Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/d71bbd3c-8123-325c-9ffa-0f41d20134e6.roa
File:                     d71bbd3c-8123-325c-9ffa-0f41d20134e6.roa (raw, json)
Hash identifier:          AHdiF8lX4PARQ68cIEFYupxINSGKBffoklXpmP1a6F8=
Subject key identifier:   05:7E:85:9E:9F:FE:7A:95:77:9B:03:B6:C5:7F:B2:A2:87:93:55:E2
Certificate issuer:       /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial:       010D0C9F4328584ED861EA2588E260938F5B4CB0
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/d71bbd3c-8123-325c-9ffa-0f41d20134e6.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     8560
IP address blocks:        162.255.84.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:61:ea:25:88:e2:60:93:8f:5b:4c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=49099fcb-a388-4f87-bcf1-17df9a30a68b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f5:66:50:88:5b:a6:61:65:7b:0a:e5:f3:2b:
                    59:d7:77:b5:27:65:b3:58:e9:6a:d9:40:cc:d2:5b:
                    1d:32:a2:20:ba:23:98:e4:a6:b9:80:a8:51:d5:b0:
                    5a:a8:c5:67:0f:3c:27:6d:54:4f:ee:25:5e:85:8e:
                    7a:6e:f8:3e:1b:a8:cc:ec:65:8a:9d:f7:6b:2f:70:
                    01:c4:28:17:b9:da:db:2d:68:ad:fd:b7:1f:72:e9:
                    c2:b5:e2:b9:b9:67:be:99:66:9c:af:53:08:dc:c3:
                    b7:8e:f1:ef:8a:7b:b9:01:57:3f:eb:4d:95:ac:05:
                    ac:eb:57:36:2b:dd:67:85:11:0a:ca:1e:64:34:1e:
                    35:27:50:93:87:8a:ea:7a:14:5b:82:0e:9d:6b:5f:
                    79:d2:90:4a:66:44:b9:5e:7c:02:cc:c1:be:74:2d:
                    05:a8:e5:7d:13:be:a0:19:ce:6b:c8:57:6a:d2:6c:
                    7f:60:d9:4f:5b:00:ff:29:c8:02:cf:cb:7f:cc:92:
                    3c:08:16:2a:43:cf:a5:03:e6:18:5f:5b:3d:07:a9:
                    64:e6:2c:c5:7f:49:d5:b2:95:12:ee:d1:79:06:b4:
                    97:c2:d8:81:86:2b:83:a2:4f:6e:f2:b9:02:f8:49:
                    eb:94:dc:e9:87:de:96:c3:40:07:46:e8:7b:42:6a:
                    37:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:7E:85:9E:9F:FE:7A:95:77:9B:03:B6:C5:7F:B2:A2:87:93:55:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/d71bbd3c-8123-325c-9ffa-0f41d20134e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl

            X509v3 Authority Key Identifier:
                keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.255.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:13:ff:33:0b:ac:75:b3:47:c0:73:d4:3b:6d:dd:c8:03:e7:
         47:b4:d5:b5:30:6b:56:1a:dd:11:8e:42:71:e3:d6:7a:93:bd:
         43:1e:ed:84:c2:5b:ea:b3:0d:9a:38:d7:5f:fa:37:c8:d1:47:
         f9:4d:ae:fe:9e:b1:e7:69:45:da:f8:ea:06:ac:43:69:aa:9b:
         d1:48:6b:40:12:d0:1c:f8:a8:17:80:48:0a:5e:29:ae:14:f4:
         7d:78:27:ce:78:a3:46:11:51:50:d2:7f:e9:8c:6b:5e:0d:04:
         af:98:5c:b7:b8:ec:81:42:f9:c1:14:2f:d0:78:37:dd:39:bd:
         dc:b5:28:4c:72:88:f8:76:f4:d7:02:5d:9d:4e:74:33:1c:6b:
         9e:b4:07:16:c7:59:2d:16:36:9c:5f:87:7d:3f:a1:2e:b3:e4:
         28:12:63:e2:90:53:58:9c:b8:04:18:09:58:eb:83:e0:7a:fc:
         88:98:64:18:8a:3f:72:d4:65:cb:33:f2:4a:e9:59:74:42:dc:
         46:14:3c:67:b8:d1:97:46:df:62:32:55:5f:8b:94:a4:46:ce:
         1f:3e:63:8b:3d:70:41:5f:56:58:53:81:03:2c:90:3e:32:1b:
         32:59:18:4b:61:70:92:ae:3e:f1:16:cd:26:36:40:50:8f:96:
         28:e2:04:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:27:55 2026 by rpki-client