Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/2782020a-b333-378b-976a-19c150b5397c.roa
File:                     2782020a-b333-378b-976a-19c150b5397c.roa (raw, json)
Hash identifier:          mwlb45oRlafsm/8KUasYRyZMsy6OFVr22r1ZIAOd52c=
Subject key identifier:   2D:FE:D5:68:43:41:92:1B:C8:9E:04:58:87:BA:B2:6B:B0:6C:D8:9C
Certificate issuer:       /CN=b5b0edd0-660a-4c59-91a2-146648a973a0
Certificate serial:       010D0C9F4328584E54B49AA14AB9B0C855B72CC0
Authority key identifier: 99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/2782020a-b333-378b-976a-19c150b5397c.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     8075
IP address blocks:        161.221.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:9a:a1:4a:b9:b0:c8:55:b7:2c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5b0edd0-660a-4c59-91a2-146648a973a0
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=c8665914-a7f5-4f0f-8ef6-f6602275fd85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d3:9e:fa:7c:80:8c:a4:de:91:2f:8e:86:08:
                    07:5b:9b:93:92:78:cf:67:c1:ce:c7:73:fd:f6:2e:
                    66:bc:4c:de:90:23:10:8c:f8:ff:9f:30:e7:3a:2a:
                    3e:30:ab:f5:f7:b3:6e:b3:73:34:04:24:d1:d6:55:
                    c5:e8:5d:71:50:e0:d3:9a:6d:cc:72:b8:02:5d:50:
                    98:00:1b:6e:89:cd:27:3d:ed:c2:d6:ab:55:c3:af:
                    53:b0:43:bc:a2:a9:8d:5e:ce:5d:43:f9:6b:da:e4:
                    9d:e7:21:bc:4a:20:38:0b:cb:8c:79:cf:ae:ce:58:
                    95:31:0d:b0:02:c7:e0:9c:ee:e4:af:33:30:d2:0c:
                    56:08:ce:45:0f:7a:0b:a6:92:b1:44:65:fe:db:2e:
                    61:7b:52:96:ac:d7:e1:9f:e2:3d:76:ed:88:35:69:
                    9d:01:77:0d:34:eb:60:a2:94:ca:f7:07:c2:ac:2c:
                    dc:c2:5d:ac:ba:aa:5f:13:f2:11:fe:30:b4:5c:9b:
                    54:dc:49:a3:c9:3c:c9:21:3c:ff:14:5b:21:8a:81:
                    88:63:02:f3:96:b4:d9:75:8c:f7:d1:f2:fa:be:2e:
                    c4:8c:45:2c:91:a7:f5:77:81:5c:07:f7:c2:6b:03:
                    83:fe:db:ce:a8:6b:2c:fe:68:f4:47:31:be:2f:51:
                    df:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:FE:D5:68:43:41:92:1B:C8:9E:04:58:87:BA:B2:6B:B0:6C:D8:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/2782020a-b333-378b-976a-19c150b5397c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl

            X509v3 Authority Key Identifier:
                keyid:99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.221.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:ee:ac:17:79:15:78:3c:0f:a5:de:23:b0:05:50:47:07:e5:
         48:62:7f:20:6e:db:9f:ef:6d:69:d5:8f:b2:68:94:9b:60:ba:
         91:ff:8a:66:58:11:d7:8b:72:02:96:2a:db:60:44:34:25:08:
         93:c7:72:b2:5f:2c:79:19:a4:e5:4e:e5:09:36:d6:cf:3a:62:
         15:24:f7:b1:4f:47:d6:cf:59:1b:3d:e9:6d:f6:0e:87:27:65:
         82:43:08:16:10:9f:90:a0:0a:b8:0b:79:31:1c:d4:c0:35:4b:
         ef:d0:66:7c:e3:4b:eb:f1:3a:7d:4b:ee:08:cf:2e:22:5e:94:
         2d:2b:3c:32:20:72:a9:8f:9a:da:9f:1f:39:64:0d:68:d6:b6:
         fd:0e:74:04:f5:91:6f:a9:38:dc:d7:3a:9d:cf:21:73:eb:2b:
         20:67:80:02:08:d9:b5:35:ce:a8:25:b8:5e:61:6a:0d:14:71:
         6f:da:58:3f:70:61:06:3f:b7:1a:f0:5f:ef:e2:95:0c:7e:83:
         c7:aa:dd:73:af:91:a8:f6:40:16:8b:90:d8:81:4e:b4:14:2a:
         62:92:c3:e6:31:ba:1f:64:0b:21:a2:6d:15:6f:4d:7b:7d:16:
         ec:a0:ed:45:67:9c:b9:53:02:c1:9c:fc:7b:01:d2:c6:0e:81:
         50:10:1a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:54:27 2026 by rpki-client