Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5114e69-a8e9-416a-a99b-8144e07664ce/da2467e4-8ac6-3706-a594-a1d5a5e00187.roa
File:                     da2467e4-8ac6-3706-a594-a1d5a5e00187.roa (raw, json)
Hash identifier:          Em8jonEJvysQan3H0bSgAA+NBhYwzT/Ud/4gUi2jNAM=
Subject key identifier:   53:DC:8A:8F:2C:35:08:D8:28:D8:13:1D:F7:AE:AD:AC:D8:03:86:00
Certificate issuer:       /CN=a5114e69-a8e9-416a-a99b-8144e07664ce
Certificate serial:       010D0C9F4328584E7204E218211B0FB24FE99180
Authority key identifier: 7A:78:0C:84:76:4A:9B:D5:80:56:A3:70:68:96:11:50:7F:77:FF:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5114e69-a8e9-416a-a99b-8144e07664ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5114e69-a8e9-416a-a99b-8144e07664ce/da2467e4-8ac6-3706-a594-a1d5a5e00187.roa
Signing time:             Thu 09 Jul 2026 21:00:11 +0000
ROA not before:           Thu 09 Jul 2026 21:00:11 +0000
ROA not after:            Wed 07 Oct 2026 21:00:11 +0000
asID:                     2914
IP address blocks:        167.253.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5114e69-a8e9-416a-a99b-8144e07664ce/a5114e69-a8e9-416a-a99b-8144e07664ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5114e69-a8e9-416a-a99b-8144e07664ce/a5114e69-a8e9-416a-a99b-8144e07664ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5114e69-a8e9-416a-a99b-8144e07664ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:72:04:e2:18:21:1b:0f:b2:4f:e9:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5114e69-a8e9-416a-a99b-8144e07664ce
        Validity
            Not Before: Jul  9 21:00:11 2026 GMT
            Not After : Oct  7 21:00:11 2026 GMT
        Subject: CN=577affec-e405-4d81-8f1c-f5d453199fa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4a:a9:af:b9:43:de:df:dc:f6:62:4f:3c:72:
                    59:13:df:8d:22:95:71:9b:aa:93:34:da:a5:0a:68:
                    01:44:71:f9:99:59:84:6f:c6:b8:55:57:ad:ac:c0:
                    61:e2:34:df:42:00:86:4e:ad:41:20:af:67:a0:2a:
                    9d:30:09:6f:ba:5e:5c:41:39:ab:16:52:44:30:ff:
                    2e:b7:0a:11:3d:ba:6d:45:51:08:1c:f8:e5:30:5d:
                    8f:c2:f3:06:b9:3c:23:b2:7a:2f:f9:61:1b:e1:9a:
                    c0:26:81:34:02:da:a7:3d:96:39:da:7a:26:2c:f1:
                    ff:bd:b4:0b:8b:71:34:74:b3:5a:fb:7b:1a:92:ca:
                    49:a9:ea:04:fc:9e:4f:bb:b8:6f:9e:e1:62:b6:37:
                    c1:92:fa:47:6a:76:d1:3f:b1:69:b7:6d:17:e0:01:
                    84:1a:67:5c:92:6f:f4:b9:ef:2b:69:1e:8a:45:0f:
                    00:42:53:32:3c:5a:89:88:0f:45:5e:d4:2b:5b:28:
                    84:74:f7:cf:99:36:d9:5f:23:19:86:12:79:bd:86:
                    f8:d1:f1:6b:c0:c3:c5:30:4d:95:a8:c0:7b:c8:9c:
                    1d:35:01:b3:20:68:d9:d2:8b:9c:af:fa:33:11:d4:
                    f2:3a:e4:ac:48:86:6b:28:36:1a:7e:a4:70:c4:53:
                    cd:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:DC:8A:8F:2C:35:08:D8:28:D8:13:1D:F7:AE:AD:AC:D8:03:86:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5114e69-a8e9-416a-a99b-8144e07664ce/da2467e4-8ac6-3706-a594-a1d5a5e00187.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5114e69-a8e9-416a-a99b-8144e07664ce/a5114e69-a8e9-416a-a99b-8144e07664ce.crl

            X509v3 Authority Key Identifier:
                keyid:7A:78:0C:84:76:4A:9B:D5:80:56:A3:70:68:96:11:50:7F:77:FF:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5114e69-a8e9-416a-a99b-8144e07664ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:75:57:78:76:de:e5:46:40:ee:b5:ca:5d:26:86:60:9e:56:
         57:9c:40:0b:69:c8:70:ae:a4:a5:ca:cc:ee:cd:13:7b:ff:b4:
         e3:96:26:c3:65:51:bc:84:12:a8:55:2c:68:37:3b:ea:9b:b1:
         6c:d1:a7:6f:f6:ef:f1:a5:27:42:94:c0:61:3e:60:73:f8:75:
         c4:30:0e:55:2c:b7:61:ec:33:e8:82:4f:67:0c:ea:4c:75:f2:
         a9:6a:97:d9:96:08:02:0d:e5:e1:69:02:92:66:39:60:fb:5b:
         37:7a:77:3f:ad:ee:c0:11:10:ca:8c:e7:3d:1a:0f:eb:ed:2b:
         90:b7:cb:db:38:cb:bf:14:23:0c:a4:b9:3a:35:ea:4f:bf:1e:
         b6:2d:a6:be:12:54:c8:73:4b:1e:31:08:e9:7d:a1:fa:50:8a:
         10:f0:67:26:6f:0e:33:a6:d6:2e:0b:c7:7e:07:30:bd:df:4a:
         34:4e:43:37:a1:3c:bc:0d:82:28:31:4a:8f:af:de:d0:57:24:
         89:34:e6:19:6d:b5:7e:f2:ac:f9:10:55:87:3f:56:f0:1a:b5:
         6d:c6:2a:12:ec:a3:23:cc:60:bb:0c:72:64:0b:a6:02:c8:c3:
         e5:92:87:e2:f1:b9:6b:fc:5f:67:53:53:70:f7:ef:ac:3b:0a:
         0b:25:11:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:18:48 2026 by rpki-client