Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/d057ed2f-9fd1-3cf7-8b2f-92f9901c8924.roa
File:                     d057ed2f-9fd1-3cf7-8b2f-92f9901c8924.roa (raw, json)
Hash identifier:          85cmDaliVDKYJaAQRZun4KT7lzXgOnb5gQ7bUclXMcA=
Subject key identifier:   A4:C9:A9:B5:BC:C9:CD:4E:CC:D4:D2:4E:8D:00:2B:8A:C7:8E:C8:45
Certificate issuer:       /CN=0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9
Certificate serial:       010D0C9F4328584EEA874FE112CD41AA6C35FF80
Authority key identifier: 8F:F9:0F:06:64:B0:32:AE:06:2D:7A:C2:E3:4B:C1:8E:E4:79:4D:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/d057ed2f-9fd1-3cf7-8b2f-92f9901c8924.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     7127
IP address blocks:        163.236.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:4f:e1:12:cd:41:aa:6c:35:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=c9e62aae-2c1f-4c9d-ac38-dcb86288bc0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:13:07:46:6d:9d:ce:ce:3b:14:1e:0d:f4:83:
                    87:91:22:58:47:4e:f2:1a:50:8b:39:e0:dd:59:32:
                    47:8a:bf:61:f9:af:bb:f1:8c:b6:7e:49:96:83:95:
                    67:50:6b:22:64:a4:e3:b9:87:ce:e2:17:3b:54:5b:
                    b0:51:2b:ae:c1:12:7c:ee:6b:ac:0e:a4:9d:c4:33:
                    30:11:c3:10:09:60:a6:f7:7b:04:16:6e:f2:38:fe:
                    83:fb:ce:89:fb:a5:d1:de:b0:20:41:e9:0f:c8:0f:
                    5a:53:bc:a3:6b:d3:b8:fe:64:8d:47:2e:fd:e4:21:
                    88:31:4c:43:2b:15:10:84:43:dc:8a:41:3b:fb:b1:
                    ce:41:ad:76:27:d0:45:2f:0f:f1:ec:76:b7:75:77:
                    fe:db:f4:cb:ff:74:bb:c0:c9:34:b4:14:d8:fd:89:
                    f2:3c:0e:e8:50:7a:09:03:92:db:04:e2:ba:39:cb:
                    f0:d9:1f:22:45:93:c4:40:77:83:4e:60:2d:37:e2:
                    b8:52:ec:ce:ab:73:75:57:44:e3:73:a1:ad:fe:17:
                    4f:00:3a:03:37:a0:85:91:3a:c3:9e:e1:da:38:5f:
                    ed:a6:e1:93:bf:b2:c0:fe:2b:ec:31:85:db:23:96:
                    11:15:5a:78:02:d4:01:17:7c:ac:a3:fb:e4:92:85:
                    bb:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:C9:A9:B5:BC:C9:CD:4E:CC:D4:D2:4E:8D:00:2B:8A:C7:8E:C8:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/d057ed2f-9fd1-3cf7-8b2f-92f9901c8924.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.crl

            X509v3 Authority Key Identifier:
                keyid:8F:F9:0F:06:64:B0:32:AE:06:2D:7A:C2:E3:4B:C1:8E:E4:79:4D:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.236.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:5c:66:72:ab:61:1f:04:81:21:63:d4:87:f7:9f:f2:14:7d:
         b3:d9:b3:9d:17:57:cc:c6:49:3d:1d:80:e6:2f:2e:03:b2:a9:
         41:6c:07:a5:9d:e3:94:eb:b8:5a:9b:a4:37:e9:e2:fa:f3:ca:
         28:89:b6:0a:28:58:df:64:47:97:9b:d7:45:e2:0e:a3:d2:40:
         75:ef:5f:70:9b:10:69:f1:7c:79:0c:9f:c3:f9:39:d6:e4:46:
         7e:73:c2:cd:3d:f1:89:1b:5f:a4:14:f8:a0:d2:f8:24:41:10:
         56:63:90:31:18:8c:04:0c:37:77:b6:bd:3b:53:6f:5b:12:3a:
         c1:1f:c5:1f:77:af:a6:d3:4f:b3:9b:35:77:e3:e2:ec:56:2a:
         d8:b1:5e:df:af:e6:fc:03:e3:08:5f:88:e6:3d:b3:10:3c:01:
         02:ce:79:e0:c0:87:f9:a5:b1:e8:0e:b4:96:a6:cb:87:d5:76:
         40:51:11:4e:bc:89:40:26:ed:3f:cf:ea:26:f2:be:97:95:42:
         f0:06:be:cd:f3:f5:38:ae:5b:49:3f:88:e3:b3:b7:2f:81:02:
         c6:53:23:39:9e:30:d0:96:c4:03:ec:23:65:eb:0f:bd:a6:86:
         97:73:86:19:81:04:ab:08:c1:77:cc:a3:48:1a:44:f6:3e:71:
         87:ea:cc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:29:44 2026 by rpki-client