Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7617a713-113a-32ec-a9f3-7445af2d9726.roa
File:                     7617a713-113a-32ec-a9f3-7445af2d9726.roa (raw, json)
Hash identifier:          4HDRhqhoVVObD6h+OnblBsrM9WbU/hPdQt6n0fAZveI=
Subject key identifier:   7E:7F:7A:C3:99:10:CD:7E:28:E8:E3:05:98:CC:9B:9F:99:50:CC:6A
Certificate issuer:       /CN=7df054b7-0dbd-410a-8a6a-10af5728e84a
Certificate serial:       010D0C9F4328584F4975EBE5046638095B191C80
Authority key identifier: E8:FC:3B:C7:AF:20:45:D6:53:17:82:CE:52:46:98:80:E5:58:80:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7617a713-113a-32ec-a9f3-7445af2d9726.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6079
IP address blocks:        167.253.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:eb:e5:04:66:38:09:5b:19:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7df054b7-0dbd-410a-8a6a-10af5728e84a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=42c12660-bffe-4dcf-8b96-a843c50dbe96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e5:5b:26:bf:83:82:2e:43:91:49:52:0b:0e:
                    e2:4e:62:b7:fb:e0:e7:13:35:f7:23:7d:43:d1:5e:
                    fb:92:61:6e:65:35:8a:3e:09:64:b9:74:75:64:98:
                    60:ac:8a:0e:32:b9:85:29:c8:d6:af:13:63:4a:d7:
                    6a:07:d5:25:75:a6:39:a8:31:90:a7:44:e7:ae:7a:
                    78:2f:30:c5:ba:68:1f:30:1a:e0:04:33:02:2f:f4:
                    53:52:a6:5d:6c:5a:92:64:a4:d8:a4:1d:95:21:cd:
                    c7:a0:7e:d2:f7:48:ea:84:3d:25:e3:a4:73:6c:53:
                    58:2a:bf:06:10:b0:c0:b2:5a:65:42:c8:f7:94:55:
                    91:81:cd:10:52:c2:e6:e5:ea:7f:2b:79:f0:1f:98:
                    5e:1c:4c:a8:6b:ce:97:6c:47:44:2b:69:87:84:b8:
                    e3:d5:f7:29:19:79:14:8a:0b:f5:3b:bf:8e:23:c1:
                    36:80:d0:6c:2b:f6:98:5c:cd:15:e2:d2:a2:31:bf:
                    50:e1:cd:0e:22:4a:34:67:72:79:c0:31:59:aa:da:
                    86:16:f1:76:ed:8f:59:d0:43:53:4c:22:fa:c8:86:
                    d0:0f:7a:0a:b6:a8:eb:d5:81:1a:71:94:68:02:b5:
                    71:66:39:26:b8:07:6a:7c:91:41:04:c9:d9:6b:bf:
                    3f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:7F:7A:C3:99:10:CD:7E:28:E8:E3:05:98:CC:9B:9F:99:50:CC:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7617a713-113a-32ec-a9f3-7445af2d9726.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.crl

            X509v3 Authority Key Identifier:
                keyid:E8:FC:3B:C7:AF:20:45:D6:53:17:82:CE:52:46:98:80:E5:58:80:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:0b:bf:cb:c3:26:ab:11:3c:4d:e7:72:86:64:06:39:6c:fd:
         c0:11:fb:42:db:64:7b:02:45:89:69:e0:3f:e2:95:c8:34:66:
         56:19:40:2a:54:6b:76:66:c5:d4:2b:cf:10:20:25:3a:2c:08:
         e9:63:aa:3f:70:a4:05:9e:91:81:32:8a:e6:b5:1b:a0:7c:fc:
         4b:fe:d0:63:bf:e3:5e:89:4e:04:3d:e3:ee:91:af:df:57:8f:
         a1:80:f9:41:8b:2d:7a:99:57:6b:11:0b:0c:0b:32:58:40:64:
         43:f5:e7:41:1b:12:96:87:dc:f2:4d:f7:67:7e:97:bc:77:be:
         21:f6:69:72:11:c6:e6:98:14:82:62:8c:cf:b1:4c:ea:bc:4e:
         0c:53:03:54:c1:e3:ed:d4:74:36:79:1c:42:0c:ab:b4:b0:9f:
         48:73:0f:71:39:64:38:15:88:36:bf:1a:70:09:67:6c:1b:a5:
         23:21:ad:94:80:9f:e6:93:45:90:ad:0c:05:27:ea:35:95:dc:
         91:59:36:89:56:15:8b:64:eb:4c:37:9b:2b:fb:75:3f:b0:85:
         03:c3:f2:c3:c8:50:fa:d5:78:5c:6c:4b:a6:97:55:4c:84:a1:
         6c:c9:cb:a3:81:5b:20:1b:12:90:1c:d5:90:e2:9d:ab:88:4d:
         9d:83:eb:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:19:10 2026 by rpki-client