Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f/eccc8711-7d7a-305d-b9da-a967dd11d788.roa
File:                     eccc8711-7d7a-305d-b9da-a967dd11d788.roa (raw, json)
Hash identifier:          /nJNaTLlFoZTnBarBHqRfwmwDn/GgV/djVGxnrOrKkY=
Subject key identifier:   44:25:AB:53:3C:03:4F:C1:AE:7D:AA:2A:D2:98:4D:04:DF:CD:3B:D6
Certificate issuer:       /CN=b32df622-e1a5-4db3-ad43-9b54a4586e4f
Certificate serial:       010D0C9F4328584E921FA83CBB1209955490CA00
Authority key identifier: B1:65:BC:25:E9:9C:02:29:A8:E2:EF:A3:D5:A7:1F:26:B8:E8:3D:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f/eccc8711-7d7a-305d-b9da-a967dd11d788.roa
Signing time:             Tue 21 Jul 2026 09:00:12 +0000
ROA not before:           Tue 21 Jul 2026 09:00:12 +0000
ROA not after:            Mon 19 Oct 2026 09:00:12 +0000
asID:                     395267
IP address blocks:        162.27.159.0/24 maxlen: 24
                          162.27.167.0/24 maxlen: 24
                          162.27.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f/b32df622-e1a5-4db3-ad43-9b54a4586e4f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f/b32df622-e1a5-4db3-ad43-9b54a4586e4f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:92:1f:a8:3c:bb:12:09:95:54:90:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b32df622-e1a5-4db3-ad43-9b54a4586e4f
        Validity
            Not Before: Jul 21 09:00:12 2026 GMT
            Not After : Oct 19 09:00:12 2026 GMT
        Subject: CN=8c7f8278-39c9-4491-8d0c-cd159534e653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:06:d8:47:a7:c5:5d:d1:a1:6e:16:d1:cf:72:
                    57:c4:ed:8f:c0:69:66:46:27:81:22:37:ab:f9:99:
                    2b:2b:64:3d:1e:bb:8f:fc:f7:f6:5b:88:a9:ad:77:
                    2f:93:d7:c8:4d:17:f5:36:75:ae:c2:44:89:70:e1:
                    b0:7d:b6:25:76:82:96:32:fc:1e:fa:63:44:8e:4f:
                    d5:97:5c:30:ca:6f:95:c8:bc:cb:b1:d4:f3:0b:79:
                    d0:47:ef:7a:f7:e3:a4:e0:a2:da:ab:d4:6d:eb:f1:
                    1b:c4:37:59:29:df:36:b5:74:48:4d:e3:ce:9f:34:
                    fd:d5:4c:d6:f3:98:c3:d9:0c:11:4f:27:91:59:53:
                    81:37:95:1a:02:21:fa:fa:28:86:85:56:9f:de:c1:
                    30:1b:85:3b:02:86:ba:41:62:0d:51:52:af:55:9d:
                    ca:ad:c8:d3:18:94:0c:94:62:ab:1d:9d:1f:cf:0e:
                    87:d5:1f:b3:78:3a:eb:a8:6b:91:80:12:06:6d:82:
                    97:e1:dd:ee:91:5f:d0:ba:c0:30:a4:7c:f9:2c:14:
                    a8:05:17:71:60:24:02:a4:9c:99:07:a3:cb:03:46:
                    e8:da:4b:88:64:1e:d3:99:17:1c:cd:8c:e2:66:ba:
                    be:ab:e6:8d:91:40:09:92:65:4b:e6:4a:d2:18:b9:
                    16:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:25:AB:53:3C:03:4F:C1:AE:7D:AA:2A:D2:98:4D:04:DF:CD:3B:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f/eccc8711-7d7a-305d-b9da-a967dd11d788.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f/b32df622-e1a5-4db3-ad43-9b54a4586e4f.crl

            X509v3 Authority Key Identifier:
                keyid:B1:65:BC:25:E9:9C:02:29:A8:E2:EF:A3:D5:A7:1F:26:B8:E8:3D:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.27.159.0/24
                  162.27.167.0-162.27.168.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:61:e8:f2:1e:3f:b1:03:12:98:a5:8d:3f:9a:dc:9a:cf:b3:
         2d:f2:71:fe:30:dd:24:c4:9a:93:3c:52:7a:9f:79:44:26:e7:
         8f:19:ee:c6:c6:a2:23:d2:13:4f:f9:64:29:8c:90:3e:69:c8:
         6f:5a:88:a0:1f:42:66:bf:72:c1:07:15:53:86:28:ef:ca:9c:
         c7:83:37:1f:ba:99:b1:8f:bb:04:bc:f1:36:54:0a:94:29:f2:
         87:f9:19:d8:d3:9e:21:d5:4a:7d:c4:13:bd:a1:79:f6:ba:b3:
         31:ed:43:85:78:f2:f8:c9:8c:7e:e4:96:e0:a4:f6:c8:6a:7a:
         32:90:55:3d:29:e7:e3:72:40:47:b2:da:ba:97:d5:57:43:bb:
         00:d4:5d:9e:82:04:12:ed:52:f7:bd:1f:08:44:44:5d:62:7e:
         36:42:a5:ea:50:8b:68:d7:73:37:c4:be:f4:64:f4:1f:0a:6e:
         d5:e7:e9:52:0c:1c:79:f6:11:5d:32:97:71:50:3a:21:09:8b:
         09:89:95:54:77:6b:a7:2a:bb:cd:48:36:f8:b4:3c:27:21:39:
         8c:e8:df:ed:d9:82:e6:d5:fc:d1:f1:ce:50:cf:78:3b:33:15:
         ca:b6:f5:42:1d:3a:f9:60:e9:3c:78:65:dd:d5:6c:f1:eb:c9:
         5d:b1:8a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:33:09 2026 by rpki-client