Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/1c34de81-a92a-31ca-993f-2c9182338067.roa
File:                     1c34de81-a92a-31ca-993f-2c9182338067.roa (raw, json)
Hash identifier:          PYWWeuxHUN3C0ZqQKJifJmQgezUBYU+Z69sHRy+KTBQ=
Subject key identifier:   37:75:93:38:F4:09:A1:D1:2A:C7:65:E7:DA:2B:09:0F:D3:F1:2C:6F
Certificate issuer:       /CN=961facb0-d9c9-4d9b-8bfa-17d54168d407
Certificate serial:       010D0C9F4328584E070099A19CB3DFEDCD984568
Authority key identifier: 01:B0:05:9D:78:D4:42:79:95:AB:1F:7A:A9:BA:83:A6:7A:A6:C2:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/1c34de81-a92a-31ca-993f-2c9182338067.roa
Signing time:             Mon 01 Jun 2026 13:00:10 +0000
ROA not before:           Mon 01 Jun 2026 13:00:10 +0000
ROA not after:            Sun 30 Aug 2026 13:00:10 +0000
asID:                     8075
IP address blocks:        162.254.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/961facb0-d9c9-4d9b-8bfa-17d54168d407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/961facb0-d9c9-4d9b-8bfa-17d54168d407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:00:99:a1:9c:b3:df:ed:cd:98:45:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961facb0-d9c9-4d9b-8bfa-17d54168d407
        Validity
            Not Before: Jun  1 13:00:10 2026 GMT
            Not After : Aug 30 13:00:10 2026 GMT
        Subject: CN=7712d28b-436d-4ada-92b6-1647a9dde85d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2d:96:fd:ec:7c:70:e5:89:e0:96:80:78:43:
                    16:66:02:0b:d7:a9:80:9a:7e:2d:93:da:cf:36:b9:
                    03:09:e0:16:51:43:82:9b:71:9b:37:0f:57:2b:ed:
                    a9:b5:6c:7f:87:c1:8d:fe:17:81:d3:30:88:b4:82:
                    26:91:06:aa:00:c9:b7:f4:21:44:5a:10:8c:91:56:
                    18:0e:f6:f8:a9:88:a8:0c:2e:d2:84:a1:76:02:75:
                    cb:53:39:32:0e:23:3b:d4:e2:1d:0a:54:e9:d2:97:
                    bd:0b:e3:e9:79:c8:a1:1f:6e:53:ac:7f:ef:bb:c4:
                    e0:24:9c:62:09:71:6b:31:b8:64:3e:27:41:40:51:
                    5e:e4:d2:01:0c:56:d1:59:15:31:d5:8f:be:0c:51:
                    9e:33:db:a1:f4:47:e9:04:44:16:53:73:5b:34:d5:
                    3d:5c:9e:03:03:df:5c:e9:46:56:2c:1e:dd:c6:e2:
                    9f:a0:46:d4:ce:53:96:dd:dc:61:6b:6e:d5:88:3d:
                    43:ad:5b:c7:02:58:f0:e6:99:d0:ae:04:c2:d2:50:
                    36:3d:06:6a:d3:f5:18:bf:8e:cc:7b:7d:b0:90:c7:
                    2b:85:6e:cc:ed:bd:4f:11:dd:48:a2:bb:20:61:47:
                    a5:fc:22:4f:2e:36:fc:9b:3f:a5:07:ac:49:60:c2:
                    08:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:75:93:38:F4:09:A1:D1:2A:C7:65:E7:DA:2B:09:0F:D3:F1:2C:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/1c34de81-a92a-31ca-993f-2c9182338067.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/961facb0-d9c9-4d9b-8bfa-17d54168d407.crl

            X509v3 Authority Key Identifier:
                keyid:01:B0:05:9D:78:D4:42:79:95:AB:1F:7A:A9:BA:83:A6:7A:A6:C2:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.254.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:bb:f6:99:0e:7a:64:28:e1:9e:bc:a9:ed:04:7b:51:0f:1f:
         bb:47:81:b4:1e:38:25:ca:b6:37:75:81:1a:6c:8a:63:68:db:
         71:7b:e4:fa:88:25:7a:58:8b:e0:f9:97:1b:8a:88:aa:25:89:
         75:0c:cb:3a:e7:33:27:ce:1a:8d:ed:63:a8:5f:28:4a:89:0c:
         2b:6e:63:65:31:50:b9:c4:93:91:d6:78:6e:61:91:ce:99:46:
         8c:67:ac:03:de:32:0c:83:5e:e6:d2:f6:3c:46:9d:61:c0:45:
         40:29:b9:97:7f:b4:45:68:3f:4a:22:57:40:c3:25:60:d2:9e:
         13:67:0e:b4:8b:c0:d6:10:8e:f3:6f:cc:b4:f3:2c:6a:91:81:
         dc:50:00:0e:66:23:b3:7d:3e:c9:5c:72:af:75:a4:c7:fd:51:
         56:4a:0b:dd:24:87:77:20:14:4b:33:35:7c:43:b8:04:1f:0a:
         44:83:d5:26:9b:6c:e2:7b:68:5f:e7:f5:ae:95:91:fa:e6:2f:
         9b:58:58:d5:51:61:f9:95:ba:2f:25:4c:58:b6:f9:91:53:03:
         58:3b:64:1d:62:ec:1f:52:57:9e:51:80:ca:36:be:22:cf:3b:
         db:2d:93:c8:68:08:62:6d:b9:0c:d0:3a:5b:54:b1:92:5d:38:
         ec:f0:86:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 19:46:23 2026 by rpki-client