Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/cc183749-ac52-30f2-9ae3-b237f3964810.roa
File:                     cc183749-ac52-30f2-9ae3-b237f3964810.roa (raw, json)
Hash identifier:          o5af+rOc5Z8B7DAECAaI0D19RXohxSfS/JTae8ZyLGs=
Subject key identifier:   F8:33:FB:64:75:95:F8:8A:9B:E1:0B:5D:1A:E5:E8:DC:BB:6F:A1:77
Certificate issuer:       /CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
Certificate serial:       010D0C9F4328584DF4DB4E293F4DDC3FFC844610
Authority key identifier: 8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/cc183749-ac52-30f2-9ae3-b237f3964810.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     29838
IP address blocks:        167.88.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:4e:29:3f:4d:dc:3f:fc:84:46:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=d27744ff-0c17-4506-9075-2252c0abaa28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ae:30:46:68:b5:cc:10:11:17:6d:2a:a7:58:
                    4f:31:29:7e:cf:8c:8d:99:c3:45:d9:ff:53:45:bd:
                    ef:8f:0a:40:1c:7b:09:88:ab:1b:f4:3c:bf:a4:a6:
                    76:9a:fc:ce:ec:38:e0:85:4c:cb:72:aa:3c:ef:19:
                    f1:33:74:fc:5a:fd:f1:45:5a:31:e2:78:27:40:2b:
                    c8:9b:0f:b0:89:de:52:3b:2c:af:42:21:d3:07:32:
                    c6:fd:c1:11:99:4f:25:c8:09:34:d3:1a:de:43:6d:
                    70:37:24:1e:2c:e7:c7:40:c4:af:3c:17:f1:29:bc:
                    dc:68:12:31:b0:b5:fe:c2:cd:21:7f:b6:48:e8:36:
                    d0:c1:7e:c2:b1:cc:64:6c:6c:75:be:ae:bb:ae:b2:
                    d8:96:74:67:be:c0:7e:eb:6f:76:48:c6:7a:8f:34:
                    10:3e:4a:86:5a:7e:20:db:69:7a:09:9f:16:65:ce:
                    8b:dc:1b:b9:53:d0:42:e5:ef:d5:f1:f5:69:3c:d7:
                    c4:e0:f9:3f:e5:27:5f:39:d4:4a:63:e0:f2:63:94:
                    68:64:68:ec:dc:da:cc:47:66:73:cd:b2:f7:bb:26:
                    c8:22:50:19:d2:78:0f:ac:03:1d:15:69:11:12:72:
                    4e:b8:11:e2:29:e5:50:b9:08:4e:de:4b:4d:b4:d7:
                    e8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:33:FB:64:75:95:F8:8A:9B:E1:0B:5D:1A:E5:E8:DC:BB:6F:A1:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/cc183749-ac52-30f2-9ae3-b237f3964810.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl

            X509v3 Authority Key Identifier:
                keyid:8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.88.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:37:90:24:90:2c:07:9f:a7:17:59:89:9d:54:91:c9:a0:96:
         f8:14:c1:18:39:80:41:8f:9b:aa:35:ba:cb:7a:32:31:44:1e:
         95:8e:3a:cf:cd:ee:87:89:84:61:d5:19:7a:35:13:3c:ba:10:
         b2:50:b5:8f:db:09:69:69:cd:27:05:c4:85:4d:a8:b8:67:bb:
         76:ef:31:8c:7b:98:15:7e:d8:df:06:a6:6b:27:15:c0:f1:35:
         76:49:7e:ec:64:e4:6b:72:5d:18:86:99:3d:83:73:8f:f3:86:
         03:51:a4:b1:96:7e:8f:fe:5f:5f:85:e0:51:0c:f9:1f:62:88:
         1d:c2:f8:99:ed:f3:00:e4:76:05:b5:5e:85:34:68:d9:0d:8b:
         66:7a:c8:4a:f4:f8:29:54:b5:a8:2f:cf:bc:99:de:59:ee:17:
         ae:88:a5:78:e0:64:f2:7f:6c:97:6a:02:a1:97:ee:e4:40:c3:
         88:f0:ca:e0:fa:71:3f:5f:fd:bd:4e:c3:f2:5d:c6:b2:cd:f7:
         4b:9b:f5:f0:2f:19:0e:95:e0:ef:ea:0b:00:80:5e:b9:7f:58:
         d8:e4:4e:b8:f0:82:37:32:f8:73:19:02:34:32:51:df:ef:0c:
         e6:db:91:d9:e2:c1:ae:fd:6c:7d:39:fc:03:2b:a9:64:40:b2:
         5b:b9:74:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 03:30:29 2026 by rpki-client