Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7d61e42a-80d4-3c5b-8eda-a773c348adac.roa
File:                     7d61e42a-80d4-3c5b-8eda-a773c348adac.roa (raw, json)
Hash identifier:          QKRte2EPDj/mHZfgItGHrBzFpI4df8sNb4Aqrt+eCxo=
Subject key identifier:   9E:E2:C0:07:17:F4:A5:AE:74:8A:0D:07:23:6E:C1:34:5F:23:5F:43
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E3CF9C06100B09EA84DDF3CD0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7d61e42a-80d4-3c5b-8eda-a773c348adac.roa
Signing time:             Sat 20 Jun 2026 21:00:12 +0000
ROA not before:           Sat 20 Jun 2026 21:00:12 +0000
ROA not after:            Fri 18 Sep 2026 21:00:12 +0000
asID:                     13335
IP address blocks:        162.159.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3c:f9:c0:61:00:b0:9e:a8:4d:df:3c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 20 21:00:12 2026 GMT
            Not After : Sep 18 21:00:12 2026 GMT
        Subject: CN=ae983a0b-0af2-42f9-b1a0-3be1d54e0b49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8a:bf:08:b3:b2:ee:86:58:59:d4:c6:11:78:
                    1c:9d:75:32:fa:3b:a3:b2:c4:2d:59:0e:c6:98:b0:
                    64:c8:cb:59:17:30:f1:d5:c6:92:88:60:b1:49:27:
                    f4:54:bb:f8:ac:8f:af:f3:55:5a:da:f5:a6:3e:89:
                    0e:a9:3d:ff:ad:17:0a:45:65:25:3e:ad:eb:ee:bf:
                    37:10:f9:c0:a1:73:b5:41:32:4f:00:dc:61:ad:20:
                    7d:78:d1:1a:e2:32:e8:40:1b:7f:29:22:47:cb:6c:
                    01:0f:86:28:0c:6c:95:95:3d:a0:17:c8:7a:63:13:
                    20:7e:68:77:1a:b2:6e:f0:d8:86:b6:93:57:10:7f:
                    aa:04:65:2d:01:61:ef:b6:57:53:a0:87:b8:4d:3a:
                    e7:65:28:1f:1c:11:4d:87:81:d0:0c:40:bd:aa:fc:
                    2d:37:b3:89:6a:7a:bf:0b:95:9e:7b:f3:11:97:bd:
                    a9:4a:ec:1d:cf:e1:a6:b2:06:dc:59:b8:a0:dd:78:
                    61:4d:e2:60:03:3f:c8:77:9b:46:03:17:b9:8d:c8:
                    e4:44:e0:25:d4:43:a7:95:46:89:dc:cd:57:64:38:
                    3d:be:f8:8a:f0:a2:9d:5e:f0:b1:0e:d8:38:d0:07:
                    ff:7b:ef:ba:ec:e7:cb:66:24:c1:70:0d:e2:25:53:
                    e9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:E2:C0:07:17:F4:A5:AE:74:8A:0D:07:23:6E:C1:34:5F:23:5F:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7d61e42a-80d4-3c5b-8eda-a773c348adac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.159.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:ba:76:a1:ad:37:5e:a4:15:32:f8:5c:73:f5:c7:06:e8:01:
         0e:74:55:e8:9e:b7:02:ea:96:35:be:ba:ee:6b:90:0b:f9:c4:
         c0:42:4d:b2:30:e9:11:a5:97:2f:71:7f:86:82:ae:bc:eb:2b:
         14:57:d4:fd:6f:26:7d:ee:de:a9:16:a5:d0:99:16:1c:82:ab:
         43:79:d1:05:c8:94:ff:84:8b:55:c2:ac:4d:c7:28:f1:e7:44:
         43:97:47:f7:14:d7:be:27:0b:3f:22:0b:38:68:7c:5f:6e:d5:
         0b:5f:fc:91:4d:47:7a:10:b9:a1:1e:ae:8a:13:f8:c5:aa:1b:
         ce:36:4d:d2:30:37:ae:8c:97:ca:ab:bd:b4:6c:56:1a:91:db:
         36:a9:71:8e:ab:b3:38:f2:61:73:54:13:94:eb:5d:ea:d5:78:
         6b:76:b3:81:d7:cf:d6:75:cb:32:ea:74:7f:b3:8c:f5:30:3a:
         c5:59:d2:e8:d9:6c:de:b0:68:38:bf:33:42:33:3c:66:8a:63:
         7c:d1:f2:ea:2a:5d:51:fb:24:5c:00:5d:e9:02:c1:98:2c:8c:
         05:1b:c2:bb:f7:da:98:89:cb:3f:c7:1f:5c:aa:8a:8c:6b:81:
         08:0f:9c:8e:3e:36:e8:db:6b:34:4a:09:d0:c8:1b:2f:7b:f4:
         a8:87:66:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 23:54:51 2026 by rpki-client