Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/7dfa62b7-d3b1-3bd1-9246-31b00f03d824.roa
File:                     7dfa62b7-d3b1-3bd1-9246-31b00f03d824.roa (raw, json)
Hash identifier:          mPZXIXLoMi9A2LIFqfdJrV9jvS3cc3vnxgodQLjVqD4=
Subject key identifier:   59:03:BB:F3:E7:2D:9E:42:2E:67:FE:04:87:46:4E:66:08:66:1E:0D
Certificate issuer:       /CN=dfffa5c3-b5c7-4347-8d57-96bc3102df8a
Certificate serial:       010D0C9F4328584F7782F150EC062A4AC87EBA80
Authority key identifier: 21:EF:A2:95:82:70:C4:A7:B7:7D:3E:26:4B:DE:9E:B4:66:0D:AE:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/7dfa62b7-d3b1-3bd1-9246-31b00f03d824.roa
Signing time:             Sun 11 Oct 2026 13:00:12 +0000
ROA not before:           Sun 11 Oct 2026 13:00:12 +0000
ROA not after:            Sat 09 Jan 2027 14:00:12 +0000
asID:                     996
IP address blocks:        167.253.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:77:82:f1:50:ec:06:2a:4a:c8:7e:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfffa5c3-b5c7-4347-8d57-96bc3102df8a
        Validity
            Not Before: Oct 11 13:00:12 2026 GMT
            Not After : Jan  9 14:00:12 2027 GMT
        Subject: CN=433eeb62-0d50-4e08-9543-139f1c8a5457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ab:8a:af:ff:72:c5:76:93:38:e5:2b:5d:f6:
                    12:e2:0e:b7:0d:7e:bd:98:19:10:cd:6b:68:9d:b3:
                    a3:e3:54:43:37:85:5e:5c:99:33:a2:ea:55:3d:74:
                    f1:eb:47:50:22:74:45:fd:1c:3a:fa:2a:c6:9e:33:
                    c5:f2:8e:f2:4b:8b:3d:02:d5:4b:70:a4:0d:64:90:
                    53:c9:0e:c1:7c:18:d4:4b:15:d0:b7:d9:5e:ef:68:
                    42:58:43:ab:2f:e6:ba:c0:e6:45:5f:69:e5:c3:c6:
                    67:a4:b9:d4:86:07:95:25:2b:85:b0:78:cd:00:d8:
                    d9:0e:05:d2:ae:37:0c:87:f2:b7:44:d9:00:b9:f7:
                    94:ed:8e:10:b6:0d:fd:e5:07:f5:f7:0c:65:9b:77:
                    29:32:3d:1d:1d:a0:6c:a3:17:34:dc:9d:eb:df:86:
                    6d:46:12:4e:dd:44:31:19:4a:dc:c4:e6:e3:0a:7f:
                    42:89:1f:5a:6a:62:81:f3:f6:a7:22:44:56:4b:15:
                    6b:ec:2c:3c:ac:ea:ea:2e:a5:f6:33:d2:5b:ea:c4:
                    01:08:12:ad:81:aa:64:a8:37:ea:24:6f:90:20:92:
                    6a:b3:63:9f:4b:de:f4:da:0d:35:9c:67:8d:b3:f1:
                    9b:10:cf:56:0f:05:b1:a1:de:5d:92:54:76:04:29:
                    b2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:03:BB:F3:E7:2D:9E:42:2E:67:FE:04:87:46:4E:66:08:66:1E:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/7dfa62b7-d3b1-3bd1-9246-31b00f03d824.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.crl

            X509v3 Authority Key Identifier:
                keyid:21:EF:A2:95:82:70:C4:A7:B7:7D:3E:26:4B:DE:9E:B4:66:0D:AE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:84:89:4e:ab:d3:af:22:4c:94:d1:32:73:7e:62:23:94:c1:
         24:89:8d:b6:9e:90:74:c9:26:5d:d9:cd:13:9e:9f:f7:61:2d:
         ac:01:50:65:86:b6:b2:ef:6c:47:6e:1c:87:86:45:e2:94:f7:
         d9:f3:1a:f9:b7:43:b8:dc:9c:a9:78:2b:51:02:12:43:7b:af:
         ab:26:e4:bc:33:5b:34:df:c3:a9:d1:af:2a:e2:a8:5b:a2:27:
         25:fc:f1:1b:6e:3f:ef:02:0b:35:95:70:50:c3:e1:53:9a:16:
         76:5e:cc:ce:ba:51:ba:db:06:6d:19:93:a3:a6:55:2e:96:1c:
         b8:1a:4d:65:ab:d9:5d:fc:00:29:6c:75:9d:32:3a:a3:9b:11:
         5b:38:ee:09:83:24:9b:86:03:97:d4:40:2b:88:19:90:c2:92:
         7f:59:36:d7:cd:14:a4:45:2e:83:75:8e:20:33:df:a2:81:11:
         7d:e7:dd:23:55:22:13:0c:a9:e2:01:59:bb:3c:1a:df:47:30:
         b6:b7:d8:92:bd:3b:f9:1f:78:e3:27:5b:03:4e:1f:39:be:be:
         6f:51:a4:32:ad:55:af:9e:8b:f2:ce:75:00:88:00:28:8f:7b:
         5b:4f:84:59:8a:0a:dd:ae:e1:a7:3d:be:a4:1b:9a:ee:43:fe:
         88:22:69:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 14:31:31 2026 by rpki-client