Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/cd276806-a240-3c6b-956e-5d10d81d1882.roa
File:                     cd276806-a240-3c6b-956e-5d10d81d1882.roa (raw, json)
Hash identifier:          K3acZk5icEiS/qryviff0CHhMg6trc6AprF+pbNI3Zc=
Subject key identifier:   40:8F:E4:39:14:16:21:D9:56:DF:90:9B:3C:0F:E1:C4:91:4C:6D:95
Certificate issuer:       /CN=ab98592a-7218-439c-b165-34810fd16d71
Certificate serial:       010D0C9F4328584E6DD4D7B1C41B42695E359080
Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/cd276806-a240-3c6b-956e-5d10d81d1882.roa
Signing time:             Wed 08 Jul 2026 09:00:12 +0000
ROA not before:           Wed 08 Jul 2026 09:00:12 +0000
ROA not after:            Tue 06 Oct 2026 09:00:12 +0000
asID:                     3300
IP address blocks:        63.250.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6d:d4:d7:b1:c4:1b:42:69:5e:35:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71
        Validity
            Not Before: Jul  8 09:00:12 2026 GMT
            Not After : Oct  6 09:00:12 2026 GMT
        Subject: CN=30d86903-18df-496b-b769-cf9076e7baaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:35:ea:dc:7b:9a:51:bb:1d:72:5b:bb:5a:fd:
                    c8:db:7e:9f:51:1d:f0:99:21:42:7c:dc:ce:c2:da:
                    8e:10:d7:c7:f6:14:2b:c3:7b:06:3e:79:d9:3f:30:
                    ce:05:6e:c8:72:fe:21:96:35:ec:79:81:d0:cd:77:
                    dc:3c:e9:e2:ab:f7:f6:89:ca:7a:83:c4:88:31:8d:
                    ef:05:9f:16:17:77:4d:25:4a:95:a1:5c:0e:56:b0:
                    e9:21:6a:c4:87:4c:23:f5:c4:e2:e6:65:4c:0c:dc:
                    64:d1:97:c7:39:33:4d:0d:8a:b8:8b:04:49:9b:ea:
                    a9:39:ef:c6:b8:ec:81:51:c6:23:b7:af:1e:49:e6:
                    7b:44:e2:9e:92:15:ed:bb:56:3f:85:5e:f5:f1:67:
                    b2:e9:6c:15:0e:4c:bd:6d:1f:48:f6:5b:a1:c9:a6:
                    e8:9c:a1:c3:43:d7:bd:c7:44:d5:22:b7:bd:94:56:
                    9e:5e:39:7c:97:ee:e9:0d:95:1c:8b:75:62:66:a1:
                    55:a4:7f:78:bc:38:a6:4c:93:45:33:6c:ad:54:4d:
                    58:4a:9c:91:7a:0c:81:f6:d9:47:12:ec:f7:50:3d:
                    a3:45:71:8f:21:ef:55:8c:23:ed:ba:14:30:03:28:
                    db:e7:49:ce:f7:29:fe:59:aa:0b:8b:b6:01:e5:e9:
                    ca:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:8F:E4:39:14:16:21:D9:56:DF:90:9B:3C:0F:E1:C4:91:4C:6D:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/cd276806-a240-3c6b-956e-5d10d81d1882.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl

            X509v3 Authority Key Identifier:
                keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.250.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:6c:f1:ff:6c:a7:42:87:57:d6:87:7b:f9:b8:eb:01:c9:d4:
         dd:5f:65:66:e4:d5:73:66:39:be:08:48:b6:a7:9e:6d:ca:b5:
         65:ca:3f:0d:55:77:fa:c3:d7:11:a4:e4:31:77:6f:0d:a2:c6:
         5f:87:3c:40:fa:4a:36:78:00:59:15:b9:fd:71:c6:e6:9e:01:
         e6:3f:25:7c:3d:2b:0d:a2:90:09:a5:53:60:0f:26:38:c2:be:
         80:d5:86:43:ed:df:3e:89:7c:0f:83:6a:06:8b:48:2d:3b:d6:
         68:8b:ef:10:32:9f:7d:2e:d6:d0:7a:3b:82:d0:bb:76:04:b1:
         ff:43:f1:71:39:57:95:dc:36:5b:2c:09:d0:0d:5c:1e:66:be:
         9b:1c:f0:26:db:b1:50:65:74:8d:94:77:98:1c:dc:e8:61:84:
         bc:a1:03:b4:70:d6:2d:58:19:5e:c1:a5:5d:91:0d:e9:7e:e9:
         21:84:b4:2f:1a:b4:06:be:3d:95:17:39:cd:20:41:09:7f:a4:
         2d:4f:00:e6:44:81:46:42:f3:82:9c:be:fb:1b:97:b0:a9:b8:
         82:a9:37:8e:e5:63:4a:78:7f:66:5b:a8:14:3a:d5:2e:22:91:
         f6:54:52:a8:56:55:b4:32:8d:39:b8:be:8c:65:e3:18:60:d7:
         f3:64:c9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:40:49 2026 by rpki-client