Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0152b1c5-8eb6-4add-99f6-7fa28184dcd1/7bcd25c1-5d49-3223-9bb6-5b069a84ad64.roa
File:                     7bcd25c1-5d49-3223-9bb6-5b069a84ad64.roa (raw, json)
Hash identifier:          oyvEva/Hm/+oPs0huyiF9Uk9FfeSkbzEgwrDKlHos+k=
Subject key identifier:   62:E4:DD:62:E1:72:70:9E:5C:8E:1C:CD:07:B0:87:BF:1B:35:71:A7
Certificate issuer:       /CN=0152b1c5-8eb6-4add-99f6-7fa28184dcd1
Certificate serial:       010D0C9F4328584E43F4759121525AF96CF3FA30
Authority key identifier: CE:0E:D7:91:DD:17:98:76:12:AE:A9:E6:7D:2A:97:6A:88:79:A4:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0152b1c5-8eb6-4add-99f6-7fa28184dcd1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0152b1c5-8eb6-4add-99f6-7fa28184dcd1/7bcd25c1-5d49-3223-9bb6-5b069a84ad64.roa
Signing time:             Tue 23 Jun 2026 09:00:12 +0000
ROA not before:           Tue 23 Jun 2026 09:00:12 +0000
ROA not after:            Mon 21 Sep 2026 09:00:12 +0000
asID:                     8075
IP address blocks:        162.252.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0152b1c5-8eb6-4add-99f6-7fa28184dcd1/0152b1c5-8eb6-4add-99f6-7fa28184dcd1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0152b1c5-8eb6-4add-99f6-7fa28184dcd1/0152b1c5-8eb6-4add-99f6-7fa28184dcd1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0152b1c5-8eb6-4add-99f6-7fa28184dcd1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:43:f4:75:91:21:52:5a:f9:6c:f3:fa:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0152b1c5-8eb6-4add-99f6-7fa28184dcd1
        Validity
            Not Before: Jun 23 09:00:12 2026 GMT
            Not After : Sep 21 09:00:12 2026 GMT
        Subject: CN=dee5e247-ff38-4e2f-918f-b6498a13650d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:aa:b8:7e:ab:b5:eb:aa:3a:5f:1e:da:c3:91:
                    df:e4:3b:36:bf:69:15:a1:a7:e0:b6:e7:f1:9e:8e:
                    fb:dd:21:1e:04:6c:1f:16:7e:9b:b9:71:90:4d:d0:
                    41:d3:e3:31:04:a0:e9:cc:3a:ce:d9:95:d8:ab:03:
                    6f:51:dd:27:08:8f:fc:50:ec:c3:17:a1:6a:4d:64:
                    70:28:af:62:25:ca:59:a2:22:b5:6a:30:ab:be:4e:
                    28:80:45:24:85:4e:2c:46:ea:21:ba:63:71:5d:51:
                    bc:5c:79:51:e1:6f:8e:ec:d3:72:24:3a:7e:f1:5d:
                    ac:f8:ce:4c:36:cd:bf:47:9e:42:a6:79:d9:46:ed:
                    b8:42:d1:6c:df:e9:12:62:27:ba:b2:c0:d8:44:d6:
                    d8:84:86:1e:32:bb:ac:b9:a8:3c:d6:cc:04:85:90:
                    c1:27:39:f5:70:70:74:0e:cb:72:40:31:24:9d:3f:
                    1e:be:5a:1d:94:44:16:05:8f:87:2c:ec:52:e1:d2:
                    44:2d:a9:48:74:7d:85:d3:d2:79:11:11:32:fa:38:
                    61:52:87:4c:1c:91:ef:f0:94:fb:f0:42:4d:aa:40:
                    6a:42:f4:05:a0:f1:8f:35:6f:d4:f9:79:e3:eb:4c:
                    71:56:d3:6e:8c:fd:4a:e5:49:d8:42:12:19:c0:88:
                    7c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E4:DD:62:E1:72:70:9E:5C:8E:1C:CD:07:B0:87:BF:1B:35:71:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0152b1c5-8eb6-4add-99f6-7fa28184dcd1/7bcd25c1-5d49-3223-9bb6-5b069a84ad64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0152b1c5-8eb6-4add-99f6-7fa28184dcd1/0152b1c5-8eb6-4add-99f6-7fa28184dcd1.crl

            X509v3 Authority Key Identifier:
                keyid:CE:0E:D7:91:DD:17:98:76:12:AE:A9:E6:7D:2A:97:6A:88:79:A4:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0152b1c5-8eb6-4add-99f6-7fa28184dcd1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.252.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:d6:ef:f3:fd:9a:49:d8:95:2d:48:7b:d8:6c:75:21:2c:aa:
         bb:bb:8e:a1:9f:b0:a2:0d:b0:94:fd:99:c0:4d:6e:27:0a:35:
         7f:6d:91:1f:98:a6:6c:82:0a:26:ea:47:25:67:94:43:e0:7d:
         d7:8e:64:56:71:8b:1f:ae:bf:9b:b0:fa:35:5f:35:c2:de:8e:
         f1:91:34:dc:74:53:c8:b5:85:44:38:1a:11:fc:f4:6f:9c:f6:
         0e:dd:84:93:a1:89:bc:f2:c8:97:17:76:f0:5f:5f:c1:a2:73:
         87:e7:c7:d5:95:4c:3e:a2:34:2f:50:fd:3d:36:fb:d4:65:5e:
         8c:73:4e:bc:f8:13:a3:58:aa:c7:50:a6:e1:4e:ee:52:aa:30:
         66:a5:e9:ff:2c:b5:e4:b8:7d:89:7c:74:e8:a6:ba:54:c3:eb:
         24:5c:1b:c9:f8:42:71:e2:42:67:e4:88:88:62:39:32:aa:c9:
         b6:41:82:2d:38:b9:69:1b:c6:87:03:87:73:1a:c3:81:c8:61:
         2a:6d:9d:c5:30:4c:cc:a6:6e:55:1a:ab:9b:ca:87:f6:e5:c1:
         d2:2b:9f:d4:21:28:e9:e5:26:42:84:09:9b:7b:fd:34:39:89:
         2d:38:94:a2:ae:de:18:63:94:96:8c:02:c9:d1:a0:bf:ae:06:
         3a:b2:3d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:53:23 2026 by rpki-client