Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/ff8cd06d-d6c1-320e-bf42-39ba327f60a7.roa
File:                     ff8cd06d-d6c1-320e-bf42-39ba327f60a7.roa (raw, json)
Hash identifier:          Sdc7XwncPAWDehGbTMgwajyI1ITqsHAmA7JvkaU1ICI=
Subject key identifier:   5E:E9:1A:BE:C2:55:86:2F:1D:16:9B:9F:B8:EC:B9:E1:E6:AA:C6:82
Certificate issuer:       /CN=5a3fe3a9-d9f7-4b8e-a037-877363c53113
Certificate serial:       010D0C9F4328584E35FF1E4909C41D8285E56A00
Authority key identifier: A8:C1:4B:3D:D1:52:6C:35:99:64:83:60:2D:FC:F0:4C:0A:BC:EC:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/ff8cd06d-d6c1-320e-bf42-39ba327f60a7.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     22504
IP address blocks:        162.118.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:1e:49:09:c4:1d:82:85:e5:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a3fe3a9-d9f7-4b8e-a037-877363c53113
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=2da2cb75-2bc5-4f2e-94be-e2d17fef7c50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3b:35:2e:e6:81:f5:a0:aa:13:06:43:56:a7:
                    26:e6:7a:79:fd:a8:35:a2:b3:8d:57:38:05:00:81:
                    f2:4b:e7:9c:bc:ea:e6:b5:ff:f1:bf:e0:16:73:bb:
                    25:56:79:d1:db:3f:55:c9:0f:a8:35:86:00:91:d8:
                    a0:e8:a4:21:10:6f:4c:8b:42:e7:90:e2:d6:c1:57:
                    fc:19:83:28:10:fa:83:d0:2f:12:7e:33:1b:48:dc:
                    66:b7:36:16:bd:6b:83:32:47:b3:e3:f7:4f:6c:7d:
                    08:db:ce:8c:9a:83:f1:d2:fb:d8:77:ce:e4:3b:ab:
                    b8:9f:69:c7:0c:55:76:fc:29:4f:1c:34:3f:ff:aa:
                    fa:f8:f2:73:5a:1f:03:e6:46:22:f6:65:9a:52:61:
                    ed:85:2f:5a:cc:43:37:90:86:7a:63:97:f2:f0:23:
                    25:a8:86:fa:70:3e:6a:84:54:68:39:17:bc:ff:1c:
                    e9:f6:db:ad:82:2a:ae:53:ab:e1:b2:17:59:f9:c3:
                    31:cc:26:24:1b:16:c6:c8:7d:0b:df:27:32:c2:06:
                    18:fa:1d:09:f1:1d:ab:72:2f:6d:cf:d5:4d:a1:2f:
                    b5:b8:1f:b8:ac:29:b7:50:c9:be:7e:93:ba:cf:69:
                    27:fb:f5:d1:3f:82:50:76:8f:83:76:ee:97:39:24:
                    04:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E9:1A:BE:C2:55:86:2F:1D:16:9B:9F:B8:EC:B9:E1:E6:AA:C6:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/ff8cd06d-d6c1-320e-bf42-39ba327f60a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.crl

            X509v3 Authority Key Identifier:
                keyid:A8:C1:4B:3D:D1:52:6C:35:99:64:83:60:2D:FC:F0:4C:0A:BC:EC:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.118.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:af:c3:5b:e5:90:9c:87:24:93:ae:38:60:52:a3:bc:0e:75:
         ec:2d:ca:cd:be:73:ed:fe:e8:8e:b2:96:f9:dd:0f:b9:92:d5:
         8c:de:40:e7:1d:60:5d:56:5b:ed:37:7a:26:a3:20:bc:df:20:
         2d:c3:bd:d5:49:98:53:6b:bd:2a:e5:8f:15:7f:3e:4c:8a:29:
         6b:8f:1d:ea:c9:75:31:b0:c7:8d:c4:a5:a3:04:49:ae:7b:93:
         90:0f:d1:a1:fc:35:d9:2d:e9:1b:0c:21:a6:cf:a8:46:db:7c:
         4d:ce:08:e5:20:32:be:57:66:87:28:cd:ae:cf:99:f4:96:78:
         c2:01:a1:37:e0:e8:b4:ee:d0:9f:f8:45:c9:84:85:ad:bb:04:
         8d:43:7e:4b:4b:66:e5:f7:50:9d:52:71:3e:45:d8:25:d0:f9:
         18:39:8e:c1:3b:2d:8b:3c:71:20:7b:b7:d2:5c:de:40:21:24:
         26:17:c9:5f:90:c9:29:fb:1a:b9:0d:55:7a:2d:2a:01:a6:a5:
         78:f5:4b:0b:e4:62:89:f1:63:aa:e9:16:2a:f3:e9:32:f3:d4:
         1d:4f:6f:88:55:7f:0b:b1:68:38:76:de:ff:3f:03:ec:1e:fa:
         62:65:46:41:e4:d3:82:ae:2f:85:1b:7d:91:c1:9b:cd:43:d6:
         62:f3:8a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 11:23:20 2026 by rpki-client