Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/211878fe-73c5-4a15-b82e-1d19c2ff542c/a20e51f0-690c-37b2-93d6-e0013362f971.roa
File:                     a20e51f0-690c-37b2-93d6-e0013362f971.roa (raw, json)
Hash identifier:          ze8Zr9p1I025dm/5fqIVYg5+zBbFZ/hfSIWzyeCBxDo=
Subject key identifier:   35:FC:A5:A1:4F:E4:2D:40:80:6A:75:99:EB:80:01:13:3D:0E:38:24
Certificate issuer:       /CN=211878fe-73c5-4a15-b82e-1d19c2ff542c
Certificate serial:       010D0C9F4328584E2CBD0687E29D011D3F3E3700
Authority key identifier: DE:8A:57:3F:0A:54:1A:43:43:7F:0C:FD:0B:AF:75:AF:C2:85:C0:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/211878fe-73c5-4a15-b82e-1d19c2ff542c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/211878fe-73c5-4a15-b82e-1d19c2ff542c/a20e51f0-690c-37b2-93d6-e0013362f971.roa
Signing time:             Mon 15 Jun 2026 01:24:57 +0000
ROA not before:           Mon 15 Jun 2026 01:24:57 +0000
ROA not after:            Sun 13 Sep 2026 01:24:57 +0000
asID:                     46433
IP address blocks:        162.255.96.0/24 maxlen: 24
                          162.255.97.0/24 maxlen: 24
                          162.255.98.0/24 maxlen: 24
                          162.255.99.0/24 maxlen: 24
                          162.255.100.0/24 maxlen: 24
                          162.255.101.0/24 maxlen: 24
                          162.255.102.0/24 maxlen: 24
                          162.255.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/211878fe-73c5-4a15-b82e-1d19c2ff542c/211878fe-73c5-4a15-b82e-1d19c2ff542c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/211878fe-73c5-4a15-b82e-1d19c2ff542c/211878fe-73c5-4a15-b82e-1d19c2ff542c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/211878fe-73c5-4a15-b82e-1d19c2ff542c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2c:bd:06:87:e2:9d:01:1d:3f:3e:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=211878fe-73c5-4a15-b82e-1d19c2ff542c
        Validity
            Not Before: Jun 15 01:24:57 2026 GMT
            Not After : Sep 13 01:24:57 2026 GMT
        Subject: CN=ee3e4f80-2944-461c-afa6-fde715717002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7c:5a:02:96:46:92:6a:3c:36:a4:cb:6c:b7:
                    fb:dd:f6:ba:fd:dd:3d:4d:f6:52:68:eb:27:6d:19:
                    29:b9:86:85:72:47:76:82:ea:1a:66:bc:55:04:a3:
                    4d:06:09:13:b3:40:a4:60:a0:f2:75:73:59:d9:0d:
                    9f:21:fa:68:57:d9:3c:40:89:26:3a:7b:85:9e:f0:
                    e1:0e:33:42:0b:fc:11:96:09:d5:01:59:ba:71:56:
                    0a:be:8b:27:95:15:cf:67:16:b2:31:9f:34:13:21:
                    62:1b:d5:cd:29:3d:72:bf:d9:e5:58:4f:4f:ca:95:
                    3f:26:78:3f:98:a4:cb:b5:d9:61:12:c8:2b:6e:81:
                    57:7b:fa:16:89:9b:f9:92:b7:da:3c:38:be:c8:b9:
                    1a:36:7d:93:36:56:ac:e8:02:d0:db:e6:cc:1a:d8:
                    da:0d:ff:c1:27:5c:1e:d4:39:1b:3c:6b:a0:18:eb:
                    40:bf:dd:1f:79:01:43:69:b4:12:45:78:87:50:0e:
                    44:e0:95:91:f7:83:93:82:95:52:1a:74:c8:80:ba:
                    fe:6e:9a:a4:43:13:52:37:e8:a8:24:a2:26:e4:eb:
                    fc:df:3b:08:ca:0f:ba:4c:88:b7:84:ae:9c:19:95:
                    34:02:be:8c:ff:63:ff:eb:f0:49:03:f8:9a:66:70:
                    63:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:FC:A5:A1:4F:E4:2D:40:80:6A:75:99:EB:80:01:13:3D:0E:38:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/211878fe-73c5-4a15-b82e-1d19c2ff542c/a20e51f0-690c-37b2-93d6-e0013362f971.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/211878fe-73c5-4a15-b82e-1d19c2ff542c/211878fe-73c5-4a15-b82e-1d19c2ff542c.crl

            X509v3 Authority Key Identifier:
                keyid:DE:8A:57:3F:0A:54:1A:43:43:7F:0C:FD:0B:AF:75:AF:C2:85:C0:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/211878fe-73c5-4a15-b82e-1d19c2ff542c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.255.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:09:78:8e:4c:31:eb:1e:7d:01:1a:8b:91:7c:c2:f4:92:79:
         c1:37:bc:67:dd:f6:5a:cb:fa:32:54:c4:0c:56:fa:a4:d4:a3:
         ef:a1:9c:f3:51:57:fc:37:c4:bc:70:0f:14:c3:a2:b9:e7:10:
         10:15:25:ea:c7:50:01:38:5e:48:e6:ae:7e:cc:0c:c5:07:3f:
         7d:17:0b:be:49:94:80:20:4c:33:8b:7f:64:30:9c:d6:2f:4f:
         04:34:4a:d4:39:87:29:52:2a:26:e4:d6:ff:25:90:7b:c4:33:
         fd:2c:08:b9:7d:15:6f:2a:8a:a9:6a:b0:30:94:51:13:b7:9e:
         d6:7d:4f:e8:6a:0b:34:6e:c8:ea:c5:f4:0e:0c:3d:a4:72:c7:
         80:76:bc:65:c5:54:40:a8:30:de:c6:88:ad:96:cf:5a:e0:47:
         fb:03:9b:ad:8f:cb:48:53:ac:33:83:dc:40:c1:7b:98:a3:a1:
         83:9b:0f:8c:f3:f4:e8:77:8f:75:36:a8:a8:11:56:ec:da:75:
         b6:fc:72:8a:69:07:67:41:98:e3:7a:9a:8a:fb:97:3e:1c:f3:
         e9:12:31:32:ef:6f:16:ac:be:cf:41:c9:b1:3b:11:7b:ce:f4:
         77:d2:3e:af:c7:9a:a8:cf:b8:98:0a:36:75:46:37:d6:b9:69:
         09:6f:e1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:57:10 2026 by rpki-client