Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/37191ffc-8486-35c0-86e3-740b71796e73.roa
File:                     37191ffc-8486-35c0-86e3-740b71796e73.roa (raw, json)
Hash identifier:          FGmHqrosuR0ZuOODOYxxqFtcRqmXjY8thSIc/Af95FQ=
Subject key identifier:   2C:BC:A3:A7:2C:15:A7:D7:BB:90:8A:72:92:A6:EF:E0:1F:BA:73:69
Certificate issuer:       /CN=6528c9ac-3735-430d-99f2-7ac01944d688
Certificate serial:       010D0C9F4328584E94EA8282A35DC221FB920D00
Authority key identifier: 64:79:50:96:C9:A4:0D:34:86:46:BD:1D:64:20:0D:DB:7C:9D:BA:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/37191ffc-8486-35c0-86e3-740b71796e73.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     54696
IP address blocks:        167.150.103.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:82:82:a3:5d:c2:21:fb:92:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6528c9ac-3735-430d-99f2-7ac01944d688
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=2388f2de-9088-483f-8606-1525ce8415cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:da:8f:f8:23:d7:74:fa:82:da:08:bf:20:81:
                    37:0a:12:f9:33:e1:6b:1f:b1:7d:c5:0e:67:22:5d:
                    a2:35:ea:12:2d:8f:b7:39:97:4c:7e:88:73:35:b1:
                    77:ea:9a:2a:08:d9:28:7a:7c:60:a9:20:73:29:ee:
                    96:56:54:bc:9d:79:2e:50:66:35:82:be:53:55:7e:
                    a4:1f:2c:f7:90:95:87:d5:56:99:7e:6e:39:99:36:
                    cf:44:d2:8e:7d:0e:e2:c7:9d:42:1d:c3:e4:1d:d1:
                    3e:71:b4:e5:32:5f:ea:32:1e:73:8c:6e:56:56:d8:
                    7a:26:ad:e6:27:d7:48:21:a1:81:9d:56:a1:1f:9c:
                    fc:eb:0d:00:ba:8e:07:84:8b:73:54:f3:17:e9:89:
                    d3:f2:0a:52:ae:48:fb:b5:df:53:4c:12:e8:3e:7c:
                    b3:35:93:1b:f6:be:1b:19:f6:45:a9:f1:5f:13:60:
                    05:0e:e7:63:36:c0:1b:07:36:ea:b0:58:93:70:30:
                    96:c1:f4:1b:eb:70:aa:71:47:ab:93:35:9a:f6:c9:
                    86:c1:0b:d2:f7:40:6b:ba:c0:fd:16:f4:92:74:0a:
                    89:04:97:da:ce:14:03:e4:cd:83:cf:b1:70:a4:63:
                    50:f7:f5:d1:fc:77:f5:33:ae:87:6e:4c:6f:e5:52:
                    0d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:BC:A3:A7:2C:15:A7:D7:BB:90:8A:72:92:A6:EF:E0:1F:BA:73:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/37191ffc-8486-35c0-86e3-740b71796e73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.crl

            X509v3 Authority Key Identifier:
                keyid:64:79:50:96:C9:A4:0D:34:86:46:BD:1D:64:20:0D:DB:7C:9D:BA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.150.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:f8:9d:38:c3:86:ae:26:0a:78:5d:75:d8:01:55:de:a2:0b:
         d2:60:44:a7:30:8f:4e:d2:05:e0:76:c4:06:10:b7:45:b5:b8:
         e3:72:37:c8:6f:2f:46:b4:71:4b:0a:3e:fe:60:20:61:ed:28:
         7c:73:6e:d3:ec:9c:36:f9:75:2f:97:b5:78:d7:ad:98:05:64:
         ef:45:6e:54:94:1e:77:38:59:ca:c2:20:df:0a:c2:3c:b1:11:
         86:03:ca:03:2b:c5:ca:4c:88:b1:24:94:c1:ce:f6:e8:05:75:
         bc:66:84:8d:80:a1:bf:94:18:96:12:06:66:2b:1c:9f:67:5a:
         fb:03:2c:73:1f:6a:ca:8a:81:55:96:64:85:97:43:a3:d7:89:
         ee:d7:92:b2:da:aa:2c:30:ba:09:f5:df:42:84:89:4e:06:33:
         63:da:5e:b4:80:78:88:b4:6c:b9:af:b3:f3:8e:49:b7:b9:57:
         a6:e4:42:d2:1f:d1:8d:4d:b9:4d:81:c0:ff:b7:4f:07:57:66:
         8b:90:92:7b:32:6a:77:8c:62:1c:db:90:6a:32:f3:9e:2c:cf:
         e9:36:bd:a7:0c:1f:21:33:49:2e:08:73:de:8b:4a:63:ba:3c:
         3a:73:81:f1:b5:5d:ca:01:d2:07:a7:1c:ae:86:b7:75:80:a8:
         e9:3b:dd:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:13:22 2026 by rpki-client