Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/0e2288ef-85fb-34ce-8106-43e9ec358e84.roa
File:                     0e2288ef-85fb-34ce-8106-43e9ec358e84.roa (raw, json)
Hash identifier:          pOoZtyOD+edHyRpGjG9HfJPL+LzaXYOIeLd2D5QY69c=
Subject key identifier:   B3:CC:97:60:03:06:54:7A:0A:CE:51:79:04:DE:26:B9:75:26:81:F6
Certificate issuer:       /CN=5a3fe3a9-d9f7-4b8e-a037-877363c53113
Certificate serial:       010D0C9F4328584E43F476E36AD42D39602B5740
Authority key identifier: A8:C1:4B:3D:D1:52:6C:35:99:64:83:60:2D:FC:F0:4C:0A:BC:EC:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/0e2288ef-85fb-34ce-8106-43e9ec358e84.roa
Signing time:             Tue 23 Jun 2026 09:00:12 +0000
ROA not before:           Tue 23 Jun 2026 09:00:12 +0000
ROA not after:            Mon 21 Sep 2026 09:00:12 +0000
asID:                     22504
IP address blocks:        162.118.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:43:f4:76:e3:6a:d4:2d:39:60:2b:57:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a3fe3a9-d9f7-4b8e-a037-877363c53113
        Validity
            Not Before: Jun 23 09:00:12 2026 GMT
            Not After : Sep 21 09:00:12 2026 GMT
        Subject: CN=da7b4668-7986-48b9-90b3-6c8f82f0be7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fa:41:36:8c:c0:7a:d6:e2:40:d1:dd:b2:8c:
                    84:94:63:0f:22:a5:3e:75:d7:6a:a1:14:00:48:fd:
                    9d:b8:d3:b8:e2:e3:60:87:9d:f2:4a:38:ae:43:db:
                    9f:a4:49:6b:38:9d:a5:99:a7:8f:08:fd:ad:6a:9b:
                    b7:40:9d:0d:c0:6a:90:6a:bb:fe:5b:58:69:4e:1e:
                    bf:38:70:94:f2:c6:8a:17:c8:53:d4:b9:e4:4a:c1:
                    58:98:ce:7b:08:f7:9f:06:4b:d9:51:cd:b6:ff:2f:
                    a7:73:c7:a2:4f:8e:2b:f7:b4:ad:08:4d:d0:ba:df:
                    46:60:7e:a7:58:59:db:5d:bb:a9:f0:02:86:7e:4b:
                    24:be:16:59:31:48:7b:d2:63:2c:a9:ed:45:95:70:
                    bd:a0:e5:bd:5e:a4:67:61:8d:8a:a6:36:1a:61:14:
                    c4:5c:89:f4:2d:5f:d5:62:63:3f:7a:6e:a4:e2:f0:
                    7c:e1:9e:d8:aa:32:62:e2:a6:22:5b:bf:b2:fd:48:
                    f4:26:c5:fe:37:31:6c:4b:ca:f3:56:6c:5f:4f:fd:
                    e7:ae:31:31:30:a4:06:3a:9a:0c:15:fc:81:d5:f8:
                    28:63:92:58:ae:6e:1e:80:3d:15:10:af:cc:6e:7e:
                    6d:48:85:6e:0f:33:27:8f:94:99:aa:56:6d:a6:50:
                    6d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:CC:97:60:03:06:54:7A:0A:CE:51:79:04:DE:26:B9:75:26:81:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/0e2288ef-85fb-34ce-8106-43e9ec358e84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.crl

            X509v3 Authority Key Identifier:
                keyid:A8:C1:4B:3D:D1:52:6C:35:99:64:83:60:2D:FC:F0:4C:0A:BC:EC:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.118.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:ee:91:c8:6e:23:1b:59:af:82:d5:9f:51:ad:7a:2a:2e:fb:
         b7:7b:e2:45:f0:c8:de:1f:8f:9b:26:d1:a9:de:6d:2d:52:d1:
         b9:4b:23:48:fc:84:d8:bf:68:7e:26:dc:88:5a:50:6a:d9:dd:
         c2:f9:44:56:48:e2:2f:65:06:95:52:7e:f9:f9:8f:60:cf:57:
         20:c6:6e:75:bd:55:43:04:77:6a:41:bb:7d:ee:17:35:5f:7e:
         ec:f7:02:04:a3:09:b8:11:62:81:1c:4b:e5:84:55:7b:b6:b8:
         11:62:9a:1e:8b:85:3a:62:2c:8e:99:94:e6:b1:83:e9:34:9a:
         56:b3:a8:ec:03:e0:e0:ad:02:a2:a5:61:45:d3:1f:3a:05:e0:
         bc:02:8c:6f:87:5c:a5:09:58:67:4d:a4:a5:2d:1d:3c:6a:58:
         f8:e0:c1:1a:57:44:58:ac:90:1f:33:74:21:92:5f:82:54:d2:
         83:8d:e6:51:eb:33:26:f0:47:96:eb:d8:df:c9:d3:cc:89:6c:
         5f:ea:e6:00:68:6c:4e:75:56:94:e8:a0:e2:68:2a:72:94:2a:
         9e:5e:bd:51:fc:b9:f5:fe:9d:8d:13:80:cc:3b:c0:e5:40:05:
         3e:22:ea:ea:95:7c:52:b1:79:9e:7f:04:7e:6b:03:36:0a:79:
         0b:4c:36:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 11:22:58 2026 by rpki-client