Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/120efc84-7a98-3068-a7f8-f3bec2f0f337.roa
File:                     120efc84-7a98-3068-a7f8-f3bec2f0f337.roa (raw, json)
Hash identifier:          NgLbUMr4ZHEh2kofzUk4Le2WJfwOjzwgS5wJz14C2l0=
Subject key identifier:   F1:E8:CF:59:A0:66:34:DB:B0:61:A8:36:26:12:49:D0:5E:AD:0C:36
Certificate issuer:       /CN=369643f4-a849-4a0c-af2a-677957de74bc
Certificate serial:       010D0C9F4328584E26A44962CA27D96E8C3FCF00
Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/120efc84-7a98-3068-a7f8-f3bec2f0f337.roa
Signing time:             Fri 12 Jun 2026 21:00:11 +0000
ROA not before:           Fri 12 Jun 2026 21:00:11 +0000
ROA not after:            Thu 10 Sep 2026 21:00:11 +0000
asID:                     153040
IP address blocks:        162.245.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:26:a4:49:62:ca:27:d9:6e:8c:3f:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc
        Validity
            Not Before: Jun 12 21:00:11 2026 GMT
            Not After : Sep 10 21:00:11 2026 GMT
        Subject: CN=8269ff80-6387-4803-aa7b-823137fd9c85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:65:bc:12:f2:d3:88:e8:97:6a:87:23:91:05:
                    34:8f:fc:08:93:d2:b6:58:ee:39:1f:ce:50:90:95:
                    c7:cb:f6:31:c1:99:43:fa:ce:0b:7e:25:24:f2:50:
                    f7:da:ae:0a:7d:c8:97:54:cb:bb:3c:f2:16:2b:a0:
                    f9:48:a2:2a:ce:65:73:14:f7:76:23:93:00:84:a8:
                    a6:20:92:c0:63:2a:d5:9b:4d:03:81:b7:33:f3:3b:
                    e1:01:80:86:bd:dd:d0:a9:71:6d:c6:c0:72:7a:47:
                    2f:e2:2e:00:c9:4b:6b:26:dd:70:ea:0e:cc:fc:1f:
                    a0:89:03:5a:0a:9d:07:5f:0e:aa:4c:78:f0:b4:27:
                    7a:04:87:a2:78:92:a8:be:4d:58:99:84:b8:fb:81:
                    11:2e:2a:99:d8:1a:72:7b:09:37:c2:c3:e3:49:85:
                    77:b6:a3:28:1a:74:41:ae:ab:53:dc:b1:f4:78:84:
                    ed:c6:59:3c:c3:19:f1:16:89:91:8e:18:36:8b:e1:
                    44:ec:1e:d2:05:0c:c0:4f:ce:35:06:6a:c8:da:8b:
                    ea:95:9f:c1:f6:06:cd:e2:50:b4:da:e9:5a:5e:8d:
                    49:cb:6a:68:67:b1:5b:01:37:55:ce:81:3a:9a:4d:
                    6a:09:03:29:ec:10:f3:8b:b9:fc:ad:0e:af:90:6a:
                    55:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E8:CF:59:A0:66:34:DB:B0:61:A8:36:26:12:49:D0:5E:AD:0C:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/120efc84-7a98-3068-a7f8-f3bec2f0f337.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl

            X509v3 Authority Key Identifier:
                keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.245.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:22:db:b7:13:f0:28:b3:a6:03:18:37:a7:1d:6d:05:8f:69:
         06:9a:ef:28:f6:e4:0a:9f:3c:98:c8:9d:d6:e9:10:dd:a7:ab:
         43:b2:9d:38:3b:7f:4c:5b:2a:6b:7b:2c:6a:cd:fa:f0:28:44:
         81:7c:8a:d1:a0:27:ad:1b:7c:67:86:ad:67:72:df:76:69:82:
         76:4c:51:8d:87:15:1f:05:5c:15:86:c4:09:48:7d:1e:b7:18:
         1b:7f:b2:fd:e0:fb:be:81:a9:e9:8e:8d:b9:34:2a:03:82:3a:
         52:e9:9d:48:54:50:64:83:4d:cd:2a:49:de:e6:b1:82:2e:6a:
         d8:d6:38:5e:98:a1:52:b7:64:06:0a:04:00:b4:fc:75:c7:71:
         e3:ab:32:f6:f8:cf:37:cc:12:14:ec:31:bb:eb:89:5f:ad:d4:
         90:54:ef:e7:b2:2a:84:a0:b4:c6:f7:8a:02:78:b3:e3:34:0d:
         92:89:45:a0:3a:24:75:34:9b:aa:9c:73:87:d3:c0:9d:3d:86:
         16:46:19:0a:f9:33:6c:50:4f:36:74:a9:a0:b0:b0:5d:6c:8c:
         95:02:59:de:67:d1:1a:98:e5:df:79:f8:5c:b4:88:60:c2:4c:
         2b:ee:97:20:42:f0:07:6d:04:2a:e0:46:2e:75:84:f3:8e:cc:
         56:43:30:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:42:23 2026 by rpki-client