Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/ddb2afa1-7e36-3ac3-9514-51ff2b9d5018.roa
File:                     ddb2afa1-7e36-3ac3-9514-51ff2b9d5018.roa (raw, json)
Hash identifier:          /Eq/Vd7lrIyN+jIEzNNO8oIXRddp6nxasqDPaWuDTQo=
Subject key identifier:   C8:BC:AC:60:FD:F6:7B:7F:43:BB:18:90:E6:72:63:9F:A7:B8:72:63
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584DF4DB5C85CB5819B2B3343600
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/ddb2afa1-7e36-3ac3-9514-51ff2b9d5018.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     19886
IP address blocks:        171.162.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:5c:85:cb:58:19:b2:b3:34:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=05cf279b-dd9d-4f4b-9be6-5a2ae1ec64b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:33:fd:a1:fd:1e:59:bb:34:ed:06:54:52:de:
                    12:6b:0a:ed:f9:4a:d3:08:3e:97:7d:6e:0f:fb:a3:
                    2f:89:7b:54:7e:5d:c8:27:68:eb:c4:3d:53:52:7b:
                    67:d5:fd:79:b5:f2:76:f4:42:9e:1c:99:d3:34:0a:
                    bb:0a:a5:c8:4e:b1:c5:97:d8:fa:72:a8:e6:73:df:
                    ab:5e:32:20:e2:54:1c:db:27:75:77:17:ed:24:91:
                    65:77:56:b0:4e:fd:d3:3f:aa:96:69:a9:61:c9:45:
                    3d:db:ad:04:dc:85:42:8e:38:0e:af:24:a6:a1:6a:
                    42:28:6c:7b:54:74:9c:d4:36:c8:2f:e7:ac:42:1e:
                    53:5e:cc:51:7d:18:17:18:69:43:dc:9e:d5:f3:fa:
                    d3:52:c4:f6:92:03:c9:65:21:41:fa:f4:62:49:a5:
                    60:c8:1f:a2:ce:b9:a9:56:46:49:40:70:6b:07:6f:
                    5b:7a:90:06:7d:e3:59:5f:da:b5:6a:73:73:2c:b0:
                    9d:f3:eb:7b:bf:98:7a:da:59:e6:12:8e:a5:27:a9:
                    f5:3e:23:ff:85:32:0b:bb:4e:6c:4a:74:bf:1b:d1:
                    1f:c7:ba:41:4e:25:16:cd:29:c2:1a:0b:4a:5e:d2:
                    fa:16:cc:b3:66:33:3c:c7:b4:98:53:58:86:d9:c4:
                    e8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:BC:AC:60:FD:F6:7B:7F:43:BB:18:90:E6:72:63:9F:A7:B8:72:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/ddb2afa1-7e36-3ac3-9514-51ff2b9d5018.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:d8:ec:d2:46:23:7e:45:c3:fd:6a:a2:0d:f9:a3:f6:22:b7:
         3a:da:ad:d5:5a:75:7d:65:ed:84:8b:8a:f5:d5:be:86:96:86:
         68:2b:77:48:cc:e0:4c:fe:e1:aa:55:83:d6:41:ad:63:bb:97:
         a4:86:57:a8:fa:96:60:0d:20:e1:32:c1:6f:1b:f8:d5:92:89:
         62:8e:04:43:7e:48:17:fd:86:b6:fb:3d:f5:81:44:37:40:91:
         05:c6:63:47:70:c2:bb:91:98:6c:2b:98:25:b8:b4:b7:18:a5:
         79:f3:43:6a:a9:95:62:e0:cb:17:6c:68:2f:22:d8:43:24:46:
         25:a5:a6:f5:1e:61:7e:fc:ff:04:68:55:b1:c3:c3:80:bd:aa:
         55:12:b3:61:cd:08:c9:1b:f1:b1:df:c4:5f:fd:b0:a5:b4:2a:
         4f:6b:28:fd:bc:b2:da:b3:ca:50:03:54:c1:7a:b3:2d:be:5c:
         9c:c5:f9:ea:f2:39:12:7c:ef:73:c6:d1:c5:3a:8b:28:da:c3:
         7f:ca:26:bc:28:09:e3:a7:ed:0f:b0:28:b6:b7:92:cb:b5:a6:
         b5:5d:ee:ee:97:fe:3b:e9:79:e6:86:93:96:df:f5:8a:e0:ec:
         f8:de:f7:de:ff:3c:b1:fb:6e:03:76:74:fe:3f:73:48:0d:9e:
         d6:53:1e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:03:06 2026 by rpki-client