Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/5f73b293-007d-38ee-ad73-0d48f3e6b340.roa
File:                     5f73b293-007d-38ee-ad73-0d48f3e6b340.roa (raw, json)
Hash identifier:          FrvK7Viuiz9tSqiGDo2S/jLErH6vsbqs//6t90yPYns=
Subject key identifier:   65:60:72:20:F3:30:FE:E1:37:F5:6B:4E:E3:87:CB:09:F7:BF:3C:C9
Certificate issuer:       /CN=65f8721d-b6b4-4e88-9328-3a834dc36005
Certificate serial:       010D0C9F4328584E7204D7DB0E7190334B00B680
Authority key identifier: E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/5f73b293-007d-38ee-ad73-0d48f3e6b340.roa
Signing time:             Thu 09 Jul 2026 21:00:11 +0000
ROA not before:           Thu 09 Jul 2026 21:00:11 +0000
ROA not after:            Wed 07 Oct 2026 21:00:11 +0000
asID:                     4226
IP address blocks:        162.246.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:72:04:d7:db:0e:71:90:33:4b:00:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65f8721d-b6b4-4e88-9328-3a834dc36005
        Validity
            Not Before: Jul  9 21:00:11 2026 GMT
            Not After : Oct  7 21:00:11 2026 GMT
        Subject: CN=bc397367-5064-4c36-8381-6536b197e52c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:43:55:5f:f2:79:78:e1:b5:ac:98:2d:f9:54:
                    d4:3a:a1:9a:1e:79:42:0d:c4:1f:18:56:a7:9c:dd:
                    4c:9c:a8:e0:c6:a2:ae:37:69:52:c6:6d:fb:f3:2c:
                    a9:3a:f1:3f:b2:ee:c0:d6:3b:ba:e7:24:9e:68:4c:
                    77:78:81:58:24:c0:94:94:91:6d:86:60:15:5f:f4:
                    63:a0:96:05:4f:3a:69:e0:e4:ee:77:0a:45:8d:2a:
                    5f:dd:65:c6:4a:ac:b5:c9:1f:56:7c:97:a1:89:ae:
                    ff:bc:02:31:dc:2e:c8:63:84:43:93:7b:1c:7e:24:
                    22:26:7d:59:7a:7f:eb:59:5e:70:82:ec:0f:f0:cc:
                    e4:c1:db:bb:dd:f7:13:6b:c7:44:84:97:34:bb:fb:
                    96:c7:ea:43:98:70:c1:b2:ea:82:bd:0e:fd:82:d0:
                    8b:38:a6:6f:f2:e5:55:99:b7:ef:52:a3:9b:fe:7b:
                    40:8f:ff:f6:4e:0c:0b:07:a4:b9:84:03:a9:60:8f:
                    b6:90:55:9b:01:8b:13:3b:ad:50:b0:8b:8d:d1:2e:
                    a1:e1:38:82:cd:09:f1:a0:d9:0f:76:2c:57:b9:b9:
                    4b:0e:b8:d1:1f:82:85:6d:ec:95:5f:ae:74:f2:8e:
                    b0:36:6f:93:c3:24:4e:43:0a:dc:19:c5:12:7d:aa:
                    64:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:60:72:20:F3:30:FE:E1:37:F5:6B:4E:E3:87:CB:09:F7:BF:3C:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/5f73b293-007d-38ee-ad73-0d48f3e6b340.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl

            X509v3 Authority Key Identifier:
                keyid:E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.246.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:39:3d:47:20:e4:83:f5:0d:c0:1c:09:58:b2:01:94:47:bd:
         7a:b6:5e:6c:1c:e4:29:33:6c:ad:14:03:0e:f6:9e:84:77:6e:
         4c:97:3f:b7:6c:74:65:2c:fb:a0:b6:1c:94:ff:39:21:a1:1a:
         e4:0e:bc:d8:4c:5c:20:e6:5e:25:04:6b:bf:95:54:21:ee:0e:
         12:fd:48:d3:2c:3d:b9:17:50:14:59:94:dd:a9:0f:5f:9f:53:
         0a:7a:d1:35:4c:7e:67:e7:3f:66:f0:d5:a4:ef:b4:31:3e:64:
         e8:af:71:d0:fe:ac:b6:17:c6:d0:81:0f:90:de:ae:5c:b9:75:
         f9:d1:8c:33:0d:87:e6:d1:42:ef:8d:4e:d1:a6:80:9b:fb:4f:
         af:3d:53:5b:3c:09:eb:ed:fc:95:42:42:47:61:99:23:b3:f3:
         7b:f1:09:36:2c:db:1f:eb:a4:23:e8:9a:eb:47:5c:4c:bd:1b:
         29:b7:a3:ea:73:fd:4d:e5:cf:15:ba:8e:98:0e:bb:bb:db:81:
         4c:de:fa:f8:57:57:99:30:6b:75:9f:ef:5b:4b:76:ae:36:16:
         b7:6c:fd:37:62:03:6d:94:bf:f1:0d:d0:b4:b8:80:32:45:3d:
         80:d5:64:2d:88:9d:c8:d4:29:7f:3a:2d:45:5f:8a:4c:4c:29:
         31:6b:7c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:22:41 2026 by rpki-client