Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/d36a84d5-9e13-3436-a5f0-a0debb2f7a7a.roa
File:                     d36a84d5-9e13-3436-a5f0-a0debb2f7a7a.roa (raw, json)
Hash identifier:          z4FMxrrGx7k87DGTGYxW47DUTrkgeDPq6NHKnG/+O9U=
Subject key identifier:   B4:9C:C2:E0:BC:DB:C6:54:97:24:64:CD:74:8B:1C:A6:90:84:06:66
Certificate issuer:       /CN=c8c301ab-7d22-46c3-8211-f6373ec82d5a
Certificate serial:       010D0C9F4328584E4C548BB01B3FFFE1DB8C9E80
Authority key identifier: 1B:13:FC:C8:68:95:3B:53:A8:FC:E8:B9:4B:8B:04:23:97:4A:52:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/d36a84d5-9e13-3436-a5f0-a0debb2f7a7a.roa
Signing time:             Fri 26 Jun 2026 09:00:12 +0000
ROA not before:           Fri 26 Jun 2026 09:00:12 +0000
ROA not after:            Thu 24 Sep 2026 09:00:12 +0000
asID:                     31898
IP address blocks:        162.253.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4c:54:8b:b0:1b:3f:ff:e1:db:8c:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8c301ab-7d22-46c3-8211-f6373ec82d5a
        Validity
            Not Before: Jun 26 09:00:12 2026 GMT
            Not After : Sep 24 09:00:12 2026 GMT
        Subject: CN=3724e9b6-f896-4e66-9372-a6e4195059f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b3:e1:02:71:e7:77:1a:52:79:f6:af:fd:83:
                    7c:a7:42:11:4c:c0:bc:f5:ea:3d:82:3b:0b:2e:fd:
                    72:db:d8:3f:8c:eb:8a:3d:22:47:d2:9f:b0:91:bd:
                    2c:52:7b:d1:ce:41:c8:bc:67:56:10:e4:d0:a8:a7:
                    39:82:9d:e0:eb:20:a7:54:a7:6f:7a:53:ab:81:0a:
                    eb:c8:72:d0:c4:2c:8f:e8:94:21:5b:65:8e:09:01:
                    39:c0:98:07:a8:48:56:78:8f:f3:30:26:83:10:c9:
                    af:cd:88:8f:3e:bb:8d:bd:e8:f4:a9:1e:db:c9:7f:
                    9b:8d:5d:f2:c2:05:b7:d8:e5:e7:47:ca:91:92:34:
                    70:35:fa:e0:64:03:89:6b:18:4d:01:8b:14:02:7e:
                    65:c0:17:43:17:72:50:a2:04:88:65:6f:e1:86:10:
                    7d:0d:4e:d9:22:db:74:c9:dd:1f:20:79:67:12:99:
                    c5:c4:53:6b:41:77:58:7a:01:bd:96:7a:bb:7b:50:
                    94:f9:ef:a9:41:13:9c:08:50:73:b1:6e:30:2a:ef:
                    86:be:bb:48:ce:23:ca:f0:30:f8:83:a7:9c:9a:b8:
                    20:60:cc:09:1b:07:3b:ac:97:a0:52:35:6e:73:12:
                    58:6a:e2:7d:c0:d4:65:25:6a:78:79:6e:9f:79:65:
                    61:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:9C:C2:E0:BC:DB:C6:54:97:24:64:CD:74:8B:1C:A6:90:84:06:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/d36a84d5-9e13-3436-a5f0-a0debb2f7a7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.crl

            X509v3 Authority Key Identifier:
                keyid:1B:13:FC:C8:68:95:3B:53:A8:FC:E8:B9:4B:8B:04:23:97:4A:52:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.253.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:35:7b:21:51:9a:5d:05:df:6c:92:93:8f:3b:fe:95:9b:ad:
         b2:6d:93:7f:6b:12:83:6f:94:fd:3d:8e:ec:e2:ba:06:c4:46:
         ef:a0:56:9b:27:ed:f2:41:13:af:cf:89:6a:b5:19:2b:59:94:
         cc:cc:e7:e6:a8:d5:31:ae:2e:a1:9f:9c:f6:49:59:20:df:d9:
         f8:53:51:c8:c8:f4:55:fd:1b:be:a4:67:0a:c5:60:f6:65:68:
         45:3c:f2:77:70:4a:86:5f:ac:06:6b:16:c7:9a:bf:1a:0f:8e:
         26:6e:76:7a:a2:36:38:5c:d6:d2:18:76:55:70:d3:54:3e:6e:
         a5:8e:62:75:80:cd:fe:8b:18:03:4e:bd:db:be:f6:04:ef:73:
         4a:9c:4d:d5:6c:f4:6a:33:65:e7:18:2a:5a:13:e0:fd:bc:75:
         1a:b9:33:07:52:fa:af:a5:d7:7e:6f:24:a4:c1:9a:7e:3b:e5:
         50:15:89:2c:9a:56:0e:92:97:ae:9a:34:1e:70:b8:e7:61:82:
         ab:95:f8:a1:f3:cb:a6:96:78:8a:1d:cb:cd:74:3c:48:51:11:
         2d:e2:04:7e:e2:39:ca:2b:f0:ff:8b:c1:91:04:e4:a5:29:15:
         3b:fc:1c:11:2b:6b:e9:60:01:bc:d5:e3:7b:23:cc:75:1c:7c:
         de:d1:1b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:10:24 2026 by rpki-client