Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/7b012c24-2f2b-3db0-b745-b22b856c2688.roa
File:                     7b012c24-2f2b-3db0-b745-b22b856c2688.roa (raw, json)
Hash identifier:          nJd8Byj83iwY2EVQEESJVvO4D5bGTlgXykjPCND8Ahg=
Subject key identifier:   32:82:2F:86:F4:14:76:8E:60:28:9F:91:6A:E6:D9:9B:CA:1D:EE:28
Certificate issuer:       /CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a
Certificate serial:       010D0C9F4328584EA798E25D67D8830C208BE680
Authority key identifier: 31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/7b012c24-2f2b-3db0-b745-b22b856c2688.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14618
IP address blocks:        168.203.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:e2:5d:67:d8:83:0c:20:8b:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f957989a-b8c5-445e-a850-513e95a5422d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:94:ac:5f:4a:12:78:27:3c:7d:4c:36:37:79:
                    c0:4f:3c:14:9a:9b:67:22:59:5c:e6:09:5b:bb:08:
                    d7:e1:78:c1:2c:49:d6:41:52:0b:ea:d1:1b:ec:df:
                    ab:ab:07:42:df:a3:2a:be:e1:e9:15:02:d0:52:59:
                    0d:1e:c7:08:e0:06:a7:53:d8:3c:17:45:42:99:fc:
                    f7:dd:63:d9:0c:af:ba:4f:8d:95:92:ee:5b:1d:ac:
                    dd:57:1c:5b:0f:49:cf:b7:df:63:b1:54:42:5f:d1:
                    55:36:56:41:80:3f:cc:68:7e:6d:e4:9f:3a:95:0a:
                    dc:7f:bb:12:0a:ac:2a:26:ea:04:a4:34:44:73:aa:
                    d3:dd:0d:57:e6:b2:12:db:bf:dd:e3:e0:6f:bc:4f:
                    ea:67:a2:80:6e:2a:2c:5e:a3:b6:02:2b:08:7e:db:
                    ba:f5:50:25:1b:5b:61:41:1a:74:69:ef:e8:63:42:
                    b7:d0:d9:f4:35:bb:09:5a:ac:14:6f:f3:dc:af:26:
                    3a:57:b8:db:28:8b:f2:99:43:26:bf:4d:b0:1a:f5:
                    f5:83:88:89:49:8c:17:68:e4:ef:04:3d:c6:4e:2e:
                    9b:07:a6:bd:be:09:4b:11:d5:e4:bb:09:24:f2:cc:
                    82:61:9e:5a:87:04:fb:c9:ec:89:e8:e0:a5:e3:8e:
                    db:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:82:2F:86:F4:14:76:8E:60:28:9F:91:6A:E6:D9:9B:CA:1D:EE:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/7b012c24-2f2b-3db0-b745-b22b856c2688.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl

            X509v3 Authority Key Identifier:
                keyid:31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.203.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:df:8f:09:8d:8e:d8:52:61:3b:88:9b:46:ee:97:df:10:64:
         66:d0:0f:50:70:2f:22:4b:8b:86:de:49:e8:8f:c6:03:3b:46:
         1a:86:6b:a6:fd:46:59:b9:9a:82:57:e5:52:56:5b:1b:59:34:
         41:10:c0:22:eb:a0:07:8a:34:9f:01:84:fb:55:b9:9c:ae:af:
         19:ee:5b:34:d5:00:f8:e6:da:39:51:f3:a2:ed:ce:21:c6:1b:
         25:63:af:49:ec:b8:57:c1:25:d9:55:fa:cd:9f:22:a0:4c:8f:
         59:9c:14:ad:83:97:11:41:ab:cc:16:09:5d:3e:2e:2a:24:11:
         e1:32:24:3b:ae:21:80:53:e0:66:57:dd:fd:78:dc:23:27:ad:
         c7:27:9f:da:c8:e7:26:f2:08:ad:73:de:23:cc:5b:3c:9c:e7:
         df:01:31:c2:5e:a2:79:a8:11:9d:2d:50:65:82:08:8d:53:08:
         95:d4:fc:45:ec:7c:e7:c3:08:dc:d2:41:da:57:55:7e:83:3e:
         c4:d4:24:05:e9:f7:d1:87:6a:e6:9c:92:db:45:13:b7:27:7a:
         1a:48:60:ed:4e:9d:06:cc:33:e9:43:ea:73:3b:71:a2:77:17:
         ee:9b:ce:cb:9c:8f:19:4a:53:62:b3:bd:43:01:2d:ac:61:71:
         99:61:73:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:11:19 2026 by rpki-client