Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/aa4087d7-dc3e-33d9-919f-151eee0337f4.roa
File:                     aa4087d7-dc3e-33d9-919f-151eee0337f4.roa (raw, json)
Hash identifier:          vQcKmFRT5vwoSUFQqQPH/5n+myqzhOfC2aVMhMvIF1M=
Subject key identifier:   7C:FC:67:01:E6:1F:98:34:FE:3B:62:54:18:13:DF:4C:7B:5B:21:9D
Certificate issuer:       /CN=f9441892-5f50-4eb3-a218-8dada1be8f65
Certificate serial:       010D0C9F4328584DBE6B13939B02DD7D6D645BC0
Authority key identifier: 5A:12:BF:4D:73:FD:98:40:60:30:56:D7:B6:3C:BC:9E:37:AA:B3:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/aa4087d7-dc3e-33d9-919f-151eee0337f4.roa
Signing time:             Wed 06 May 2026 13:00:30 +0000
ROA not before:           Wed 06 May 2026 13:00:30 +0000
ROA not after:            Tue 04 Aug 2026 13:00:30 +0000
asID:                     29900
IP address blocks:        162.218.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/f9441892-5f50-4eb3-a218-8dada1be8f65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/f9441892-5f50-4eb3-a218-8dada1be8f65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:be:6b:13:93:9b:02:dd:7d:6d:64:5b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9441892-5f50-4eb3-a218-8dada1be8f65
        Validity
            Not Before: May  6 13:00:30 2026 GMT
            Not After : Aug  4 13:00:30 2026 GMT
        Subject: CN=75f20edd-bd6d-455c-886a-a6acb1de7b77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c8:f8:02:08:7f:65:5c:7c:00:5b:bf:9e:7b:
                    75:1e:4a:2f:2a:cf:de:03:44:82:95:7f:ab:b7:33:
                    94:9e:c9:a1:41:00:1c:b6:15:93:36:b3:bb:1b:68:
                    6e:b7:6d:52:5a:13:a0:8c:65:65:c9:c4:2d:5a:ea:
                    50:ca:73:bb:d2:3f:fa:bc:37:10:ce:f5:de:08:43:
                    d0:67:ca:4a:40:06:e5:59:31:ff:bf:9e:4c:36:6e:
                    07:fe:39:3a:95:7a:6c:0c:bf:cf:59:16:e8:39:d8:
                    e5:5d:cf:50:e0:39:ac:2e:2b:5e:b1:72:8b:a8:0d:
                    ea:01:2a:bc:59:88:60:29:3d:69:af:ed:80:5b:10:
                    96:0c:e1:54:86:28:a3:fb:42:8f:d7:62:21:8d:95:
                    a8:25:f3:e7:3e:2f:4e:35:81:50:97:58:bb:33:10:
                    95:7b:8a:11:4d:d5:84:38:86:f0:ab:d8:70:d6:bc:
                    16:c7:d2:e9:2f:2b:e0:e3:f9:96:b2:b9:8d:e7:17:
                    31:23:39:8f:cd:4e:93:47:cd:27:ab:bf:b0:7c:1e:
                    76:9d:c4:65:1b:f3:e5:3a:1e:c7:13:01:e9:a6:44:
                    64:bc:65:b3:09:8f:9e:6e:9f:e2:be:d9:8c:e6:e6:
                    e8:42:62:d0:f7:1b:76:21:15:a7:ae:c3:6d:da:bb:
                    9a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:FC:67:01:E6:1F:98:34:FE:3B:62:54:18:13:DF:4C:7B:5B:21:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/aa4087d7-dc3e-33d9-919f-151eee0337f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/f9441892-5f50-4eb3-a218-8dada1be8f65.crl

            X509v3 Authority Key Identifier:
                keyid:5A:12:BF:4D:73:FD:98:40:60:30:56:D7:B6:3C:BC:9E:37:AA:B3:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.218.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:56:b8:41:6e:d0:77:da:94:17:8f:a6:4e:54:60:ae:92:75:
         b7:2d:36:13:0c:38:29:16:56:20:f4:eb:c7:2d:d7:66:40:bc:
         a3:7a:9f:1b:d6:0b:9b:75:ad:1f:a7:21:b1:17:5e:61:9c:c2:
         f1:0a:df:dd:89:e2:65:6e:05:bd:63:68:df:2f:dc:4c:bf:61:
         35:d0:3c:17:9b:16:f9:b9:61:21:59:c6:14:70:5b:a8:33:28:
         18:64:b4:41:33:a9:db:0a:66:fe:c4:02:a5:cc:2c:87:8a:06:
         44:51:9b:5a:c2:4c:a6:54:4c:42:d6:d8:8a:fb:df:ba:79:c9:
         c7:2c:25:99:87:99:3e:f1:2f:a6:90:44:89:9b:17:71:f6:32:
         06:f0:04:49:2d:04:b0:a2:af:ee:ea:cc:de:50:3d:b0:11:96:
         5b:cd:f7:8f:42:25:fc:68:a3:58:28:e7:a0:da:76:7d:b1:72:
         0e:b9:e5:20:d8:df:0e:72:ae:86:f7:53:55:eb:41:a2:91:82:
         9e:76:4c:e2:ea:27:ea:cc:e6:23:d4:d7:56:68:bf:f8:a5:d9:
         f4:cc:b5:da:0e:b1:5e:f2:8e:e2:7e:9b:cf:64:36:ba:db:22:
         bf:fa:a8:17:6d:9e:5d:63:4a:e3:89:0a:92:7d:d0:63:2e:62:
         6b:19:cf:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:45:59 2026 by rpki-client