Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/2f3461bb-e154-32a3-a1c9-fc9d4ca9656a.roa
File:                     2f3461bb-e154-32a3-a1c9-fc9d4ca9656a.roa (raw, json)
Hash identifier:          Hl9b9mdv3om3b5b2VU9Qz4pka9kIYNSuq75WLqALKzw=
Subject key identifier:   41:D5:AE:13:63:12:24:63:FE:25:3E:05:27:57:3D:3E:F8:E3:AC:16
Certificate issuer:       /CN=69233f52-8a17-4eb0-ae6a-62c861686718
Certificate serial:       010D0C9F4328584F0C077CDC6DCA189460A2E3C0
Authority key identifier: 79:00:BA:75:0D:A9:7C:C7:52:2F:26:3F:AB:EF:F3:8E:F3:84:81:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/2f3461bb-e154-32a3-a1c9-fc9d4ca9656a.roa
Signing time:             Thu 03 Sep 2026 01:00:12 +0000
ROA not before:           Thu 03 Sep 2026 01:00:12 +0000
ROA not after:            Wed 02 Dec 2026 02:00:12 +0000
asID:                     402236
IP address blocks:        167.253.22.0/24 maxlen: 24
                          167.253.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/69233f52-8a17-4eb0-ae6a-62c861686718.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/69233f52-8a17-4eb0-ae6a-62c861686718.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0c:07:7c:dc:6d:ca:18:94:60:a2:e3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69233f52-8a17-4eb0-ae6a-62c861686718
        Validity
            Not Before: Sep  3 01:00:12 2026 GMT
            Not After : Dec  2 02:00:12 2026 GMT
        Subject: CN=ff9b7912-f796-4669-bfc5-679222983d87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:88:d6:3b:f4:c0:59:5e:a5:ea:41:de:cc:e4:
                    ec:1c:0e:92:c0:11:86:87:32:20:76:72:dd:e1:ba:
                    42:2c:00:b0:3e:e8:bd:ea:c5:34:6f:0b:dc:4a:84:
                    41:6f:4c:9f:04:a3:59:17:fe:dc:95:96:6b:c2:52:
                    e7:97:b2:6a:c9:9c:cd:ff:a7:22:6e:96:24:5a:87:
                    da:c4:ec:41:45:62:63:10:31:9d:5a:35:e5:c7:59:
                    70:30:3c:c1:03:34:9f:f4:48:9d:26:a8:47:e2:28:
                    78:3d:12:d7:95:82:9e:ca:bc:b8:18:a2:c7:f2:66:
                    b3:50:09:31:bf:ea:40:11:19:8b:0f:28:b3:86:c4:
                    1e:fb:63:e6:c6:92:cf:91:7b:96:29:57:d7:48:c8:
                    ed:08:3c:77:eb:eb:de:d6:a3:3e:1e:26:dc:74:f5:
                    e3:97:7b:d4:54:29:1c:27:df:3e:d1:44:f2:fa:98:
                    75:98:53:a2:e0:cb:c1:06:90:77:4f:9a:fd:90:03:
                    1b:f9:2b:3f:8c:63:a6:df:67:c7:99:8a:8a:70:08:
                    f4:01:5f:e5:5a:8f:dd:bc:e0:06:b3:f8:ef:10:b3:
                    f8:00:52:83:3b:99:44:ea:df:ef:ef:fb:34:47:a2:
                    cc:74:c1:c2:d1:96:a8:9b:49:48:1e:1d:ec:f8:95:
                    f0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D5:AE:13:63:12:24:63:FE:25:3E:05:27:57:3D:3E:F8:E3:AC:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/2f3461bb-e154-32a3-a1c9-fc9d4ca9656a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/69233f52-8a17-4eb0-ae6a-62c861686718.crl

            X509v3 Authority Key Identifier:
                keyid:79:00:BA:75:0D:A9:7C:C7:52:2F:26:3F:AB:EF:F3:8E:F3:84:81:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:b9:9f:95:32:0b:99:96:41:e7:8c:68:c7:d4:20:73:9d:99:
         c2:76:ea:ca:bb:e2:2c:70:43:b5:eb:d7:7a:ba:c0:41:4d:af:
         50:aa:34:fb:b6:3a:e2:2a:d8:92:87:78:40:75:4a:ec:ab:ba:
         32:02:ef:c9:36:1a:c6:d5:cd:42:37:1a:97:f2:c4:fc:6d:d3:
         9d:5d:a8:85:82:e3:53:76:c8:97:51:d8:13:22:5a:1c:c8:67:
         39:2f:e3:a5:80:76:83:8a:2d:80:50:11:d4:00:c2:3a:ab:9c:
         a8:94:cd:91:ab:28:9d:ed:ee:c3:43:35:96:87:e2:42:34:f6:
         8a:ff:04:60:3b:c1:93:a1:ec:7d:e8:ff:b7:20:1e:50:ef:35:
         17:d7:c4:4b:4e:e2:d8:c8:e6:5e:14:d7:43:ef:ab:e7:15:4c:
         c9:af:e7:b9:04:58:f2:db:49:0d:39:c1:68:09:59:04:8f:3d:
         59:4f:60:d9:31:98:e1:bd:8f:6c:d7:cd:e5:19:9d:92:2d:ef:
         a1:06:b1:f2:56:24:b4:f7:2d:5a:2f:1d:c8:6a:02:20:8a:2c:
         57:fa:e3:0f:68:58:6b:5e:63:a6:d1:d0:4a:5f:92:2e:c9:b6:
         cd:69:57:79:45:5f:1f:1d:59:8d:a2:e3:1a:d8:1c:93:95:08:
         ed:30:3a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:57:52 2026 by rpki-client