Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/b0b7a27d-5933-3e3f-992c-3de05a0bce28.roa
File:                     b0b7a27d-5933-3e3f-992c-3de05a0bce28.roa (raw, json)
Hash identifier:          /6AuiNH0ZYKLkEMDHNQb2QcbSQ4MevixQs6KdA9pc84=
Subject key identifier:   A5:90:AB:98:F2:B4:91:B1:E5:1A:28:BA:1F:6B:D4:8F:61:A9:83:C1
Certificate issuer:       /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
Certificate serial:       010D0C9F4328584E5D14B1858D5A525FA8EB8000
Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/b0b7a27d-5933-3e3f-992c-3de05a0bce28.roa
Signing time:             Thu 02 Jul 2026 09:00:12 +0000
ROA not before:           Thu 02 Jul 2026 09:00:12 +0000
ROA not after:            Wed 30 Sep 2026 09:00:12 +0000
asID:                     2631
IP address blocks:        157.166.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5d:14:b1:85:8d:5a:52:5f:a8:eb:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
        Validity
            Not Before: Jul  2 09:00:12 2026 GMT
            Not After : Sep 30 09:00:12 2026 GMT
        Subject: CN=9e50d3ee-eb56-410b-8149-0a1d1dcb12fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3d:0f:75:65:8b:5d:70:26:27:36:51:1e:f4:
                    8f:d5:8c:09:b6:e4:9b:3f:b9:cf:6b:0a:0c:46:22:
                    96:4c:6e:10:88:b4:68:da:bb:ed:c0:80:ba:6b:4a:
                    f6:fd:80:18:a1:1c:c9:f4:57:f9:59:f8:2e:fc:ff:
                    7e:9a:c4:e0:aa:3f:4f:57:a4:17:76:d3:89:21:cb:
                    01:12:ed:21:68:ff:5a:87:3f:88:d8:96:b8:a2:79:
                    cf:03:35:a0:ff:c8:2f:3a:a1:38:06:49:32:37:f8:
                    02:7d:b5:b8:7d:16:26:7a:5a:2a:76:ac:47:8a:a9:
                    9e:bb:b9:13:e9:7e:e4:60:0d:9a:1c:55:ff:cc:82:
                    0f:67:f6:d5:43:35:b6:30:96:59:b3:a6:b2:59:8e:
                    06:19:70:53:ca:0a:e9:65:97:e0:c4:c7:83:5d:06:
                    37:2d:87:4d:3c:e5:ca:04:1c:2b:23:58:e9:6b:4e:
                    88:e0:95:8a:7e:5e:74:81:b4:57:db:81:d8:6e:62:
                    3f:b6:ff:19:e7:aa:3d:85:88:66:30:e3:5b:21:a1:
                    d0:ba:f8:e9:a6:a3:3e:61:13:73:51:10:be:38:21:
                    89:6a:3d:58:dd:4a:0c:97:72:04:3f:3c:18:5b:61:
                    88:7e:17:f7:af:2c:78:a7:5c:dd:a1:fb:c6:7e:36:
                    f2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:90:AB:98:F2:B4:91:B1:E5:1A:28:BA:1F:6B:D4:8F:61:A9:83:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/b0b7a27d-5933-3e3f-992c-3de05a0bce28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl

            X509v3 Authority Key Identifier:
                keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.166.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:23:04:0c:a0:ed:d8:f9:02:27:57:cc:52:3a:75:e6:76:49:
         a3:8e:aa:27:ef:98:75:a8:d5:31:d4:65:bf:ec:c2:b2:23:e4:
         30:03:00:4e:0d:02:a2:a5:84:69:a7:98:e3:92:e9:f8:bb:5e:
         49:04:52:41:e0:47:3e:4c:47:62:df:e5:77:e0:d2:97:88:a4:
         14:13:49:6b:e3:e1:0b:17:de:23:e5:32:4f:c6:2d:ab:b4:11:
         be:bd:e8:99:01:c8:bd:2c:5f:98:70:55:b5:65:28:9e:bb:35:
         74:b0:1c:b2:47:23:dd:29:5b:54:89:23:c2:3d:ca:2f:92:95:
         fe:b4:0d:8f:d3:16:00:cf:6b:23:7c:31:64:70:4f:c7:36:0e:
         92:87:79:9f:34:04:23:65:aa:07:c3:cb:e6:35:c6:b5:07:f1:
         f9:d8:77:8b:bd:3e:a3:3e:9a:b4:7f:d6:0f:d7:59:0d:a0:c8:
         23:7d:6d:af:30:7a:57:ae:c8:d9:cc:b0:7f:0a:38:01:6c:0b:
         c6:54:b9:e5:60:87:93:17:61:93:ab:65:94:6e:0d:94:f6:56:
         74:80:ec:c2:18:bb:2e:02:d3:c5:b9:ba:90:9e:f6:aa:1c:20:
         68:3c:72:6a:06:1f:5b:e1:c8:a2:87:f2:76:4f:80:f1:fd:b7:
         96:53:22:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:12:11 2026 by rpki-client