Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/a570bcc4-0473-34be-a001-4329ef970092.roa
File:                     a570bcc4-0473-34be-a001-4329ef970092.roa (raw, json)
Hash identifier:          dYWy7ex/BkujgJlybOWKxMncz//ij5i6gfKT7LxSFJk=
Subject key identifier:   EE:2D:F3:64:C1:88:BF:A2:CA:51:CE:A1:40:7B:3D:D3:6A:8D:A3:5D
Certificate issuer:       /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial:       010D0C9F4328584D55BA37C88A9D74DC675FAD40
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/a570bcc4-0473-34be-a001-4329ef970092.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     20718
IP address blocks:        162.252.156.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:37:c8:8a:9d:74:dc:67:5f:ad:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=a987701c-bc4f-4c59-b5d7-8c13d249ec68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:66:35:01:be:53:e8:17:a9:d4:c2:bb:e9:a8:
                    2d:1e:b9:1e:1f:ac:30:2f:e7:b4:89:2f:54:98:9b:
                    55:bb:87:78:67:db:69:b9:ff:d9:64:39:7b:7e:91:
                    3d:cf:3b:38:9b:af:35:22:31:dc:bf:11:3f:e6:cd:
                    89:9e:bd:6d:06:68:a6:ca:9d:32:a4:6c:52:96:d2:
                    de:f8:c6:c0:fb:38:55:e1:42:64:24:94:c9:a3:a0:
                    5a:7b:06:74:39:04:33:fa:57:36:fc:0f:71:68:40:
                    84:ed:70:07:17:a6:c6:9f:ef:95:14:5d:a3:90:59:
                    2a:12:95:09:9d:01:16:f9:1e:a3:43:13:d3:f6:af:
                    5a:81:ca:93:24:75:03:fa:73:1c:17:dc:25:5f:39:
                    0a:ed:ea:86:b6:b6:68:44:1f:e1:e1:5d:f3:09:2e:
                    5a:5c:ce:e6:d6:80:3f:b0:d3:85:cd:42:35:b8:c2:
                    88:9f:24:a5:59:d5:35:da:31:27:9b:c7:2f:38:a8:
                    ce:d6:19:2b:3d:5b:c9:5e:94:70:2c:ca:3a:b6:1a:
                    92:14:6b:2b:ab:e7:95:3a:14:87:c1:62:d3:79:b5:
                    9d:1b:8c:76:52:44:d7:9e:0a:fa:e9:65:79:c8:d1:
                    d2:ff:93:75:de:b1:2e:cd:28:ae:ce:2f:18:4c:df:
                    6b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:2D:F3:64:C1:88:BF:A2:CA:51:CE:A1:40:7B:3D:D3:6A:8D:A3:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/a570bcc4-0473-34be-a001-4329ef970092.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl

            X509v3 Authority Key Identifier:
                keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.252.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:ca:fd:bc:26:31:df:47:cf:d7:02:bc:23:4a:02:f9:08:ba:
         25:fd:a1:cb:71:19:e1:28:43:66:66:d6:c5:96:11:a8:db:01:
         22:8a:4e:31:d6:89:70:45:d3:0f:b2:f0:7c:87:0c:41:9f:76:
         37:93:33:87:9c:ab:e3:10:e9:eb:31:1a:93:fb:00:f5:09:9b:
         6b:ab:bd:fb:7f:9c:94:87:b4:13:ea:dc:5d:79:88:b8:be:5e:
         01:42:5b:b0:b0:80:5c:20:74:a2:4b:a4:d4:fd:4e:5d:39:3d:
         1b:d6:fe:7d:19:41:28:5a:54:4d:e5:60:30:31:31:71:6a:43:
         b8:52:89:b9:44:95:52:3f:b7:57:2e:57:7d:39:d5:e0:da:59:
         8a:3d:1e:c8:25:eb:54:19:d7:1f:74:c0:68:df:9f:f0:da:44:
         01:b2:5e:65:ea:40:dd:d4:2d:b0:23:f3:45:05:5b:bd:96:86:
         53:c1:e3:db:c6:ce:5b:67:2c:14:db:51:92:9d:8c:2e:4a:32:
         a8:87:bd:b8:e9:ec:ff:6a:fd:b2:9d:2f:a4:a1:83:94:36:08:
         0c:6b:87:4a:fe:97:e9:80:d4:78:b8:69:60:82:3a:c4:b3:0d:
         f3:2e:08:de:69:27:9c:23:02:de:8d:1b:7b:3c:74:6a:78:07:
         62:1a:73:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:06:21 2026 by rpki-client