Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc/0177c457-8123-3122-9946-667a61adf363.roa
File:                     0177c457-8123-3122-9946-667a61adf363.roa (raw, json)
Hash identifier:          A4F7EsAfu8PcNOW2ebap94qEIJuSdTWLfCEs4dcr6WI=
Subject key identifier:   C9:E0:6E:31:39:C6:C4:7C:38:34:09:20:9D:0A:AE:36:63:64:2C:E9
Certificate issuer:       /CN=a8f51da8-e3ca-4fc9-acce-94103c57aebc
Certificate serial:       010D0C9F4328584E5084A1735903B537C744F880
Authority key identifier: 3A:72:E5:B7:27:34:1C:D3:AE:09:F2:9E:7D:BF:99:D5:A0:41:FD:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc/0177c457-8123-3122-9946-667a61adf363.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     62862
IP address blocks:        81.21.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc/a8f51da8-e3ca-4fc9-acce-94103c57aebc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc/a8f51da8-e3ca-4fc9-acce-94103c57aebc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:a1:73:59:03:b5:37:c7:44:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8f51da8-e3ca-4fc9-acce-94103c57aebc
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=f9540731-fabb-43fb-a7cf-b70c08b5f858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ff:32:06:af:04:c4:07:69:56:66:26:7b:83:
                    53:38:a8:04:50:8e:bc:99:65:21:22:64:3f:ae:6c:
                    4b:44:3b:cb:26:51:b5:7b:59:7f:be:3d:c1:33:f8:
                    e7:27:35:68:66:a5:40:17:3a:79:3e:65:6f:e3:17:
                    f8:35:03:83:ff:27:07:dc:e3:41:64:66:35:6b:88:
                    9a:14:6d:14:27:12:3d:47:0c:1a:5c:7b:8e:87:75:
                    3b:23:f9:2b:c4:fd:71:50:42:cf:fb:91:bf:92:ae:
                    48:23:43:aa:0b:06:70:9b:d3:ca:95:28:2d:0c:ac:
                    7e:e4:de:1e:f7:e2:a7:63:7f:d3:e1:27:f3:db:bd:
                    2c:15:1f:05:69:de:65:03:f6:75:5c:e4:cf:fc:30:
                    96:96:7a:5a:2c:f3:87:72:a4:a3:75:04:ab:ca:ef:
                    36:cd:3d:1b:c3:e7:1b:b0:87:17:06:2a:04:e0:6a:
                    cd:92:73:16:92:a2:02:b7:e8:0f:ec:72:80:f1:6a:
                    c6:78:fa:80:39:f1:a1:75:5d:b6:32:e6:30:20:09:
                    56:14:6c:fd:7b:b1:70:a0:21:65:c8:a1:47:58:28:
                    5a:0e:6e:9d:a0:ee:68:f9:fa:b3:b6:cb:47:e1:b9:
                    8a:9c:2c:02:b9:86:75:23:24:e7:51:bc:d2:47:a8:
                    a4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E0:6E:31:39:C6:C4:7C:38:34:09:20:9D:0A:AE:36:63:64:2C:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc/0177c457-8123-3122-9946-667a61adf363.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc/a8f51da8-e3ca-4fc9-acce-94103c57aebc.crl

            X509v3 Authority Key Identifier:
                keyid:3A:72:E5:B7:27:34:1C:D3:AE:09:F2:9E:7D:BF:99:D5:A0:41:FD:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.21.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:5f:b2:62:c0:96:98:db:88:91:09:48:39:b7:a8:9b:75:55:
         21:be:b9:ae:4d:3f:79:16:ba:e6:a3:a8:8d:0b:7b:bd:bc:6e:
         a1:2d:c3:55:84:8f:db:e8:dd:00:d2:53:49:21:97:40:99:3b:
         25:9c:f2:3d:76:7f:f7:34:3c:d5:9e:08:c5:fb:92:13:db:b2:
         e3:11:e0:17:ba:bf:4f:05:58:e1:8f:f8:3b:d3:c3:cb:e3:33:
         de:d2:6f:74:e6:9a:28:92:db:ec:81:ae:97:8a:32:21:52:d7:
         a5:7b:df:7c:69:c4:dd:f5:e5:c7:98:e2:74:87:29:67:04:5b:
         7d:8b:36:16:c9:d1:6c:c9:af:64:bd:fc:38:41:ca:12:c6:47:
         c3:8c:d3:e8:fc:08:07:82:ca:96:f1:1b:fd:c7:28:ca:ea:a8:
         b7:aa:72:8e:ed:98:fe:c1:56:ac:63:2d:0a:c5:cc:f3:3e:06:
         d8:7f:1b:f8:6e:13:0a:30:4d:09:bd:b4:06:5d:32:b7:19:38:
         7e:3e:c8:6c:53:32:a8:6c:b7:d9:11:74:6b:1c:ee:bc:48:99:
         6a:19:a3:17:a6:95:d7:de:65:c9:65:73:c9:96:c8:4e:1e:b9:
         c2:67:95:f3:05:d3:72:86:85:be:d3:4a:8e:82:1e:ab:45:f4:
         9c:37:a7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:19:32 2026 by rpki-client