Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/9a7eb163-f63b-3bf5-a5a5-ad7f75c7d642.roa
File:                     9a7eb163-f63b-3bf5-a5a5-ad7f75c7d642.roa (raw, json)
Hash identifier:          mRWy6+FP7Q0/SGh8+akdmhrLv9S63FG1it5nK+8ml+0=
Subject key identifier:   82:7D:0E:93:5C:12:FC:80:45:00:7C:63:90:F8:A5:B8:1C:B2:E2:89
Certificate issuer:       /CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92
Certificate serial:       010D0C9F4328584E18AEF17B40E24AA3C2734200
Authority key identifier: FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/9a7eb163-f63b-3bf5-a5a5-ad7f75c7d642.roa
Signing time:             Sun 07 Jun 2026 21:00:12 +0000
ROA not before:           Sun 07 Jun 2026 21:00:12 +0000
ROA not after:            Sat 05 Sep 2026 21:00:12 +0000
asID:                     18994
IP address blocks:        162.134.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:18:ae:f1:7b:40:e2:4a:a3:c2:73:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92
        Validity
            Not Before: Jun  7 21:00:12 2026 GMT
            Not After : Sep  5 21:00:12 2026 GMT
        Subject: CN=775a6593-9761-4e0b-b439-b1a184c030e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:05:17:c9:42:05:31:ca:e2:10:32:11:1d:63:
                    ad:50:5e:08:1f:5a:a0:be:0d:17:fc:c5:f2:29:0d:
                    0c:c5:3f:ba:fc:bb:c6:0d:57:6c:9e:c7:ec:93:24:
                    04:c3:20:06:f4:da:35:69:45:c4:1b:b6:6c:0e:ef:
                    e4:8e:9c:c5:43:0d:0d:f8:3d:48:f5:aa:8c:97:cd:
                    d3:ce:fe:24:62:46:6c:bf:fb:20:b9:d7:f2:67:c2:
                    c0:f3:f4:d3:95:52:33:2e:da:f2:a2:52:54:d9:21:
                    b1:3a:1d:fb:83:d2:09:94:90:ec:0b:8d:33:80:c4:
                    08:74:0b:92:40:d9:4a:b4:07:bd:e3:2e:a5:6a:84:
                    f2:f4:81:1b:18:3a:89:78:e2:80:ec:90:61:64:56:
                    c6:b8:3a:38:6c:83:5d:5e:bc:7d:05:e8:3d:e3:35:
                    e3:a9:4b:1e:84:2b:68:f9:44:43:05:e5:53:98:ac:
                    fc:c4:af:30:6c:a4:3d:bb:1c:6d:da:cb:b1:61:23:
                    80:b9:ed:f0:8d:8c:89:61:88:26:03:10:9f:ea:9a:
                    7e:76:ca:8a:ba:9e:51:85:45:53:cb:b9:b9:74:cf:
                    c6:5a:1f:67:2f:59:8a:97:0c:50:2d:a6:46:ed:29:
                    5f:7c:c8:c5:03:f0:11:94:64:05:9d:c8:e5:2a:32:
                    a8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:7D:0E:93:5C:12:FC:80:45:00:7C:63:90:F8:A5:B8:1C:B2:E2:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/9a7eb163-f63b-3bf5-a5a5-ad7f75c7d642.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl

            X509v3 Authority Key Identifier:
                keyid:FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.134.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:3c:ba:ca:95:f2:e3:9a:31:a6:30:f1:58:88:bf:86:de:ae:
         f5:31:6c:2e:c0:84:fa:4e:53:6e:9f:39:e7:3b:50:74:d3:b5:
         97:c0:77:28:ca:17:93:08:5e:88:73:a1:8f:40:91:91:fa:9b:
         88:b0:40:74:49:9c:f4:8a:8b:9c:73:91:b7:b5:ee:91:f1:b3:
         f9:28:23:7b:4d:84:fd:e9:f0:9c:b8:f1:d8:4e:b4:cb:6e:8d:
         cd:83:22:c5:bf:76:9d:01:a8:40:84:81:73:7f:38:3a:e5:8f:
         3d:b0:97:01:47:5f:e9:ca:53:2f:ab:69:11:31:37:9a:b1:25:
         27:3b:a4:7f:1b:a5:bc:6a:12:b6:80:ca:2e:64:cf:95:60:80:
         d6:03:a2:f3:9e:b2:55:c9:2f:d5:79:e9:96:f3:2b:fb:33:72:
         e9:d1:64:81:27:a7:b8:53:91:e9:8f:c8:a4:e4:73:25:45:a7:
         19:0d:14:53:b4:85:9d:4e:e9:b5:13:7a:50:1f:11:dc:71:01:
         74:0b:12:be:4e:19:b8:48:94:4f:d6:63:d6:41:58:8e:3e:2c:
         a1:0f:5b:95:9d:17:18:63:9a:46:a3:cc:73:67:f3:27:76:ac:
         7c:36:85:ad:5f:83:c1:45:c2:26:4f:cd:26:e6:28:d0:32:b9:
         23:29:82:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:14:55 2026 by rpki-client