Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/d057ed2f-9fd1-3cf7-8b2f-92f9901c8924.roa
File:                     d057ed2f-9fd1-3cf7-8b2f-92f9901c8924.roa (raw, json)
Hash identifier:          4s9aBVxZwhhKiVSsv2Z8aZrC9/Ix1wQPV9svTIDYuiw=
Subject key identifier:   E7:BB:8E:9B:FE:F7:07:19:0E:89:36:B1:AB:21:5A:CE:57:6A:64:0B
Certificate issuer:       /CN=0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9
Certificate serial:       010D0C9F4328584D67DFBAD5F62223A663D39900
Authority key identifier: 8F:F9:0F:06:64:B0:32:AE:06:2D:7A:C2:E3:4B:C1:8E:E4:79:4D:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/d057ed2f-9fd1-3cf7-8b2f-92f9901c8924.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     7127
IP address blocks:        163.236.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:ba:d5:f6:22:23:a6:63:d3:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=a2dd7fc3-11e4-4c60-9bdc-9840266cceef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f7:07:14:5d:ca:c0:02:7a:99:13:4c:03:e2:
                    5f:c8:a6:47:ed:6d:f0:fb:98:dd:91:14:3e:89:ab:
                    54:0c:8f:f8:14:a9:7c:73:49:81:89:c6:d7:28:22:
                    45:f2:87:77:7a:39:3e:6c:2a:4f:41:bf:16:0b:e6:
                    60:8c:33:db:34:92:5c:b8:35:56:f6:a2:db:27:bd:
                    0f:d8:c2:43:ed:b7:c2:3a:e3:5b:c4:d4:3e:8d:0a:
                    93:41:f0:50:30:f1:db:31:a7:56:3a:e8:b6:f5:24:
                    c8:06:99:a1:06:c4:38:da:2c:0f:97:51:2c:34:88:
                    bd:8a:ae:1f:e7:e8:d1:97:90:c3:6a:98:be:88:b4:
                    47:0e:79:72:04:fc:8d:83:6b:9a:3f:33:0e:30:57:
                    5e:3f:ee:8e:b8:5c:19:79:5d:16:b2:25:e5:25:c1:
                    f2:97:5a:82:40:c1:62:fe:80:86:23:51:ba:cc:3f:
                    11:36:e3:0e:9a:9e:9d:84:a3:06:89:63:48:f3:cb:
                    53:0b:5f:16:2f:78:17:e2:14:ab:28:78:46:58:b9:
                    16:89:e6:36:e0:8c:23:94:83:6d:56:7f:1d:9f:82:
                    da:f7:af:40:47:d7:07:1d:9b:0b:a5:6d:66:09:f4:
                    5d:26:bd:53:6c:0f:ea:f8:43:25:34:2c:d7:af:69:
                    38:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:BB:8E:9B:FE:F7:07:19:0E:89:36:B1:AB:21:5A:CE:57:6A:64:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/d057ed2f-9fd1-3cf7-8b2f-92f9901c8924.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.crl

            X509v3 Authority Key Identifier:
                keyid:8F:F9:0F:06:64:B0:32:AE:06:2D:7A:C2:E3:4B:C1:8E:E4:79:4D:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.236.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:5f:96:fe:a1:77:3e:f1:c3:65:a4:4f:1b:49:6d:aa:cd:e1:
         05:69:69:2c:c7:ad:79:97:35:97:c1:b9:1e:50:de:88:a0:f1:
         4b:07:9a:bd:8f:c3:94:fa:32:ff:22:47:35:94:e4:10:9c:f4:
         a6:32:80:16:2a:6e:46:95:e3:15:df:62:35:37:e8:1f:15:e1:
         05:44:2e:dd:f7:e0:77:64:7b:83:3d:3b:43:f7:6e:4b:66:23:
         e8:67:d2:69:aa:f7:24:33:05:76:1f:b0:4e:b8:9c:cb:52:5e:
         c9:d2:e6:74:17:1d:4e:f6:e2:ce:7d:fe:02:12:48:86:e7:e0:
         6a:4f:28:f8:0b:cb:99:68:2d:3a:d6:a7:b0:bc:f9:5d:88:0d:
         af:6f:91:9b:0d:65:6e:05:ec:ea:4c:20:c8:9f:3d:de:d3:60:
         68:f0:01:46:d7:7c:dc:a0:ea:bc:5a:4b:ce:87:d2:e7:eb:e0:
         1a:2f:71:33:81:33:76:97:69:04:bb:c1:d6:88:c9:75:14:40:
         9a:e8:07:ea:8a:1a:fa:d0:9a:6c:ad:57:2e:85:ba:18:8e:b0:
         5f:2f:89:24:be:f2:08:93:cd:d5:03:5f:49:b5:9e:a4:d3:9f:
         79:21:22:f6:61:38:1d:f7:25:ec:6b:cc:50:2f:ea:cd:04:ab:
         14:78:bb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 02:28:31 2026 by rpki-client