Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8fd61c0d-07de-3677-961c-f5cd11ddd9e2.roa
File:                     8fd61c0d-07de-3677-961c-f5cd11ddd9e2.roa (raw, json)
Hash identifier:          kaldsHkNbW3vbRPoiUQe9sEgzLSozhUpP6coxR7YCb8=
Subject key identifier:   5C:17:07:25:61:32:B2:7C:D4:C7:20:64:DD:44:5B:5B:5D:10:CB:67
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E5084B7275A6FEE6A3EAAA600
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8fd61c0d-07de-3677-961c-f5cd11ddd9e2.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     812
IP address blocks:        96.126.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:b7:27:5a:6f:ee:6a:3e:aa:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=63eefd03-1f31-42c4-928b-b78c1ed7836f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:9a:0d:1e:09:e4:be:7c:dd:07:e8:fd:12:b1:
                    6b:2d:c8:59:31:e3:d5:f5:f8:93:36:78:9d:10:d5:
                    45:40:57:7a:41:30:b8:ba:3f:2f:12:d1:d4:ef:d4:
                    07:ff:6c:a4:08:68:6d:da:7a:90:52:54:7f:78:6c:
                    0b:1e:5d:55:96:55:13:fb:c6:c1:55:d9:47:a8:2a:
                    f2:ad:32:6e:7c:b1:5e:39:af:8e:d4:12:fb:85:e4:
                    ab:8e:74:22:90:a3:e0:37:67:34:22:c3:03:5e:ff:
                    42:c5:5e:a8:cb:62:75:2a:0a:96:09:ba:11:2a:33:
                    06:9b:f3:7f:27:9c:70:a0:c4:72:ea:87:15:f2:bc:
                    7a:70:7f:bc:cf:87:cf:27:30:23:14:29:b8:97:a5:
                    38:54:9c:d6:96:a4:82:6e:88:a1:94:1e:10:60:8b:
                    2c:5c:34:38:5d:7c:e9:6e:3a:22:e1:be:a5:09:c0:
                    01:db:99:07:36:1c:1a:79:6e:8c:ae:91:f1:7f:67:
                    25:26:6b:7c:0c:17:87:5e:d2:4a:f0:bc:b2:0a:90:
                    0e:14:42:00:b7:93:cb:5a:f8:e8:e8:52:cd:b8:c2:
                    2b:96:54:3f:2b:18:92:62:19:9b:44:04:9a:21:6e:
                    b0:8c:6b:e8:3d:10:e6:5f:96:77:fc:1c:89:aa:4e:
                    64:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:17:07:25:61:32:B2:7C:D4:C7:20:64:DD:44:5B:5B:5D:10:CB:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8fd61c0d-07de-3677-961c-f5cd11ddd9e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.126.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:b5:6b:29:f7:7f:6a:bf:69:dd:52:23:e8:e7:3e:f0:e1:41:
         ae:4a:e4:cf:43:f0:5c:91:d4:73:b3:c0:75:6d:34:3b:e2:b5:
         87:a2:9e:42:ac:16:2a:c3:c3:54:e7:9b:47:4b:41:4e:d8:a0:
         bd:42:9a:83:67:9c:4f:40:61:2c:c6:c6:ad:22:42:d0:cc:82:
         65:c5:93:47:9e:de:30:08:34:30:50:99:06:77:80:4d:07:a9:
         a5:26:53:7e:8d:1d:e8:d1:90:3a:66:82:40:55:2d:c4:bc:7c:
         86:16:62:82:cd:11:01:e8:02:81:b8:ab:08:59:0a:4c:24:af:
         5f:00:e0:a5:57:b5:48:a5:4a:c1:38:00:d1:cb:85:68:6d:96:
         43:35:52:2e:9d:f9:87:46:b1:90:2a:0c:5c:db:05:55:88:3a:
         c3:87:32:6c:a2:79:c6:5c:51:ec:4b:f5:a6:f4:b9:9a:70:83:
         58:cd:e3:17:5a:81:b4:d7:77:75:40:d9:f0:6f:4c:45:9d:21:
         d5:11:e8:6f:19:7a:55:ff:76:55:12:38:65:e2:f1:59:60:26:
         df:01:fd:cc:9f:1e:ae:23:5b:94:32:a8:75:dc:50:06:3a:00:
         55:23:40:35:37:7a:0a:e1:83:35:d6:68:7c:76:e6:6c:5f:76:
         5a:aa:cf:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 10:36:25 2026 by rpki-client