Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/a6803dbd-6e50-3b8c-be44-0cfec6d821e5.roa
File:                     a6803dbd-6e50-3b8c-be44-0cfec6d821e5.roa (raw, json)
Hash identifier:          y7HMygivQwcRqQiQQnVzzLcXUJVwlLhWk3SUscYwDAA=
Subject key identifier:   14:AA:FB:61:53:3C:33:2C:D8:19:EC:25:95:48:84:F0:23:EE:ED:B3
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584DF4DB61DAC962BBB576432090
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/a6803dbd-6e50-3b8c-be44-0cfec6d821e5.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     19886
IP address blocks:        171.162.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:61:da:c9:62:bb:b5:76:43:20:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=994fc856-79f3-4671-ab5a-0740fa8c9ce4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0a:8a:2a:08:f5:68:03:e8:ef:97:8e:bb:65:
                    37:5a:9d:64:e7:3f:ff:53:ac:3a:6b:bb:df:61:c5:
                    d4:c5:7a:c6:43:af:7c:71:2c:5b:1b:af:30:1e:0a:
                    32:b3:48:d2:0d:1e:eb:25:ad:75:d0:bb:48:15:41:
                    75:41:03:89:5e:e0:a1:07:a6:1e:a8:29:4d:b2:66:
                    34:73:35:5c:cb:97:76:84:c0:c9:9f:39:27:99:ff:
                    92:1b:1d:8e:e2:78:4b:65:72:79:ab:9b:4a:22:10:
                    30:f0:4b:e5:17:9c:64:a2:eb:80:83:6b:06:6c:85:
                    fe:8a:e9:ed:f4:85:1d:06:95:2b:5e:a8:69:c4:7b:
                    be:9a:9e:58:62:18:8d:3a:3c:58:14:3d:e8:37:fc:
                    d1:3d:2f:fe:a6:4d:87:5b:5c:af:de:91:fe:97:17:
                    02:9f:fa:6f:d7:06:a8:aa:a0:60:2d:21:fa:8d:0a:
                    5d:0b:f1:c5:42:5a:17:6f:49:e0:9e:37:f1:16:1c:
                    0b:bf:4b:94:00:be:c0:39:e4:a1:91:4e:4b:d7:22:
                    e3:28:8f:76:c7:bf:67:5c:3c:29:94:b2:b1:34:2a:
                    18:06:07:be:fb:ff:ed:e2:46:26:27:fd:cd:3f:4e:
                    45:ae:d3:0c:7b:6a:c9:ba:9b:a5:75:71:5a:c1:d0:
                    56:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:AA:FB:61:53:3C:33:2C:D8:19:EC:25:95:48:84:F0:23:EE:ED:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/a6803dbd-6e50-3b8c-be44-0cfec6d821e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:93:54:75:7f:a2:68:ec:08:58:c6:1a:be:b0:0b:ab:2d:75:
         2d:0b:06:b8:40:e3:a4:6a:0d:46:4a:70:ed:04:b4:05:5f:3a:
         91:70:e6:b6:63:80:6d:dc:08:19:55:33:f2:9c:11:c6:bb:fb:
         5f:94:3d:2b:00:30:60:e1:48:f1:3d:e2:15:89:60:9c:61:1e:
         78:31:0a:18:b1:fd:84:88:32:69:20:01:9d:82:0d:41:e4:3f:
         ee:46:20:a0:64:27:89:06:5a:73:2e:ba:af:5a:dc:8b:c3:57:
         83:46:7d:af:d9:46:48:a9:ed:78:77:5f:c3:2b:0d:23:61:e2:
         ff:5a:0f:cd:20:78:2f:33:02:d7:48:1a:63:6f:14:3e:c0:79:
         cc:8a:18:6c:22:8e:6f:b7:3f:10:22:e4:09:db:98:59:b7:eb:
         ea:59:8b:f3:93:29:82:56:67:75:8a:03:d2:88:ce:fd:3d:1a:
         b1:1e:09:4d:ec:ec:04:5b:52:19:50:2e:61:18:5b:53:c1:03:
         2e:b9:95:75:30:9c:06:26:f4:14:a1:c2:a1:99:63:6c:d3:9a:
         cf:02:58:4f:70:20:3f:45:c8:e9:96:3b:2e:72:82:15:46:f4:
         ac:4f:be:65:ab:9b:fa:cc:7f:12:ca:c7:0d:ac:b5:8f:f0:5a:
         79:82:d1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:02:05 2026 by rpki-client