Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7b522ada-ca1a-3237-ae10-efe8dd6757ad.roa
File:                     7b522ada-ca1a-3237-ae10-efe8dd6757ad.roa (raw, json)
Hash identifier:          HQAkpPRd8Cba5Btstrm6DvrKhU2BrRo22F8qH0t5pI0=
Subject key identifier:   64:58:F5:F1:44:8A:3C:78:71:8C:04:42:32:2C:BD:D0:D4:49:37:3A
Certificate issuer:       /CN=7df054b7-0dbd-410a-8a6a-10af5728e84a
Certificate serial:       010D0C9F4328584DDA55D004CE4037B2EBB4B0C0
Authority key identifier: E8:FC:3B:C7:AF:20:45:D6:53:17:82:CE:52:46:98:80:E5:58:80:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7b522ada-ca1a-3237-ae10-efe8dd6757ad.roa
Signing time:             Sat 16 May 2026 13:00:31 +0000
ROA not before:           Sat 16 May 2026 13:00:31 +0000
ROA not after:            Fri 14 Aug 2026 13:00:31 +0000
asID:                     7018
IP address blocks:        167.253.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:da:55:d0:04:ce:40:37:b2:eb:b4:b0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7df054b7-0dbd-410a-8a6a-10af5728e84a
        Validity
            Not Before: May 16 13:00:31 2026 GMT
            Not After : Aug 14 13:00:31 2026 GMT
        Subject: CN=8f0d4691-bac1-4da8-8286-ac39faa97ccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:13:b3:43:bf:cb:64:41:38:a1:45:b4:ee:9b:
                    ce:fa:9b:de:38:c3:5e:24:cc:0b:b9:5e:79:66:97:
                    73:e4:cb:8e:5a:b3:00:64:33:3a:00:d0:ba:1c:43:
                    58:54:f1:af:31:11:2d:f7:85:99:ae:ed:40:67:3a:
                    f1:d7:f4:26:01:f5:fb:37:f2:2a:81:36:c2:30:a8:
                    f7:bc:37:e2:30:2a:5d:82:7e:95:c1:f6:10:bb:b3:
                    65:52:99:42:92:8c:07:aa:96:83:53:1f:7d:6f:72:
                    df:22:1e:ad:18:0c:e8:51:db:57:05:c8:86:34:d4:
                    a1:5a:ae:55:fa:4c:45:2c:37:40:a2:be:70:71:0c:
                    96:bc:74:b7:fd:f0:30:63:5c:d7:6a:72:4e:8e:19:
                    16:09:f8:ab:89:df:e3:5b:96:02:96:8f:3a:99:f0:
                    d5:3f:5e:06:9a:c2:9a:a2:4c:a8:1d:64:cb:2b:9d:
                    14:dc:9b:44:0e:0e:da:5e:ac:8d:5a:90:97:c6:19:
                    59:2c:f1:cb:fd:96:3f:24:bb:64:c3:43:4e:6f:c6:
                    bb:e7:7c:56:69:7a:7c:a5:f2:4c:ce:ea:86:5d:78:
                    49:d5:98:ee:8f:94:00:14:09:13:38:aa:59:a6:b5:
                    90:c4:d3:62:81:bf:1a:2f:8c:92:a2:6d:e1:c8:e6:
                    b5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:58:F5:F1:44:8A:3C:78:71:8C:04:42:32:2C:BD:D0:D4:49:37:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7b522ada-ca1a-3237-ae10-efe8dd6757ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.crl

            X509v3 Authority Key Identifier:
                keyid:E8:FC:3B:C7:AF:20:45:D6:53:17:82:CE:52:46:98:80:E5:58:80:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:73:12:99:c6:12:9f:b2:ba:0a:e4:34:5a:6d:fc:47:f4:6f:
         53:ef:94:4b:cb:96:16:13:62:ee:bf:cd:f4:9a:ab:f2:b7:cb:
         15:01:97:72:b2:4e:ce:bb:77:84:4f:61:14:eb:14:d6:22:0f:
         03:53:00:c8:5f:5b:41:3d:57:9a:b4:bb:be:9f:ca:c5:40:52:
         9a:d3:cc:d9:ba:df:c2:21:0b:f9:57:8f:55:17:7e:cb:fa:7b:
         93:df:31:8a:78:c8:b5:09:e8:f0:a4:3c:c8:ab:d9:04:9d:99:
         0a:1a:cd:28:7a:0c:27:95:ca:66:c1:8e:ca:40:d9:66:8a:e0:
         6a:1c:eb:ca:39:03:27:c6:84:f3:69:5f:5a:73:d3:c8:68:c4:
         c6:e2:a5:50:e9:1a:5e:27:3e:da:16:79:05:14:56:05:e0:a7:
         54:2a:b0:84:93:73:b1:a3:d6:38:27:2c:ec:dd:b6:8c:3a:38:
         19:94:74:c5:46:77:dc:5f:16:fb:cc:49:45:d7:99:87:43:2b:
         af:cd:98:97:c0:55:57:d5:b0:a5:ec:8b:dc:ac:c2:ec:a7:59:
         97:e5:98:b8:77:9d:33:5d:79:57:3f:83:e7:4d:c3:6a:76:9d:
         66:e7:12:43:f8:80:05:bc:cf:fc:b0:52:71:d3:c6:79:0d:6c:
         66:e5:09:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:26:18 2026 by rpki-client