Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a7785d23-0643-42ef-99ec-aa21d952864b/b6b87da6-36e3-3a19-b148-fab60f97616d.roa
File:                     b6b87da6-36e3-3a19-b148-fab60f97616d.roa (raw, json)
Hash identifier:          XFbDdsfdPQ/TCU1WF6R3nIx+QjD/1t7FBv9+XZkBQZ8=
Subject key identifier:   F6:62:7D:4B:20:B7:39:47:1F:D8:DD:78:E5:65:8B:42:17:E9:CB:1B
Certificate issuer:       /CN=a7785d23-0643-42ef-99ec-aa21d952864b
Certificate serial:       010D0C9F4328584F0ED22E3B9D2F7A4CDF43B780
Authority key identifier: 8F:25:8E:97:29:DC:38:D6:F2:CF:D3:34:6F:10:0D:39:AD:1E:AF:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a7785d23-0643-42ef-99ec-aa21d952864b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a7785d23-0643-42ef-99ec-aa21d952864b/b6b87da6-36e3-3a19-b148-fab60f97616d.roa
Signing time:             Fri 04 Sep 2026 01:00:12 +0000
ROA not before:           Fri 04 Sep 2026 01:00:12 +0000
ROA not after:            Thu 03 Dec 2026 02:00:12 +0000
asID:                     22616
IP address blocks:        164.157.252.0/24 maxlen: 24
                          164.157.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a7785d23-0643-42ef-99ec-aa21d952864b/a7785d23-0643-42ef-99ec-aa21d952864b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a7785d23-0643-42ef-99ec-aa21d952864b/a7785d23-0643-42ef-99ec-aa21d952864b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a7785d23-0643-42ef-99ec-aa21d952864b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0e:d2:2e:3b:9d:2f:7a:4c:df:43:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7785d23-0643-42ef-99ec-aa21d952864b
        Validity
            Not Before: Sep  4 01:00:12 2026 GMT
            Not After : Dec  3 02:00:12 2026 GMT
        Subject: CN=81e8edb2-155a-4c42-833d-59cb05d0377e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6f:5f:f1:eb:b6:85:0e:d9:56:80:c7:8d:3f:
                    25:bc:28:28:29:26:f2:3f:c4:b2:a0:67:cd:aa:b2:
                    6c:57:d8:aa:b7:83:e5:a7:fb:5f:6b:9b:51:70:cd:
                    21:9e:21:ee:19:d7:a2:15:40:f0:21:26:48:70:ac:
                    82:02:a4:c5:da:34:b3:52:a0:c7:20:c4:da:e0:ae:
                    fe:29:f7:33:d3:13:df:69:c4:71:4e:f8:ac:32:64:
                    e2:4b:51:f3:74:02:f8:a4:a9:9e:c7:db:46:33:c5:
                    bf:38:8b:b3:9e:68:99:e8:4b:fd:64:fe:5f:2e:30:
                    92:41:6c:7e:41:16:c5:22:2b:14:d0:ee:93:80:98:
                    01:3b:16:76:20:4c:24:6d:88:fa:63:2b:05:e0:cb:
                    a7:4a:fe:c4:af:12:fd:3f:60:28:61:ab:84:c0:a9:
                    11:5a:50:ae:91:7d:67:ca:8b:35:2d:9b:d1:26:5d:
                    2b:07:5e:48:42:67:a0:48:70:4a:14:7c:b2:c5:ce:
                    46:a2:ab:46:33:73:ee:35:b9:c2:95:32:0d:3f:0b:
                    4f:7f:a6:9b:f2:73:18:ad:ec:44:19:64:a8:b7:36:
                    30:5e:5e:08:be:13:39:71:2e:b8:3c:31:2e:2b:26:
                    ad:fa:64:79:af:89:9c:67:8d:ca:d7:31:0c:16:5a:
                    92:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:62:7D:4B:20:B7:39:47:1F:D8:DD:78:E5:65:8B:42:17:E9:CB:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a7785d23-0643-42ef-99ec-aa21d952864b/b6b87da6-36e3-3a19-b148-fab60f97616d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a7785d23-0643-42ef-99ec-aa21d952864b/a7785d23-0643-42ef-99ec-aa21d952864b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:25:8E:97:29:DC:38:D6:F2:CF:D3:34:6F:10:0D:39:AD:1E:AF:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a7785d23-0643-42ef-99ec-aa21d952864b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.157.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:f6:f6:41:84:68:cf:23:4b:0a:f8:42:00:f7:10:ee:39:1a:
         6c:39:39:60:c4:13:85:2a:57:31:ed:e5:45:07:83:74:3e:38:
         e6:37:05:18:4b:ef:c4:8d:76:87:7a:4b:e6:e0:ef:43:71:bf:
         ce:a6:d5:2f:90:fb:df:55:c9:eb:87:ed:48:ee:72:40:9b:2d:
         01:43:24:8e:3c:7e:5c:f3:3e:e3:fc:16:f3:45:e1:de:a7:1c:
         50:bd:25:f1:44:01:ca:d7:a4:ff:9f:f1:09:c9:16:0e:3b:49:
         a3:f5:62:f5:d3:1b:1a:bd:36:c1:f7:2e:2d:05:3d:97:4b:a1:
         18:ea:05:5f:fa:da:33:00:d8:93:24:a1:41:15:ad:e5:27:ea:
         c7:cb:9d:cb:cb:57:61:74:9f:05:e4:4a:ef:db:ee:7d:ac:b1:
         0e:e6:ac:d9:80:3a:67:0d:df:3d:87:a9:3b:94:17:f8:6d:a8:
         23:d9:77:aa:7e:a3:64:64:d5:e1:24:cd:02:5c:3c:a4:db:b5:
         4d:56:db:b5:dc:4e:ad:21:d4:b4:a2:3b:39:da:12:8d:88:1d:
         24:0a:48:6a:7c:cb:61:f8:39:f2:3c:4c:18:d2:05:cf:55:a6:
         c7:77:16:6c:ab:6d:8a:b6:4f:bd:03:81:0f:86:89:06:42:07:
         a1:b0:ee:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:58:55 2026 by rpki-client