Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/7489abd9-d972-3502-9bfe-8f60dd4caa20.roa
File:                     7489abd9-d972-3502-9bfe-8f60dd4caa20.roa (raw, json)
Hash identifier:          osc4eDPQcKKZNZdHCT6eNUttBqIoQxwpgWjGcIjem2c=
Subject key identifier:   38:56:32:1F:2C:99:B6:E6:6E:73:CC:2D:1B:37:C6:4F:7E:F1:75:8B
Certificate issuer:       /CN=aac421ae-305b-4a29-aacc-176ba3fca213
Certificate serial:       010D0C9F4328584E4559E09F32CBD103F87DA240
Authority key identifier: 5C:F8:52:57:6A:57:D7:76:93:A0:7F:F6:79:30:F4:25:5A:72:1E:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/7489abd9-d972-3502-9bfe-8f60dd4caa20.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        168.100.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/aac421ae-305b-4a29-aacc-176ba3fca213.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/aac421ae-305b-4a29-aacc-176ba3fca213.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:e0:9f:32:cb:d1:03:f8:7d:a2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac421ae-305b-4a29-aacc-176ba3fca213
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=4fef0e77-7496-48ce-bc4b-7a058565b3bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6b:0e:81:d6:e4:65:d3:bb:63:1b:b9:7e:d5:
                    f1:5b:86:67:cd:45:26:7d:ef:4f:c0:37:18:04:2d:
                    2a:54:9c:82:d2:c3:4a:24:e7:3e:1b:d7:9e:c5:0e:
                    a5:82:f0:26:e9:63:47:95:7c:33:4f:2a:1c:a4:fc:
                    14:b7:19:5c:68:08:72:0b:09:57:68:ff:e5:24:ce:
                    95:35:a6:5b:9c:f7:b0:97:14:cc:73:e8:2e:75:ee:
                    cd:5f:51:c7:8d:8b:61:9c:57:9a:ae:5b:ea:80:77:
                    41:f9:56:a6:16:3d:1c:73:69:34:9d:88:f0:ba:10:
                    26:2e:b8:22:76:83:39:81:91:4a:84:59:30:0d:b4:
                    cc:b7:7d:d8:b3:a1:6a:48:bf:89:3f:7c:47:a3:ff:
                    11:13:9a:a7:83:5b:d7:64:a8:1b:d7:44:cd:f0:3f:
                    49:c6:ae:51:f3:c5:16:61:33:57:d8:8e:dd:a7:95:
                    29:3e:13:08:46:b1:c1:75:d8:32:b5:c5:2b:0c:2d:
                    1d:4b:af:af:5b:5e:b9:d3:81:e8:52:ed:38:46:00:
                    f4:b1:7e:47:04:f1:1c:ef:b8:bf:90:27:51:fb:6b:
                    6c:87:ec:e1:7a:6e:d6:26:f8:8a:91:23:ea:ff:6e:
                    bb:78:40:f2:5c:8d:4e:06:56:63:0d:5b:5d:46:10:
                    0a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:56:32:1F:2C:99:B6:E6:6E:73:CC:2D:1B:37:C6:4F:7E:F1:75:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/7489abd9-d972-3502-9bfe-8f60dd4caa20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/aac421ae-305b-4a29-aacc-176ba3fca213.crl

            X509v3 Authority Key Identifier:
                keyid:5C:F8:52:57:6A:57:D7:76:93:A0:7F:F6:79:30:F4:25:5A:72:1E:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.100.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:51:15:ea:c7:96:d4:80:a1:0f:a2:3c:c6:00:4e:28:e2:d2:
         3c:29:3b:29:6a:16:55:90:e1:f6:b0:96:0e:8f:74:65:cb:39:
         53:ea:8b:2c:59:9b:b9:f3:99:ea:da:d4:93:99:00:31:9a:86:
         b7:c7:fb:97:29:3d:35:27:d7:0c:0c:8f:a9:27:75:13:1e:4e:
         60:98:45:60:79:35:c8:86:d1:53:39:3a:b2:e7:fa:dd:58:e5:
         02:04:0e:2e:f4:fa:d3:f2:69:4e:b9:47:d4:9e:4c:82:52:c2:
         fc:32:d5:cf:43:1f:2b:3e:f2:a8:0c:b2:93:4f:e7:58:12:7a:
         7a:ed:32:04:af:cf:cd:a8:47:1b:4a:c1:79:e5:3c:be:12:a8:
         bc:f1:18:93:7b:85:d6:d9:31:18:99:1e:88:77:86:27:f6:21:
         73:4d:23:56:32:7d:5f:06:59:a9:c7:a2:bf:8f:2b:29:b6:47:
         3e:75:0b:90:fa:b0:dd:3b:ba:5d:2b:b1:b8:a2:4c:41:27:95:
         04:1d:a8:7a:1a:d9:1d:d1:c6:b3:1c:74:16:b4:4e:17:c4:fa:
         2a:84:2f:16:e4:ec:ae:8b:2e:19:74:4a:61:9c:a9:0c:c4:22:
         1a:ab:e7:a9:7e:17:cb:ef:42:1c:fc:77:d2:da:74:f9:67:aa:
         3e:47:19:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 15:55:14 2026 by rpki-client