ae:3a:ae:78:3a:55:15:13:93:7d:d4:c4:
         67:d4:23:6f:80:c1:51:8d:df:77:f0:88:6e:b2:dd:d4:90:10:
         67:6e:0a:67:64:a2:49:cd:3a:34:a5:04:01:f8:eb:4e:b2:01:
         f4:ad:6a:1d:ca:7a:12:91:6b:a5:d9:20:9a:4c:ad:63:dc:8b:
         c6:3e:85:1b:a7:2c:b2:37:ae:67:80:d4:79:51:ac:10:e3:83:
         cb:37:1f:3e:3a:00:f2:f3:45:ab:57:b5:9b:45:96:cd:9f:f2:
         93:d7:12:7f:4b:94:cb:e9:9a:15:a8:f5:35:7f:57:df:d4:81:
         7f:06:e8:c6:81:5f:b4:1d:62:fe:3f:72:1c:23:e0:12:12:36:
         2d:31:42:1e:0f:d6:ef:e8:ea:a0:4b:61:73:ff:f5:cd:5c:47:
         c1:6e:23:6f:d7:90:c3:92:62:5a:35:1b:04:25:99:f5:09:74:
         14:3e:4b:47:6e:33:59:31:cf:07:b2:18:06:7b:38:70:60:1d:
         fc:6c:b6:16:0f:17:a1:36:34:19:32:94:4b:23:ca:bd:1d:3c:
         df:11:43:04:4d:55:24:db:38:ad:4d:63:fd:e2:a4:33:72:b6:
         ae:64:45:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:29:10 2026 by rpki-client