Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/2b832b6b-5816-3bfa-a0e8-1cb8dc1f9898.roa
File:                     2b832b6b-5816-3bfa-a0e8-1cb8dc1f9898.roa (raw, json)
Hash identifier:          YUxZXJvsMvzINo8XY+xgyRosue4E4CuWg3eBeCzES+4=
Subject key identifier:   E0:7D:55:29:33:59:CC:75:D6:BA:B5:FF:B2:D8:A4:23:2E:2B:A6:E0
Certificate issuer:       /CN=70212b19-99d4-4532-a7e0-a5bdbef20170
Certificate serial:       010D0C9F4328584E4AEF40F904E8F70804335D00
Authority key identifier: 10:3A:37:8A:5C:7E:F2:98:FB:74:3D:2C:6D:62:04:89:CA:64:A2:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/2b832b6b-5816-3bfa-a0e8-1cb8dc1f9898.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        168.100.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/70212b19-99d4-4532-a7e0-a5bdbef20170.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/70212b19-99d4-4532-a7e0-a5bdbef20170.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:40:f9:04:e8:f7:08:04:33:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70212b19-99d4-4532-a7e0-a5bdbef20170
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=7440a58f-1250-4631-bc62-a9a1ab9805d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:86:84:cd:fa:88:65:67:4c:97:cb:0d:f6:52:
                    6a:07:23:92:15:0c:f7:b4:90:c8:a2:d2:e1:5c:d7:
                    90:03:78:63:63:ca:bd:25:fa:b3:d4:f9:db:da:4a:
                    e2:32:66:d5:c5:8a:f2:00:af:11:bf:00:58:79:71:
                    28:a8:84:46:2d:4a:c5:fb:29:a8:c8:d3:15:6d:a9:
                    e0:11:f4:1a:a5:9c:3a:82:fd:28:d7:e2:5e:96:9d:
                    7e:b9:5f:2b:69:b9:aa:b1:20:a9:40:40:e4:64:a9:
                    7d:09:3b:b2:28:d6:64:c9:c3:c1:13:5b:c7:7d:00:
                    c1:9f:b3:de:c7:f3:f1:67:10:5e:16:3c:95:c0:71:
                    cc:8c:92:20:52:ca:cf:54:b0:8c:04:d4:76:d1:f1:
                    e8:53:b9:be:41:19:51:d0:08:89:17:08:f7:a1:5d:
                    86:bf:90:cf:08:67:91:2e:00:4d:ce:48:47:54:3d:
                    85:38:29:d6:70:0d:cf:ee:8b:a0:41:f5:64:07:cb:
                    08:f6:68:86:a9:ec:9a:59:ff:83:e0:9b:06:43:26:
                    03:8c:ca:d8:46:69:5b:5f:18:06:05:b8:2a:12:b3:
                    a7:44:9d:cc:06:1e:82:2e:ce:4d:59:c9:23:23:5a:
                    fe:46:a4:f8:cc:3f:5c:07:95:32:62:9c:5d:d9:38:
                    4d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:7D:55:29:33:59:CC:75:D6:BA:B5:FF:B2:D8:A4:23:2E:2B:A6:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/2b832b6b-5816-3bfa-a0e8-1cb8dc1f9898.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/70212b19-99d4-4532-a7e0-a5bdbef20170.crl

            X509v3 Authority Key Identifier:
                keyid:10:3A:37:8A:5C:7E:F2:98:FB:74:3D:2C:6D:62:04:89:CA:64:A2:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.100.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:5b:24:fd:b9:60:18:9f:b8:62:55:f3:06:0b:20:9b:0d:ac:
         2d:dc:be:d8:98:36:f8:a6:e7:53:56:a3:70:27:d1:b5:ee:b0:
         da:80:02:41:e3:82:76:c8:94:b4:25:48:58:ef:67:b5:67:3b:
         6b:6c:16:16:a4:a5:f5:c7:e1:55:d0:35:9d:60:2f:ca:81:7f:
         b6:ca:e7:00:83:be:ba:56:e4:29:44:34:0b:f5:ab:29:82:3b:
         61:dc:aa:3c:d7:de:59:c5:ef:e3:61:ea:0f:5d:76:b5:07:d6:
         9f:80:58:b8:ae:2e:3a:c5:61:1d:0b:c6:11:b5:9a:89:db:f5:
         4e:02:ff:e0:48:45:6e:c5:47:9c:28:d3:e6:5f:5e:c1:2a:45:
         0e:4d:26:a1:95:ca:3c:ba:52:d4:b2:0e:86:9a:48:3e:20:37:
         e6:a8:f7:1e:7f:f4:f3:7e:6a:b2:46:80:9d:23:52:51:11:51:
         b4:fd:c4:7d:dc:0b:62:70:9c:90:00:cc:b7:f2:ef:74:30:42:
         ac:f4:d5:33:9c:d6:aa:ed:dd:a1:e2:eb:ca:85:95:1d:91:79:
         20:64:60:24:e3:68:f5:36:37:2f:80:ca:19:a9:f1:d5:2d:b7:
         3d:01:88:6c:d8:91:fe:29:be:cd:e1:03:87:12:bb:b1:fd:0f:
         d0:cf:24:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:34:03 2026 by rpki-client