Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/450d3d9a-4a43-3196-a1a2-f1e06f7da447.roa
File:                     450d3d9a-4a43-3196-a1a2-f1e06f7da447.roa (raw, json)
Hash identifier:          gI2+XIj1cOeQzlO2DPJyNaiTAkos8cw4h02IY5mjxrE=
Subject key identifier:   F7:B8:C9:37:E6:CD:D8:EA:5D:47:91:3C:67:1B:01:18:8C:60:6E:AA
Certificate issuer:       /CN=2ca6b6f9-a056-471c-bf96-f2fd5330dac4
Certificate serial:       010D0C9F4328584EA79429906A49285E6296C140
Authority key identifier: D0:68:F6:DA:CB:76:BB:9A:34:F3:3B:2F:84:8B:CE:0D:2E:49:94:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/450d3d9a-4a43-3196-a1a2-f1e06f7da447.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     13347
IP address blocks:        167.253.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:29:90:6a:49:28:5e:62:96:c1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ca6b6f9-a056-471c-bf96-f2fd5330dac4
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=6b7d7a68-3dc0-49b5-96e2-bd8f0805724b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:97:08:83:de:a1:ad:b3:b7:fa:43:1b:0d:9b:
                    8f:23:e6:b6:a4:0b:55:d4:04:e5:0e:65:7a:1c:cc:
                    e4:03:f8:37:11:99:86:04:29:ea:6b:ce:3a:a0:01:
                    9c:5c:d0:12:d5:ec:c3:50:fc:68:98:c4:98:35:35:
                    2a:b4:39:b6:f5:70:4e:9e:56:c6:de:bb:2f:55:55:
                    fd:9a:d0:14:f8:00:d3:2d:82:1c:7d:ee:91:cf:f9:
                    90:1d:47:f5:e5:3d:b4:6c:e6:54:1d:10:6f:29:3e:
                    6d:73:00:d5:5e:87:7b:37:af:ae:08:96:79:f4:c3:
                    91:d2:f6:80:7a:51:95:92:55:0a:7d:0d:62:9e:60:
                    a5:fd:b3:d6:3d:53:c8:71:2b:41:30:36:3c:a1:01:
                    3a:81:a5:8f:de:05:57:c1:70:4d:da:8e:f5:40:0b:
                    6e:a6:8f:dd:b0:80:91:27:7f:7f:39:88:e2:0a:60:
                    9f:16:4e:9f:22:d1:af:34:64:52:de:45:35:46:fd:
                    0d:23:39:8e:dd:f7:1f:b9:4f:22:06:7f:d8:e5:00:
                    c1:8c:e4:c6:d2:5a:af:68:61:77:14:70:7f:1b:75:
                    3e:fa:23:d8:44:51:9e:97:fb:11:4d:3d:78:c2:24:
                    c8:c1:ec:c6:c5:5c:ca:55:5a:22:70:80:46:e7:29:
                    30:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B8:C9:37:E6:CD:D8:EA:5D:47:91:3C:67:1B:01:18:8C:60:6E:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/450d3d9a-4a43-3196-a1a2-f1e06f7da447.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.crl

            X509v3 Authority Key Identifier:
                keyid:D0:68:F6:DA:CB:76:BB:9A:34:F3:3B:2F:84:8B:CE:0D:2E:49:94:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:04:4d:ab:ed:42:7f:23:00:4b:4d:2f:a8:02:bc:ad:53:14:
         dc:bb:44:7f:49:69:bf:05:89:85:f8:b9:df:aa:e0:ea:60:3b:
         b3:fc:62:f2:cc:93:35:b4:03:59:8c:11:e9:7a:38:a5:e2:0b:
         df:ed:b1:7a:d7:f0:40:86:26:d1:75:68:38:a8:5d:17:a5:d7:
         bb:92:08:e0:4a:83:67:40:fa:02:d3:c8:9c:52:95:5c:a6:41:
         ff:67:85:6d:d8:05:8c:5d:3c:2c:e9:c9:c1:0c:c3:55:fc:82:
         79:91:2f:86:e0:f3:82:18:1b:81:39:ec:84:0e:7f:78:82:8a:
         18:a1:e1:e6:14:cd:ca:60:c0:5a:93:87:a7:2d:1b:9a:de:ee:
         34:3e:6c:98:e8:90:28:12:11:1a:9f:94:c2:d2:09:ff:85:c6:
         42:21:74:02:f5:ab:da:2c:45:37:46:7e:93:8c:db:7b:37:83:
         17:dd:67:72:a2:59:f9:f9:d2:38:11:86:ba:65:c6:af:a0:70:
         40:44:4f:35:6b:62:2e:95:e3:b1:5b:85:34:7b:ea:cb:5a:69:
         4a:2b:cc:20:6d:b4:ce:7a:5c:4b:88:88:b3:d1:2e:5e:a6:29:
         cb:02:1d:d8:9b:b2:8a:ff:f2:5e:60:67:c3:31:d0:a4:29:5a:
         83:dc:7a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:15:50 2026 by rpki-client