Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/15d68e3b-7087-3564-8640-8443284552a9.roa
File:                     15d68e3b-7087-3564-8640-8443284552a9.roa (raw, json)
Hash identifier:          loZgIaLaYgiMwoWrX6S6RT9TZARc9ZrTka3zk8ZnhzI=
Subject key identifier:   CA:1A:17:90:B3:3B:20:5C:CC:D2:02:E0:9A:CF:0B:22:F9:DC:3B:C3
Certificate issuer:       /CN=8d499d1b-9023-4410-8b4a-909ca6a083df
Certificate serial:       010D0C9F4328584EA787D106A2B7589FB72E9700
Authority key identifier: B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/15d68e3b-7087-3564-8640-8443284552a9.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397666
IP address blocks:        162.220.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:d1:06:a2:b7:58:9f:b7:2e:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d499d1b-9023-4410-8b4a-909ca6a083df
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=923c569b-7180-45a6-a287-7575347b18f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a3:23:f6:72:6d:19:22:2b:5e:81:51:28:79:
                    b9:33:06:fa:cf:a9:ca:ae:76:e4:5d:90:bb:d2:d8:
                    01:a6:2a:5b:72:00:69:a3:b5:d2:2b:24:27:6f:b8:
                    5b:ab:2d:a4:1e:ab:86:3a:77:b0:2b:23:0d:ce:e2:
                    20:2a:9b:90:92:c6:ac:65:b7:0e:b6:9f:60:65:d3:
                    1a:88:a1:b0:51:58:62:83:e0:4c:d0:4b:33:93:66:
                    f2:84:38:83:5b:21:08:28:be:50:f5:6b:55:e1:6c:
                    bc:98:d3:62:b3:bb:cd:0c:e0:4d:60:d2:df:6b:6b:
                    68:61:fd:86:5d:00:73:36:c5:d3:09:4f:7b:59:e1:
                    e1:fc:bc:ac:ea:76:4d:71:4d:59:d6:4a:fb:b1:d2:
                    bc:e7:d8:f0:c1:b8:a1:12:79:fb:fd:22:6a:df:93:
                    50:f4:91:57:08:07:76:41:ba:28:fc:70:dc:9c:94:
                    9b:3a:9d:c8:b8:77:94:c7:0a:b0:09:bf:e2:45:39:
                    f1:83:fa:c2:6d:22:3c:a8:6a:6e:50:ab:62:8f:64:
                    6e:51:11:ea:dc:18:49:9d:7c:cc:0a:5c:94:69:35:
                    59:bf:4d:aa:41:04:8d:1e:9f:54:32:35:9c:e3:a1:
                    04:cd:eb:64:68:81:2a:31:f8:97:cc:96:df:6b:fa:
                    cc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:1A:17:90:B3:3B:20:5C:CC:D2:02:E0:9A:CF:0B:22:F9:DC:3B:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/15d68e3b-7087-3564-8640-8443284552a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl

            X509v3 Authority Key Identifier:
                keyid:B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.220.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:ba:fc:36:ba:03:de:6b:6f:2d:96:50:c6:a3:19:ef:fb:81:
         e7:ce:6e:71:08:05:e1:23:7f:9d:87:3b:57:71:de:b6:fb:a5:
         fe:78:70:f7:26:4d:53:97:f6:7a:68:2c:68:2f:18:a2:fb:4c:
         82:ea:d1:d1:47:e3:51:2c:83:83:e1:df:92:48:40:54:3e:e9:
         dd:89:d0:bb:e9:1c:d2:eb:5f:c7:d9:45:5e:63:cc:d6:95:c5:
         e2:2e:da:91:22:cf:b5:d2:ee:12:98:2e:c3:1e:a7:62:96:fe:
         ec:be:12:ab:f7:a3:c8:78:86:bc:11:2b:d9:bc:56:b2:dd:b5:
         7d:72:cd:82:3f:2b:32:11:52:a1:5d:5b:ba:52:c2:f1:c2:40:
         ac:aa:c1:53:da:5e:39:68:dd:c3:55:76:e2:51:c1:49:88:bb:
         be:2f:55:10:5e:8e:d4:4e:09:07:0d:bb:fe:8c:07:df:98:c9:
         46:46:2b:82:8e:ed:db:d5:9e:ac:db:a0:46:04:62:a9:0f:a9:
         83:ff:3f:76:ad:0b:dc:7d:cd:87:a7:d7:7c:4b:b9:de:f9:57:
         5c:b6:fc:e2:70:42:1c:1c:b8:da:a5:31:1a:36:bb:e3:e9:af:
         e0:2f:70:19:f3:5e:98:01:e7:3a:e8:03:c8:81:f4:f9:eb:cc:
         01:d9:e1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 07:10:52 2026 by rpki-client