Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea/7c3f204c-820f-3e83-9bbc-5a98565dfa12.roa
File:                     7c3f204c-820f-3e83-9bbc-5a98565dfa12.roa (raw, json)
Hash identifier:          UTYb0nownqzR1cyylSkzKfnglYONn8Uf/sh+aILV+ZI=
Subject key identifier:   32:9D:F5:0E:81:35:8F:8F:81:26:2C:61:6F:CA:5B:F7:18:71:C7:FB
Certificate issuer:       /CN=b493bda5-0caa-4a42-8d7a-d94d27b079ea
Certificate serial:       010D0C9F4328584D143D4509522612D340FCEE40
Authority key identifier: 41:03:7A:0E:B7:0C:51:C0:85:17:D3:8C:50:A7:12:96:E7:39:58:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea/7c3f204c-820f-3e83-9bbc-5a98565dfa12.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     14618
IP address blocks:        162.252.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea/b493bda5-0caa-4a42-8d7a-d94d27b079ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea/b493bda5-0caa-4a42-8d7a-d94d27b079ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:45:09:52:26:12:d3:40:fc:ee:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b493bda5-0caa-4a42-8d7a-d94d27b079ea
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=163f1555-6031-47dc-8e27-2ec1d62e6bc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c6:b0:a4:f7:cf:5d:5a:90:6c:03:ea:8f:f0:
                    6b:fa:c8:00:55:54:76:7d:e9:11:15:82:b9:2e:cf:
                    c3:5c:40:7c:d9:ed:ef:92:bf:13:3c:ae:08:a8:d5:
                    e1:46:f6:fe:18:54:9b:28:01:5d:82:df:5d:54:70:
                    17:e8:78:21:37:a1:81:03:07:17:a4:86:c9:f4:3a:
                    28:d8:db:f1:30:1d:1f:a0:a6:96:90:14:66:ba:3c:
                    da:04:e0:2b:2b:d4:1f:4f:c5:f9:e5:8a:82:28:5e:
                    9d:a5:5f:da:00:2f:9a:2b:e1:b9:78:37:07:d5:d8:
                    3f:e5:43:25:e5:09:c8:8d:97:1c:e8:30:08:e3:60:
                    b0:8a:ee:0e:51:08:8d:62:5d:fa:55:92:b8:39:ba:
                    dc:df:e0:2e:28:23:f6:cb:77:42:1e:e0:e3:d3:a7:
                    84:0c:67:48:ae:ae:c7:f7:0c:ed:68:5c:28:ad:9d:
                    d2:5e:c9:39:90:db:ff:b7:48:71:1c:6a:b5:17:dc:
                    aa:e0:1f:43:c4:93:80:e0:5c:6e:cd:89:97:49:5d:
                    99:9f:99:a2:a2:f4:65:f9:a8:53:38:d0:d1:7d:8f:
                    40:d3:5e:56:9a:ac:af:b6:b8:cd:06:c9:1d:ba:d5:
                    2f:23:b7:3b:4c:8a:d2:da:b8:ba:e4:3b:77:fe:6f:
                    79:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:9D:F5:0E:81:35:8F:8F:81:26:2C:61:6F:CA:5B:F7:18:71:C7:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea/7c3f204c-820f-3e83-9bbc-5a98565dfa12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea/b493bda5-0caa-4a42-8d7a-d94d27b079ea.crl

            X509v3 Authority Key Identifier:
                keyid:41:03:7A:0E:B7:0C:51:C0:85:17:D3:8C:50:A7:12:96:E7:39:58:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.252.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:7a:8f:cc:3d:87:ae:a6:74:ae:00:50:45:f7:79:d1:a7:ba:
         5d:82:9b:86:12:8e:8d:24:a4:82:cc:f7:8c:a8:fe:54:29:eb:
         28:07:73:de:7c:e0:ca:f1:ca:20:5e:37:d5:ca:a8:a8:4a:12:
         f1:22:a7:61:17:f1:2e:a8:fc:a6:cd:87:a1:d3:91:b7:db:d7:
         fd:40:39:04:f5:c9:91:76:ec:fd:e1:7b:36:3d:13:37:76:93:
         2b:da:64:6f:77:97:60:ee:5a:7e:66:8e:db:91:df:56:03:a5:
         b8:37:51:40:ca:32:79:87:83:43:7a:c5:36:30:e2:a9:7a:f5:
         e0:9f:a2:da:c6:cd:b6:dc:e5:3a:e1:0a:ba:c0:16:f1:64:b1:
         cf:c5:0a:eb:0e:23:ac:17:2c:2c:8f:38:76:9d:ad:96:5b:aa:
         88:d5:ea:6d:15:42:e4:63:51:d8:ca:2b:0b:2e:26:a5:29:8f:
         af:cf:50:da:f1:2a:09:aa:2f:69:2a:60:f0:2a:7c:bb:09:3e:
         c1:a8:97:df:7b:40:e1:2f:d1:2a:b6:e8:f9:26:47:f6:01:52:
         9f:2b:ac:f4:33:8c:92:be:e8:7b:43:59:08:bc:04:d3:2c:4e:
         16:d9:9e:c5:a0:96:c2:4d:b0:88:80:43:b6:71:2f:cd:d5:cc:
         ee:ba:61:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:31:55 2026 by rpki-client