Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/b2efcee3-c214-3e02-92aa-9064905257d6.roa
File:                     b2efcee3-c214-3e02-92aa-9064905257d6.roa (raw, json)
Hash identifier:          Kx0iKmegYLYWJ6UMA6PYusAOBbG+lE2JsKPqpzuLVJc=
Subject key identifier:   73:37:D5:CE:46:FB:45:12:4C:5A:68:58:B4:09:50:61:27:64:E3:F0
Certificate issuer:       /CN=a3b98616-e4f8-4c76-8410-cb4b6d93c85f
Certificate serial:       010D0C9F4328584EED51FF796F473497D8759100
Authority key identifier: 3B:E1:C1:F5:AC:D6:8E:30:AE:C6:8C:E5:A1:43:13:60:74:9E:D8:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/b2efcee3-c214-3e02-92aa-9064905257d6.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     8888
IP address blocks:        167.253.157.0/24 maxlen: 24
                          167.253.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:51:ff:79:6f:47:34:97:d8:75:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3b98616-e4f8-4c76-8410-cb4b6d93c85f
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=c1cb0ea3-4f6d-4f65-953c-7f5ae016ae85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:38:92:e8:e3:54:fa:c5:a7:da:11:ff:5f:a1:
                    12:02:a5:35:e7:2d:71:d2:b4:d5:3a:8d:0e:13:34:
                    3d:cc:2c:34:16:0a:92:13:f3:43:3c:ea:e5:c0:cc:
                    17:88:87:39:c8:7b:31:a0:5e:11:a8:0b:30:bb:d2:
                    90:50:f5:a2:0a:f9:c2:f7:c7:0c:cb:96:92:9a:96:
                    01:99:00:ac:98:b3:64:c2:e8:f9:c3:7f:92:11:4e:
                    72:d9:c2:05:d0:c3:dc:b8:53:51:a8:7a:e4:2b:bf:
                    e4:d5:d0:a8:f7:fc:8b:35:ae:5d:9c:d5:3f:fb:29:
                    0f:81:a1:1e:8a:b1:9c:c2:34:d3:08:cb:a6:54:97:
                    8d:1d:43:4d:4f:9c:a4:e3:81:1d:0b:3e:df:34:95:
                    3a:4a:7e:e9:a3:f5:46:23:42:7f:76:ed:7d:41:32:
                    7f:e7:ae:45:a2:43:62:e5:d8:bd:41:61:3e:e1:d7:
                    5c:81:22:24:20:0c:fc:19:77:d0:a8:1d:1b:2d:d0:
                    2a:bf:80:39:50:d9:7c:13:dd:1b:79:45:3b:a9:8e:
                    f4:ca:f3:5f:76:bd:9f:a0:42:d3:4e:ec:1e:02:29:
                    19:03:8f:3e:4c:0a:8f:04:38:55:82:01:85:60:25:
                    31:be:3f:57:57:dc:43:b3:07:01:c6:64:80:99:8b:
                    35:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:37:D5:CE:46:FB:45:12:4C:5A:68:58:B4:09:50:61:27:64:E3:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/b2efcee3-c214-3e02-92aa-9064905257d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.crl

            X509v3 Authority Key Identifier:
                keyid:3B:E1:C1:F5:AC:D6:8E:30:AE:C6:8C:E5:A1:43:13:60:74:9E:D8:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.157.0/24
                  167.253.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:2c:a9:ab:78:dc:af:f3:6d:24:4d:76:be:dc:45:67:27:c2:
         14:ce:0e:9b:c4:d7:a6:cf:9f:f7:2a:a0:54:78:b5:2e:12:05:
         a0:7f:0a:5f:28:c3:48:6c:0c:c3:c0:63:7a:c8:8e:85:03:d2:
         57:f3:0b:f4:d6:2a:30:38:a4:3a:f9:d3:b4:95:15:4b:d3:7b:
         21:65:c3:7b:ce:03:97:53:cd:7a:2d:e1:23:fb:ed:a4:2a:da:
         23:1d:dc:e6:56:26:ee:06:19:92:f4:5d:ac:25:da:97:9a:a0:
         af:5f:f0:b4:9c:50:af:21:72:c4:c1:63:f7:de:36:84:d6:1c:
         50:b5:cb:40:5f:75:c0:b9:50:70:ed:da:9f:a7:db:50:c7:ac:
         48:1b:d9:41:37:17:b3:f5:9b:63:f0:e2:84:3a:64:6f:27:14:
         61:c0:81:e6:47:09:1a:8b:a8:23:59:6d:47:d5:90:e4:6f:c3:
         08:21:f2:06:e2:80:c8:d0:17:c7:61:c7:55:d7:d9:13:26:a9:
         74:2b:5b:31:bc:57:a1:4d:26:94:52:e8:f5:ff:02:1e:a6:c5:
         ae:36:a3:15:e1:b2:7f:02:66:13:c9:c9:a4:f7:96:0e:73:55:
         ce:95:51:bf:8b:ee:05:08:76:03:b6:e8:5d:29:6c:98:7c:70:
         d9:42:dc:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:48:54 2026 by rpki-client