Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/bd893367-b221-3b72-9a21-60cf39399e0a.roa
File:                     bd893367-b221-3b72-9a21-60cf39399e0a.roa (raw, json)
Hash identifier:          uo3U9wfnq9kxhCwXLIUYeARZBfSHuUTc8F+WIxrQMbE=
Subject key identifier:   F6:19:DA:5A:77:A8:F6:AA:DB:5D:65:4C:FD:3B:1D:90:01:19:40:74
Certificate issuer:       /CN=7d6bea32-db4c-4326-93a0-713364b8aa44
Certificate serial:       010D0C9F4328584EA79259CE20136D312BEF5580
Authority key identifier: D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/bd893367-b221-3b72-9a21-60cf39399e0a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     22351
IP address blocks:        216.139.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:92:59:ce:20:13:6d:31:2b:ef:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d6bea32-db4c-4326-93a0-713364b8aa44
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=32d59346-2522-4a34-ae26-37e3c7e162e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dc:9d:99:71:d6:31:a5:7c:fd:cd:7f:74:3a:
                    1e:e1:87:7e:77:be:ef:fa:0a:a7:05:fd:56:2f:f1:
                    84:3f:f4:1b:80:18:4c:66:89:0e:9c:85:0d:0e:87:
                    62:1a:92:03:d0:78:ef:4a:ca:49:19:76:79:87:9f:
                    98:bf:86:e1:77:ac:6c:bf:c7:fd:9b:d3:2f:81:81:
                    44:46:82:8e:d5:30:8e:4a:3e:b4:11:da:2c:fd:b8:
                    82:f8:6c:fe:1f:81:b8:0e:9b:25:55:cb:a4:aa:0a:
                    b0:36:5d:65:33:6a:af:50:a2:8c:7f:d4:9f:32:05:
                    f7:ef:28:e0:31:55:11:65:a0:63:3d:fd:0e:78:7b:
                    f5:77:a1:09:94:29:93:81:3e:79:1c:36:fd:94:3c:
                    2d:3e:c9:45:e9:76:07:1e:93:81:09:86:e3:3a:1d:
                    0c:a2:d8:84:63:2d:65:48:d5:0a:dc:c1:f0:d2:6c:
                    61:96:cb:79:5f:c5:4b:fe:8e:2e:a2:a3:db:3b:5f:
                    da:4c:68:37:79:82:e6:97:8c:f5:35:d4:71:30:89:
                    09:f2:8a:5c:35:c1:19:f5:92:7e:24:53:f6:b0:bc:
                    0b:35:f0:67:65:47:4e:e2:72:22:06:3d:ac:47:52:
                    f5:83:a2:54:85:8f:81:1e:26:1d:b1:f2:ca:98:9d:
                    f8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:19:DA:5A:77:A8:F6:AA:DB:5D:65:4C:FD:3B:1D:90:01:19:40:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/bd893367-b221-3b72-9a21-60cf39399e0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl

            X509v3 Authority Key Identifier:
                keyid:D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.139.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:f1:31:b3:cf:bd:97:e7:60:a8:48:db:a1:46:0e:18:d7:e0:
         75:f3:b0:53:ae:59:c1:09:17:3a:5b:1e:23:4f:54:6f:02:8a:
         98:19:ca:a9:17:b8:7c:79:4a:a8:84:31:71:0a:46:74:d2:18:
         01:10:4d:de:53:6d:07:20:f1:52:96:ec:f9:34:73:eb:ea:7b:
         da:73:45:d9:89:44:72:87:12:a9:52:23:78:4b:a7:eb:e6:b0:
         6f:c5:fb:9b:e2:a1:7e:2a:70:b6:39:bf:38:36:16:54:d9:db:
         9c:6b:33:14:eb:e9:1d:59:d9:16:52:f7:2e:91:14:0c:ed:6d:
         8e:47:bd:fa:45:b4:81:a7:6a:ad:43:5c:12:d9:e8:3e:a5:9f:
         72:17:92:00:9b:52:31:aa:45:ec:12:21:79:b9:84:6c:3a:77:
         13:7e:1c:b7:8e:65:20:af:a1:91:4d:f4:09:6a:8b:d9:fd:91:
         3c:ed:30:7f:b8:df:b2:c6:9e:cc:69:45:5c:15:ac:d3:46:a8:
         40:e8:51:74:43:51:bf:7d:92:4f:7b:f5:f0:e1:a0:53:82:c8:
         9b:73:41:9f:47:a6:c8:da:77:82:bc:7b:94:f4:e3:db:27:2b:
         21:65:c2:c6:53:ed:a5:53:9b:db:9f:60:8d:ed:a5:f9:3a:bf:
         82:72:35:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:18:53 2026 by rpki-client