Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/69ea82a7-20b2-3fea-890e-0c5885057227.roa
File:                     69ea82a7-20b2-3fea-890e-0c5885057227.roa (raw, json)
Hash identifier:          aqcRD9Jxff0a5TblvGFjP+Tp3n2NK8RAmUB8SKFpluM=
Subject key identifier:   C8:75:C6:C1:BC:CC:67:4C:BA:E9:1E:F7:2E:5D:E8:9A:ED:8D:18:2B
Certificate issuer:       /CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
Certificate serial:       010D0C9F4328584E9BE5166DC5CF654C86B2D884
Authority key identifier: AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/69ea82a7-20b2-3fea-890e-0c5885057227.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     30198
IP address blocks:        164.116.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:16:6d:c5:cf:65:4c:86:b2:d8:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=e260c898-4156-4e88-95a4-63c4aada6cc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d0:1e:65:fb:12:e1:5f:6e:e1:90:d0:38:13:
                    01:9e:28:37:32:6d:f6:a9:ff:8a:fe:32:30:74:f5:
                    11:67:73:54:93:8a:b3:eb:0b:50:f4:8b:37:95:2e:
                    d7:9f:56:f9:81:8a:b6:6c:7d:d4:e8:29:6e:a5:dd:
                    7c:a9:7a:4b:ff:cd:2f:a1:cc:df:ec:48:07:6f:82:
                    81:95:12:26:e2:3c:2e:a0:8b:8b:20:a9:2a:1c:5a:
                    97:52:c5:78:61:b2:8d:fc:ed:b5:68:03:4b:05:0b:
                    9e:3f:e5:9c:5a:66:10:08:dd:83:0d:e6:53:c1:6e:
                    be:de:cc:90:21:11:8b:fc:6a:52:be:f8:a1:a8:ba:
                    f2:9f:24:9a:7b:60:68:f6:e5:d3:74:e0:18:28:6f:
                    ea:11:3a:30:d9:f2:34:2c:c2:ea:50:4f:74:d4:1c:
                    d6:c8:46:34:3b:1f:8a:a6:39:6c:dc:56:0e:7d:41:
                    1c:59:fc:24:60:5a:76:51:c8:fb:2a:10:61:f2:89:
                    a9:f7:dc:c2:b7:e6:f9:d1:8f:ff:62:86:5b:44:04:
                    d6:db:c2:5d:5c:d7:33:e6:23:74:e7:cb:7c:80:fc:
                    58:a7:39:56:89:ca:34:1b:7f:58:34:95:22:f3:a1:
                    ba:19:37:96:e0:d6:7b:d8:c4:dd:78:1c:cd:6e:e5:
                    e2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:75:C6:C1:BC:CC:67:4C:BA:E9:1E:F7:2E:5D:E8:9A:ED:8D:18:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/69ea82a7-20b2-3fea-890e-0c5885057227.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl

            X509v3 Authority Key Identifier:
                keyid:AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.116.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:40:c2:01:f1:b1:e2:0c:97:28:59:0b:e0:53:d8:12:70:69:
         b1:33:32:64:17:b5:15:24:f1:2a:93:f4:27:b7:e7:42:6f:78:
         0c:7d:ee:fc:9a:ff:47:69:18:7d:a1:9a:b8:3d:18:31:0b:42:
         20:89:c3:72:2a:c9:91:ce:25:07:6d:7d:a4:f8:0d:c5:c8:68:
         e4:09:56:b0:e1:7f:14:28:ed:e2:ad:40:67:36:f3:b6:2b:a1:
         00:39:b0:df:91:5e:f1:87:a9:a9:25:42:16:0f:3c:06:c9:35:
         ca:b4:19:30:2a:d5:8d:fc:bf:00:36:ec:24:4c:9c:c4:a9:41:
         c9:e3:32:7c:5a:03:2f:70:ce:9d:d3:7f:04:9e:3e:37:f4:dd:
         0f:b7:f5:a8:41:e6:c6:b5:ab:d9:c4:74:59:e2:63:cc:1f:fa:
         f5:14:0d:ac:45:6e:d9:26:0b:b1:29:04:64:d0:04:fb:0d:05:
         f3:7f:89:b3:90:d6:01:b9:5a:e1:38:66:b3:72:7e:06:81:23:
         53:40:f2:b6:f7:a2:6c:38:3d:ed:0d:84:7f:d4:83:bf:4c:50:
         03:2d:92:68:59:1c:94:1a:6d:4f:10:96:6c:d1:43:d8:eb:bd:
         dc:be:83:fb:1b:b8:12:b3:ee:7d:6c:a2:47:81:f1:18:b4:24:
         eb:00:d3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:47:28 2026 by rpki-client