Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d8dfe063-e6ab-3a76-b3ef-a4b58281a062.roa
File:                     d8dfe063-e6ab-3a76-b3ef-a4b58281a062.roa (raw, json)
Hash identifier:          XREiGGHPOfy+mCRnScMOPzSnBOMtzemFfEosgk1B/cA=
Subject key identifier:   7C:60:09:71:92:5D:B8:EF:30:9A:08:CE:37:9A:D7:D2:CB:11:B8:D2
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E37648C20FF992701F13DEC40
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d8dfe063-e6ab-3a76-b3ef-a4b58281a062.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     54253
IP address blocks:        167.126.232.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:8c:20:ff:99:27:01:f1:3d:ec:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=587461d4-446c-4b0d-bb82-8c11f24bb55c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e7:0a:1f:db:af:22:3b:b1:bb:86:c3:76:77:
                    fe:3d:23:bb:71:b8:b1:6b:4d:97:c6:a9:6b:b3:80:
                    93:88:a9:39:19:47:9a:1d:36:76:c3:51:3a:85:b1:
                    f5:ea:a2:e9:57:6c:4f:a8:2c:9c:05:f4:16:44:e0:
                    54:cf:2d:74:95:b6:73:04:e2:42:cc:c8:1e:1c:d1:
                    23:6d:19:48:f8:bc:ec:f3:46:c8:7f:78:27:2a:97:
                    6c:b4:6e:e1:24:9e:45:f9:f7:99:95:5d:06:b4:e6:
                    02:7c:c7:9a:af:f8:df:99:dd:79:a0:69:de:84:bf:
                    25:e0:98:72:7f:51:81:81:bc:ae:1e:74:2e:7d:3e:
                    41:95:e5:34:de:cb:5c:7b:78:83:a6:1f:eb:9a:5b:
                    cc:6f:d4:11:b8:ed:3a:4d:c4:6e:07:d3:49:47:98:
                    dc:6e:e8:f5:d7:33:3f:d0:12:6e:91:75:54:2a:39:
                    29:81:33:65:2f:cb:b5:4a:87:b4:e3:e6:1d:2b:bf:
                    29:28:9a:78:9a:1f:a3:7c:06:ce:b0:c2:27:14:ec:
                    f6:f5:7b:0b:cb:d3:39:6e:ec:74:53:5e:38:2a:0c:
                    df:9c:01:f0:92:04:32:01:cd:d2:ea:31:81:3d:fe:
                    35:dc:8f:87:08:16:11:ed:3b:60:66:15:35:d7:64:
                    56:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:60:09:71:92:5D:B8:EF:30:9A:08:CE:37:9A:D7:D2:CB:11:B8:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d8dfe063-e6ab-3a76-b3ef-a4b58281a062.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.126.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:51:7f:fe:de:2f:22:73:1e:a0:aa:84:2d:a9:b9:31:7c:09:
         b2:8f:6d:69:75:3e:7d:34:af:7e:fe:9c:61:81:88:66:67:fd:
         0a:0d:f4:d9:93:fa:88:4a:9f:33:88:08:e6:a9:c4:13:0c:bc:
         3b:78:4f:6f:bc:fd:4d:dc:26:08:90:42:a2:3d:ca:c9:8c:1b:
         f2:cb:0f:a4:fb:79:3a:9b:5b:07:12:ed:4e:89:21:af:53:48:
         09:fd:39:df:3a:4d:b6:c3:8d:36:39:8d:e3:22:33:8f:65:93:
         39:1d:4e:33:6f:8a:dd:cb:0d:06:74:ce:a8:8b:15:1b:0e:29:
         9b:d2:17:6a:82:a1:08:f1:41:c2:fe:b9:af:de:3f:88:cb:73:
         0f:7b:8a:4b:d2:f1:a4:0e:5d:21:f8:c7:b2:6e:76:53:06:4f:
         f1:e6:ee:3e:04:19:c4:09:5a:2f:c2:d7:a7:c2:df:fa:2e:fb:
         4a:e0:ca:ed:66:78:96:bb:15:74:48:e0:4c:1d:6c:65:15:54:
         ef:f7:bf:4e:90:11:dd:e7:67:76:e8:23:80:65:18:4c:5c:48:
         87:dc:4d:2b:a6:0b:b0:08:a0:ef:a1:07:fb:35:46:dd:51:55:
         e0:35:e0:f9:f3:1d:c8:5b:de:f6:f0:56:cf:79:e5:84:8e:40:
         a6:fe:ae:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 05:49:16 2026 by rpki-client