Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/f835abe2-7204-3c66-98a6-8c7d2069c4a3.roa
File:                     f835abe2-7204-3c66-98a6-8c7d2069c4a3.roa (raw, json)
Hash identifier:          fN/qKWDqaRN2lcutEYxR6QGUCz2sdKjKtNn9CUsHP1M=
Subject key identifier:   EC:0A:5C:C1:5A:9E:60:B4:85:B7:C6:24:2D:6F:AB:57:EA:3C:10:48
Certificate issuer:       /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial:       010D0C9F4328584E016B30BBEAA6A6A9FEA5FE80
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/f835abe2-7204-3c66-98a6-8c7d2069c4a3.roa
Signing time:             Sat 30 May 2026 13:00:10 +0000
ROA not before:           Sat 30 May 2026 13:00:10 +0000
ROA not after:            Fri 28 Aug 2026 13:00:10 +0000
asID:                     931
IP address blocks:        167.94.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:01:6b:30:bb:ea:a6:a6:a9:fe:a5:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
        Validity
            Not Before: May 30 13:00:10 2026 GMT
            Not After : Aug 28 13:00:10 2026 GMT
        Subject: CN=286569b7-39e1-42cb-b7f4-ae07c80e0d92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d0:17:00:71:e8:64:23:7b:41:72:12:5e:55:
                    2e:b3:ae:70:3d:01:94:5d:2b:a1:1b:d6:52:7a:29:
                    28:1b:02:c2:b8:bc:17:c5:6b:73:d2:66:52:4a:85:
                    09:2d:c9:a6:eb:30:aa:8f:ca:df:9b:d2:01:8d:8a:
                    63:7a:4a:07:13:03:cb:b7:dc:6b:72:80:44:46:22:
                    5b:6d:f3:00:d6:d8:3a:ab:7c:f3:7d:02:93:a4:17:
                    7f:1a:35:66:94:f1:86:ac:e2:3e:a0:bc:33:a5:53:
                    85:a1:33:43:0b:45:62:30:d4:3b:2d:4f:c9:f9:3a:
                    db:2e:b6:7a:d2:38:43:59:7e:9b:41:de:69:a3:78:
                    21:2d:23:ab:6b:2b:7b:75:a4:30:89:65:31:44:13:
                    50:a5:75:a8:5e:ca:68:12:ec:70:4f:3d:ce:a1:34:
                    af:d5:e3:82:d9:4a:f9:c8:75:56:69:0f:1b:19:4c:
                    d2:64:f5:18:be:90:99:1c:74:e8:26:03:ad:c8:e2:
                    ee:b1:28:5f:64:26:7c:86:16:40:7f:58:7a:6c:ed:
                    b6:74:b4:93:96:50:02:cd:4d:53:a6:aa:12:bd:2e:
                    50:a3:df:1f:77:48:d4:ef:e6:ff:a1:92:e3:71:b7:
                    60:49:46:1b:bf:78:e4:9a:8c:bc:c5:ae:7e:71:dc:
                    30:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:0A:5C:C1:5A:9E:60:B4:85:B7:C6:24:2D:6F:AB:57:EA:3C:10:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/f835abe2-7204-3c66-98a6-8c7d2069c4a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.94.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:3f:29:b1:30:11:f4:81:2e:17:e8:89:db:6f:23:25:57:99:
         7d:98:1f:13:68:d6:da:6b:ed:5c:7c:e2:9e:40:60:f8:e6:a9:
         7b:db:5f:b7:48:4e:48:9b:c7:2f:1a:0b:c7:37:af:91:be:fe:
         7f:85:ed:13:62:00:64:c5:49:9b:a5:d1:af:bc:a6:a9:50:06:
         d8:34:12:4e:9d:2c:15:f4:a9:fc:ac:d9:16:c4:16:d5:2e:98:
         e2:4a:a7:17:6c:ab:02:18:3f:f5:2e:01:5a:73:af:93:7d:76:
         e0:ed:48:fb:df:41:aa:b4:53:c6:b2:07:a5:bd:4a:75:ce:9f:
         d8:3f:3a:1c:7a:3a:88:85:9c:2c:10:e2:29:66:60:af:50:67:
         7e:2b:0d:6a:48:94:3d:dc:3a:58:13:08:e2:94:eb:4c:ab:20:
         74:ae:ef:cd:c0:cc:aa:7e:39:47:20:90:73:13:5c:d3:a4:58:
         ac:d2:cb:7e:fe:b4:b0:4b:ee:21:a3:ea:d0:98:f6:bb:2d:37:
         34:a4:a4:67:ac:15:ed:fc:a2:9b:30:4b:16:4d:f7:ac:3a:c7:
         bd:cd:6d:1c:24:01:80:25:43:f7:1e:ed:3d:3f:ca:a2:86:bb:
         ce:32:df:0d:ba:4f:12:ac:d9:5a:06:bd:b5:d5:f4:68:f4:65:
         57:51:e1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:48:31 2026 by rpki-client