Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/0a8325d9-ce81-32a0-a272-b8868b4043d4.roa
File:                     0a8325d9-ce81-32a0-a272-b8868b4043d4.roa (raw, json)
Hash identifier:          RSD0PWYBYN0RnNOlyfvnujCXr95CYVbDPp5lpN6AtC8=
Subject key identifier:   7B:C2:BE:B5:D2:F0:2A:A4:03:A3:74:6A:B9:BC:38:F3:BA:1E:D9:4C
Certificate issuer:       /CN=69233f52-8a17-4eb0-ae6a-62c861686718
Certificate serial:       010D0C9F4328584D0647A89EA63D320FAF8493CF
Authority key identifier: 79:00:BA:75:0D:A9:7C:C7:52:2F:26:3F:AB:EF:F3:8E:F3:84:81:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/0a8325d9-ce81-32a0-a272-b8868b4043d4.roa
Signing time:             Sun 01 Mar 2026 14:00:41 +0000
ROA not before:           Sun 01 Mar 2026 14:00:41 +0000
ROA not after:            Sat 30 May 2026 13:00:41 +0000
asID:                     401838
IP address blocks:        167.253.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/69233f52-8a17-4eb0-ae6a-62c861686718.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/69233f52-8a17-4eb0-ae6a-62c861686718.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:06:47:a8:9e:a6:3d:32:0f:af:84:93:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69233f52-8a17-4eb0-ae6a-62c861686718
        Validity
            Not Before: Mar  1 14:00:41 2026 GMT
            Not After : May 30 13:00:41 2026 GMT
        Subject: CN=9b8861a2-e9b4-49b7-8732-bac416a30fc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:39:69:ed:5d:51:3f:a6:af:c4:3a:af:6d:c2:
                    0f:b6:bd:1f:a4:71:75:00:8a:84:03:4b:f5:18:7e:
                    01:d0:9d:2d:45:73:a7:28:ea:0f:8d:f3:c5:b6:01:
                    19:20:0e:e7:30:f0:a4:f4:5b:2a:22:69:ef:bb:c8:
                    f3:bd:92:bf:cb:0f:7f:b5:87:d6:11:a0:31:13:4e:
                    f6:da:6f:36:b0:f3:46:32:d0:ef:f4:2b:e2:f4:ca:
                    0c:71:4b:35:2e:be:e4:f0:38:d1:22:3d:06:f1:f2:
                    32:fd:4a:cf:f3:39:52:ce:1b:a4:ab:84:c3:d8:46:
                    9f:24:8c:8a:17:02:8d:cf:de:50:5e:fa:fa:8f:4b:
                    07:fa:77:15:f2:83:b5:a4:01:bf:d2:b4:9c:2d:30:
                    c8:61:13:8e:5e:13:5d:bc:59:1f:0f:47:00:e0:20:
                    89:cf:9c:ce:ba:7c:c9:bc:48:29:7b:c3:96:b1:6d:
                    fa:72:49:1e:cc:0b:3f:f3:8b:0b:6f:c4:ed:2c:c5:
                    26:2e:7d:c2:27:41:05:47:46:f9:d2:23:14:25:d3:
                    28:37:ca:0c:8e:0c:91:d3:03:02:95:9f:5d:a2:39:
                    7d:68:0d:53:98:de:ee:32:c8:d0:a8:4f:9c:7f:99:
                    38:b1:d4:03:50:4a:a0:7d:e4:29:44:a5:99:ae:5d:
                    73:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C2:BE:B5:D2:F0:2A:A4:03:A3:74:6A:B9:BC:38:F3:BA:1E:D9:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/0a8325d9-ce81-32a0-a272-b8868b4043d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/69233f52-8a17-4eb0-ae6a-62c861686718.crl

            X509v3 Authority Key Identifier:
                keyid:79:00:BA:75:0D:A9:7C:C7:52:2F:26:3F:AB:EF:F3:8E:F3:84:81:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:0f:93:d9:9e:f6:50:d2:89:ae:a3:b7:8f:67:7e:61:7b:47:
         f8:89:60:cb:1f:f2:b5:80:54:f5:c8:e4:d7:aa:d7:be:d1:13:
         d4:9b:03:62:d1:09:5d:bd:0d:cd:e2:d0:a3:d2:fc:88:d4:cc:
         44:73:12:b0:dc:c0:f5:10:d9:b3:14:f0:63:14:1a:1d:b3:c2:
         9f:7d:fa:84:f7:5a:7b:28:63:b4:a9:87:19:bc:26:7b:71:d2:
         30:e8:6f:8d:05:d6:dd:bc:4a:3f:35:e2:dd:18:4d:97:2a:9c:
         a9:7c:05:6a:ea:ce:7c:03:7a:9e:24:94:2a:33:8f:10:e4:be:
         80:d9:c0:e7:93:54:c8:e6:b2:c5:7a:15:b4:0e:f1:cb:e5:e5:
         7b:f6:dc:48:d8:68:1e:28:4b:ee:53:2a:32:ad:b6:57:29:b1:
         a2:8a:f4:d8:94:df:f0:6a:6d:0f:2f:6d:1c:8b:d7:c5:12:39:
         ee:eb:d7:e0:66:3f:de:0f:51:24:0f:c9:b5:00:be:14:b4:39:
         6c:07:5d:3c:69:38:95:b9:92:07:03:77:1d:bd:4a:ba:00:e5:
         48:68:cf:18:d0:dc:ba:b9:44:32:e9:08:a8:d3:4c:ac:46:b9:
         63:28:16:d9:8e:f6:c1:6c:43:be:95:dd:0b:3c:d9:8e:52:61:
         d0:0f:4c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:30:13 2026 by rpki-client