Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/7b2fdbcf-e14d-3a78-b4f5-532e73f07c3c.roa
File:                     7b2fdbcf-e14d-3a78-b4f5-532e73f07c3c.roa (raw, json)
Hash identifier:          mT820kXfN6/I6mZaQcA7qoJCts2/VDyZuUZN5M7htfo=
Subject key identifier:   BE:F1:CF:BF:23:79:A3:69:0A:76:A6:FE:4E:27:9C:2B:DF:1D:91:01
Certificate issuer:       /CN=c8c301ab-7d22-46c3-8211-f6373ec82d5a
Certificate serial:       010D0C9F4328584E3A2F1BA96EA97F670F19C5C0
Authority key identifier: 1B:13:FC:C8:68:95:3B:53:A8:FC:E8:B9:4B:8B:04:23:97:4A:52:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/7b2fdbcf-e14d-3a78-b4f5-532e73f07c3c.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     25945
IP address blocks:        162.253.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:1b:a9:6e:a9:7f:67:0f:19:c5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8c301ab-7d22-46c3-8211-f6373ec82d5a
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=9990f12e-510a-4e55-82da-c0c53e266074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d7:0d:a4:af:3c:91:92:c1:7a:68:c2:c4:cd:
                    11:76:75:e0:78:5f:b5:09:c9:d3:74:f7:2a:5a:db:
                    f5:49:e5:14:51:43:9c:85:a6:ef:d1:49:0d:cb:f3:
                    97:b7:44:d6:01:75:8f:df:32:0a:f6:a8:46:c7:6f:
                    2e:7b:76:a0:89:7a:97:60:0a:3b:62:72:44:5a:ef:
                    af:ea:49:76:05:fd:10:79:e3:d1:30:4a:8b:69:da:
                    d9:e6:98:16:e4:89:6b:dd:8e:cd:dd:df:10:9a:19:
                    52:54:b1:d1:b3:36:35:25:0c:d1:bb:19:12:06:01:
                    83:c0:aa:86:92:c4:cf:36:23:bd:51:06:de:d9:0f:
                    34:8b:70:4c:95:94:8d:05:4a:05:69:d3:92:0f:1d:
                    fb:32:20:a6:f7:f4:19:b3:84:65:79:f8:ae:fd:f2:
                    ce:66:28:bc:be:66:05:7d:07:54:15:6a:ce:c7:a9:
                    c3:fc:38:19:65:c0:b3:56:d3:a9:ba:c8:1e:b5:e4:
                    0d:ad:a5:90:de:fb:87:8b:ff:ae:3f:38:fa:bd:cc:
                    83:3c:cf:e7:b8:21:ca:c2:c9:46:64:77:b8:c1:62:
                    0f:f5:ea:3e:77:f9:20:1d:dc:cc:f6:48:67:8e:a6:
                    d3:0a:9b:f4:a0:65:08:47:d9:92:38:c8:f4:6d:b4:
                    19:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F1:CF:BF:23:79:A3:69:0A:76:A6:FE:4E:27:9C:2B:DF:1D:91:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/7b2fdbcf-e14d-3a78-b4f5-532e73f07c3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.crl

            X509v3 Authority Key Identifier:
                keyid:1B:13:FC:C8:68:95:3B:53:A8:FC:E8:B9:4B:8B:04:23:97:4A:52:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.253.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         da:02:5f:be:04:ca:18:db:81:95:c3:62:bb:21:09:01:2b:60:
         b1:c7:83:7f:d8:9c:f9:b2:68:82:fe:bc:b8:80:19:7f:5d:ee:
         3d:b2:ec:bb:00:c8:d3:da:b0:1c:e1:60:05:62:c0:2c:ce:ca:
         82:3a:d8:48:9c:94:92:4d:eb:23:af:e3:3b:22:7c:17:de:fd:
         7e:97:17:24:35:79:32:49:7b:3f:17:24:b4:9b:38:58:1a:9c:
         40:30:7e:99:66:8a:17:30:11:21:89:15:5f:d1:4e:48:1c:d0:
         f4:3c:5b:79:9b:19:5b:cc:d3:fb:06:71:6d:39:5d:50:92:3c:
         70:34:2f:bb:d1:e0:69:62:45:2b:23:88:9e:02:a0:b9:08:f4:
         c5:8c:7f:f5:21:1c:06:b2:38:90:c8:7c:27:70:8f:fd:4a:54:
         e0:21:43:e8:04:53:17:c2:d6:21:3d:e5:c3:47:09:61:d6:99:
         0f:f4:ff:47:2f:ad:cf:85:63:63:bf:f3:48:2f:be:d0:55:b5:
         77:73:0f:31:05:26:18:2c:7d:bb:42:03:32:3a:09:b9:53:e7:
         da:32:f9:62:28:2d:98:a3:7d:de:34:8c:a3:d8:4c:2d:29:08:
         2a:63:2e:b0:db:9a:2d:34:94:ca:89:21:10:d8:89:e7:e8:fc:
         15:ea:2d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 16:10:51 2026 by rpki-client