Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/7300a0a7-a743-3c06-bdf2-2b946ddde2b7.roa
File:                     7300a0a7-a743-3c06-bdf2-2b946ddde2b7.roa (raw, json)
Hash identifier:          1kFHHRj1Prn65URJGmFm2Njuj+qmmyS5o1QbuWt2gYY=
Subject key identifier:   0D:56:52:AC:B9:54:3C:20:07:A4:DC:04:D8:47:D0:01:D1:A7:11:64
Certificate issuer:       /CN=aff0c042-cf36-4d6f-954a-bee61a5b3dcc
Certificate serial:       010D0C9F4328584DBE6B1F6745A472A1D0C10700
Authority key identifier: 60:C9:6D:C0:44:A6:6F:BD:2F:6E:CB:03:EA:6B:17:FC:BA:6C:2E:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/7300a0a7-a743-3c06-bdf2-2b946ddde2b7.roa
Signing time:             Wed 06 May 2026 13:00:30 +0000
ROA not before:           Wed 06 May 2026 13:00:30 +0000
ROA not after:            Tue 04 Aug 2026 13:00:30 +0000
asID:                     53454
IP address blocks:        162.248.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:be:6b:1f:67:45:a4:72:a1:d0:c1:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aff0c042-cf36-4d6f-954a-bee61a5b3dcc
        Validity
            Not Before: May  6 13:00:30 2026 GMT
            Not After : Aug  4 13:00:30 2026 GMT
        Subject: CN=c75510d6-ec48-4c31-b21e-3c40ac6a57ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:fd:b1:4e:61:f2:e1:9f:b5:ad:1e:b9:a3:76:
                    ef:f8:2d:2b:88:21:98:35:2e:b4:c3:89:d9:1d:45:
                    8c:7c:45:dc:34:ff:6c:a1:66:4b:06:52:82:8b:f1:
                    cb:7f:98:38:9a:cf:8a:04:14:8b:79:3a:ca:f2:55:
                    2e:2a:68:dc:34:1a:9d:48:02:91:54:70:bb:e0:35:
                    00:b5:ee:ce:dd:c0:14:39:96:b3:31:4c:aa:0d:07:
                    18:a8:d8:4d:b9:11:42:02:3a:8a:05:ac:b5:4b:e5:
                    02:af:e4:26:66:2d:bb:02:9a:e9:66:30:f6:00:25:
                    50:d7:0f:8b:1a:95:34:91:ee:66:ae:a7:55:97:2b:
                    f4:25:3c:a5:0a:7e:39:f6:cb:4e:55:2f:67:aa:cb:
                    c1:b1:f9:3d:c8:9f:7a:e2:ee:05:42:15:d5:b0:96:
                    e7:5c:1f:dd:1a:9b:bd:11:37:5c:05:e8:af:7d:f2:
                    22:3c:d9:5f:47:80:19:87:13:75:e1:2c:e1:cc:51:
                    81:85:52:ef:89:a9:89:11:63:49:a8:99:e4:f2:62:
                    eb:d4:52:93:d4:55:34:97:d9:13:76:66:b0:43:1d:
                    63:18:e8:02:33:d5:23:0e:af:33:a1:ed:e9:66:8a:
                    ab:39:32:0b:6a:95:fa:7a:ad:86:a9:76:de:c1:01:
                    43:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:56:52:AC:B9:54:3C:20:07:A4:DC:04:D8:47:D0:01:D1:A7:11:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/7300a0a7-a743-3c06-bdf2-2b946ddde2b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.crl

            X509v3 Authority Key Identifier:
                keyid:60:C9:6D:C0:44:A6:6F:BD:2F:6E:CB:03:EA:6B:17:FC:BA:6C:2E:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.248.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:e0:f4:b4:b6:f9:b6:8c:05:d3:55:57:69:78:3e:81:47:f6:
         9d:98:8e:59:81:b4:54:3b:4c:c1:eb:18:af:28:89:b0:5f:5e:
         d8:62:d9:b9:cb:6c:dc:5b:37:63:ef:a2:54:6b:0b:20:e8:0d:
         50:8c:b2:94:f4:c7:cb:0d:4f:4b:50:21:70:7e:d1:dd:3f:99:
         57:db:25:f8:7e:48:be:29:8f:b8:1d:7c:8f:41:61:27:b8:b2:
         65:10:aa:53:f9:ff:af:57:ba:c6:bf:61:00:e5:8e:ce:87:46:
         1f:21:ad:b9:f9:18:27:28:7f:3e:a4:4b:b1:4d:bd:92:a0:49:
         21:52:8f:c5:37:ac:db:44:82:d2:69:17:02:2f:05:c5:f5:ba:
         c5:0f:85:e1:26:81:64:9f:e9:0a:f6:3a:1c:c0:95:8b:77:22:
         27:e2:18:83:bd:78:95:46:78:e2:2b:71:18:1f:ff:96:85:12:
         36:44:d8:1d:3e:e2:c3:fc:36:7d:15:3e:9a:24:4e:d0:76:cb:
         0e:2c:e4:52:e9:2f:65:70:a4:22:8c:5e:96:79:37:7c:cf:37:
         17:5b:1e:17:47:42:02:9f:ec:d2:55:6b:3b:2c:ac:86:22:85:
         a8:6c:53:a3:dd:92:e5:1e:dc:2a:ef:08:db:88:69:6b:0d:4d:
         b7:70:d6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:29:22 2026 by rpki-client