Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/450d3d9a-4a43-3196-a1a2-f1e06f7da447.roa
File:                     450d3d9a-4a43-3196-a1a2-f1e06f7da447.roa (raw, json)
Hash identifier:          rD0FphMPpTehFlXaPw0RxZzGSAcGF696e82rdDbXnmc=
Subject key identifier:   3E:66:D2:97:C9:08:25:2C:B4:91:73:36:E5:C0:11:10:2C:E6:F0:EC
Certificate issuer:       /CN=2ca6b6f9-a056-471c-bf96-f2fd5330dac4
Certificate serial:       010D0C9F4328584DEDE0A0EC2D18D506E6E52C40
Authority key identifier: D0:68:F6:DA:CB:76:BB:9A:34:F3:3B:2F:84:8B:CE:0D:2E:49:94:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/450d3d9a-4a43-3196-a1a2-f1e06f7da447.roa
Signing time:             Sat 23 May 2026 13:00:31 +0000
ROA not before:           Sat 23 May 2026 13:00:31 +0000
ROA not after:            Fri 21 Aug 2026 13:00:31 +0000
asID:                     13347
IP address blocks:        167.253.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ed:e0:a0:ec:2d:18:d5:06:e6:e5:2c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ca6b6f9-a056-471c-bf96-f2fd5330dac4
        Validity
            Not Before: May 23 13:00:31 2026 GMT
            Not After : Aug 21 13:00:31 2026 GMT
        Subject: CN=b9b0d11a-d964-4698-89cc-10a779386f81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f3:68:c3:7d:35:67:c3:b0:13:fd:c6:f0:3a:
                    2c:17:9b:ae:41:20:d4:6f:c5:e9:38:5a:04:33:fb:
                    58:c1:2b:51:be:d6:5e:3c:ec:00:48:cc:76:1a:bd:
                    90:bb:ff:89:f5:b8:a2:ba:45:a3:ec:84:7d:81:aa:
                    29:e9:a9:9a:ce:5a:4a:e0:93:ee:1f:48:3d:96:e2:
                    74:29:2b:ec:af:aa:88:78:8d:93:d7:da:68:48:20:
                    af:1c:3e:77:ee:a3:5e:84:0d:75:df:95:99:c1:0b:
                    54:db:94:aa:a6:8c:b1:ac:75:c8:ee:ac:ee:2e:06:
                    60:be:82:7d:7f:a7:26:32:c0:08:97:9a:36:f7:13:
                    cd:bb:2f:e2:2b:97:b8:e5:44:6b:ea:ab:72:58:53:
                    0d:7d:54:a8:49:c2:34:92:26:f6:92:29:be:49:9f:
                    09:75:5b:5c:87:0e:15:09:2d:a2:df:ed:3c:b8:f7:
                    98:a9:a9:0e:03:8f:fd:7e:d7:d4:cb:28:b6:e0:78:
                    07:77:65:49:9b:00:a1:e0:44:56:96:06:c1:a3:01:
                    e9:92:a1:c1:cc:e0:33:ea:cc:e9:e2:e9:2d:db:30:
                    06:68:cf:e2:63:80:93:7d:30:4d:23:e4:b8:e5:8b:
                    d6:f0:a2:8d:f0:bb:fe:e3:c9:7b:62:3a:00:d6:53:
                    ae:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:66:D2:97:C9:08:25:2C:B4:91:73:36:E5:C0:11:10:2C:E6:F0:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/450d3d9a-4a43-3196-a1a2-f1e06f7da447.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.crl

            X509v3 Authority Key Identifier:
                keyid:D0:68:F6:DA:CB:76:BB:9A:34:F3:3B:2F:84:8B:CE:0D:2E:49:94:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:00:54:ee:3b:d4:40:05:c9:68:f6:39:ab:8d:c4:81:99:d7:
         b8:b1:20:a3:79:1d:49:27:bd:28:ad:60:a9:1f:61:fe:87:3b:
         d9:bb:fc:91:83:0c:fe:bb:81:b9:2a:6a:ca:aa:51:aa:0c:6d:
         55:3e:9e:85:c8:55:92:ac:a4:40:3c:3e:9d:6b:9d:20:2a:4c:
         1f:5a:f8:af:13:85:03:3b:55:eb:9b:c1:91:31:dd:47:69:cc:
         fa:03:ad:12:b1:b1:31:7e:4b:b6:4c:f2:e9:24:3c:31:2f:0b:
         64:b4:c2:fa:ee:22:1c:60:90:cc:db:10:0d:cc:2b:38:bd:bb:
         c3:01:25:94:bc:3f:81:42:b5:ff:50:2c:87:51:ee:89:a7:61:
         8a:38:33:69:41:98:c6:f6:8f:c1:08:f2:dd:78:3e:63:76:75:
         e1:24:8a:95:c4:d1:79:7a:c5:15:ce:2a:f5:4a:ac:ba:b1:9e:
         86:cd:75:fc:6d:63:ef:fb:b4:aa:70:18:1f:de:a5:8c:8a:a8:
         58:57:50:65:94:37:8f:d1:43:f7:c8:67:10:a7:de:af:07:3f:
         bf:03:ba:53:65:2c:4b:4c:a6:4f:ff:02:85:78:06:af:c5:79:
         3d:d7:f4:e2:a6:0f:57:f1:a9:5f:3c:f4:89:79:87:de:98:ef:
         21:72:1e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 14:00:51 2026 by rpki-client