Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/8465acbb-141f-32cb-bf36-567b501bdefb.roa
File:                     8465acbb-141f-32cb-bf36-567b501bdefb.roa (raw, json)
Hash identifier:          F4H/1FuS9tdxAt9Eo9+deCBvrJ5K+5L5oyKazH35t2Y=
Subject key identifier:   32:E3:7F:AD:13:74:26:35:1D:1C:81:AE:21:4B:CD:AB:DD:1A:73:38
Certificate issuer:       /CN=3daec053-17f8-47be-a17c-d2007ce5700c
Certificate serial:       010D0C9F4328584E37647CDEA1AB290AACD4FDC0
Authority key identifier: EB:1F:65:DD:61:C2:51:D6:C2:94:08:68:B9:B3:43:A9:85:37:B7:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/8465acbb-141f-32cb-bf36-567b501bdefb.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     2386
IP address blocks:        167.253.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:7c:de:a1:ab:29:0a:ac:d4:fd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3daec053-17f8-47be-a17c-d2007ce5700c
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=817a59fa-0829-4306-865d-943bf1f74fe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:41:52:28:05:b4:d7:7d:d0:7a:46:c7:96:0d:
                    80:be:37:86:7f:b2:e9:4b:10:45:84:94:65:c3:6a:
                    b4:0e:cf:43:55:18:2f:c5:c5:47:21:1f:25:51:ed:
                    ca:81:4a:8f:e9:e4:ff:76:c1:87:31:16:c7:74:62:
                    f0:02:21:e2:45:b1:0f:23:7c:85:b5:92:1a:0c:92:
                    18:08:f6:13:6d:bc:ac:4e:2c:28:e3:ee:b8:38:ae:
                    69:4d:fc:e8:90:51:7a:12:5e:26:71:45:0a:e1:96:
                    89:a0:2c:af:84:ac:1f:46:09:61:39:17:89:03:00:
                    f6:5c:71:30:0f:92:e1:7b:f5:45:5f:bc:e6:b7:21:
                    e1:a0:f7:9b:46:6b:cc:45:bf:8b:59:7f:45:38:f9:
                    54:de:81:30:ba:74:60:a6:78:d8:07:5c:af:cd:dd:
                    ab:a0:4e:bb:61:06:9e:bf:c9:cd:53:79:4e:d5:05:
                    ec:e7:42:b9:ef:c1:c6:d0:ce:94:88:95:a6:aa:08:
                    b1:29:0e:f1:8b:3a:b7:66:a0:c3:30:80:3d:9e:06:
                    65:0b:98:ff:f4:25:18:0e:a8:5d:8b:83:7e:a2:82:
                    48:a3:12:c1:8c:48:d9:38:7a:4c:f6:a8:98:48:be:
                    3b:10:0a:cc:d9:8a:ae:6e:9d:3b:69:e5:36:2c:07:
                    b3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E3:7F:AD:13:74:26:35:1D:1C:81:AE:21:4B:CD:AB:DD:1A:73:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/8465acbb-141f-32cb-bf36-567b501bdefb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.crl

            X509v3 Authority Key Identifier:
                keyid:EB:1F:65:DD:61:C2:51:D6:C2:94:08:68:B9:B3:43:A9:85:37:B7:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:8c:be:fc:58:f1:88:a0:ae:7e:70:6e:12:1d:0a:f2:35:a5:
         b1:b8:7f:aa:0f:4f:c7:db:15:2d:5d:38:ca:40:fd:e9:71:46:
         97:90:6a:82:c3:7b:0c:78:1b:eb:28:42:6d:10:0e:d7:74:10:
         1d:0f:67:92:92:41:fa:93:59:01:ca:49:a4:16:58:83:e1:1c:
         ba:20:97:86:de:2c:79:c9:67:02:61:67:c6:1c:da:ce:44:3c:
         af:64:43:d6:62:31:dc:7d:7c:27:09:55:1a:87:bb:ca:45:b0:
         56:de:9b:21:81:ff:38:49:9b:0d:d5:d7:c4:ab:d6:6a:5f:1f:
         05:2b:7f:8f:07:61:e7:0b:58:47:0d:1f:92:5f:47:0c:7d:9e:
         90:c2:4c:58:d3:12:d0:b1:91:38:f6:9b:3d:b3:63:a1:af:ef:
         3a:7d:e7:d1:c1:8b:48:98:f5:39:4f:b1:ab:c8:f2:f3:a4:aa:
         b2:18:02:0f:e7:5b:ea:46:ca:6e:06:f4:ad:06:ea:91:13:f7:
         42:fd:a7:d2:e8:a6:95:3e:2b:2c:fa:23:fc:31:c0:27:8b:d4:
         83:88:23:c2:08:22:2d:26:e2:b9:54:45:66:c4:9e:6a:1b:84:
         ff:2e:45:dc:36:ca:24:c4:bd:99:00:d6:9f:32:99:0b:b7:23:
         ef:57:1a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:24:38 2026 by rpki-client