Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/8092af76-214c-34c1-a5f8-aad25351bfc1.roa
File:                     8092af76-214c-34c1-a5f8-aad25351bfc1.roa (raw, json)
Hash identifier:          5+jixDxzzeRi2+1KRV7s5RYoFdafGaWw07MjOmBNZv4=
Subject key identifier:   CC:95:8F:E1:39:80:76:FE:12:7F:2C:41:98:22:F9:8E:21:42:BD:E2
Certificate issuer:       /CN=5a3fe3a9-d9f7-4b8e-a037-877363c53113
Certificate serial:       010D0C9F4328584EA788A29693A3D8BA122BFF80
Authority key identifier: A8:C1:4B:3D:D1:52:6C:35:99:64:83:60:2D:FC:F0:4C:0A:BC:EC:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/8092af76-214c-34c1-a5f8-aad25351bfc1.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     22504
IP address blocks:        162.118.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:a2:96:93:a3:d8:ba:12:2b:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a3fe3a9-d9f7-4b8e-a037-877363c53113
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d6450df4-cbbf-4f20-8461-411fada7f9f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:dc:39:05:5b:6d:c3:b1:ec:64:b8:3a:6d:1b:
                    77:d5:eb:5d:f8:03:19:a1:3a:f1:2e:16:b5:c7:3a:
                    42:36:0f:55:4b:f7:00:f3:72:6a:8a:20:25:ed:85:
                    e6:f2:01:23:1b:93:b1:a0:0d:4f:9e:b1:91:47:e3:
                    11:fb:00:77:a8:3b:ba:d7:16:3a:2a:c3:a6:9a:fb:
                    22:d9:88:12:55:e7:28:da:a7:67:6b:a8:8e:ec:a7:
                    2a:4d:ed:2d:2e:6f:a0:99:30:e9:ef:96:b2:d0:eb:
                    f7:69:61:a2:00:b1:70:ad:db:40:2f:29:a5:d1:ca:
                    26:bb:eb:b2:f3:e5:f5:7d:01:3d:99:24:a2:3f:e1:
                    64:ad:14:48:38:c5:c6:7a:79:ce:ca:7c:3b:86:a0:
                    b7:1f:b1:a8:3c:48:c5:32:a7:c7:27:da:d4:d2:54:
                    99:91:0d:28:30:13:36:ed:09:e7:10:77:57:e2:87:
                    31:9c:76:31:92:e3:8f:00:83:43:9a:ed:51:c5:07:
                    77:78:e6:3e:4a:45:da:5c:53:4a:f9:0b:4c:d3:65:
                    15:9c:e8:48:b0:13:8a:f7:d3:d1:16:1d:3b:af:ae:
                    f3:2d:9b:1c:da:fe:90:25:76:87:f6:bc:b3:dd:8d:
                    fa:0c:5e:27:d7:37:bc:38:2b:d9:64:51:5a:f9:8c:
                    1c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:95:8F:E1:39:80:76:FE:12:7F:2C:41:98:22:F9:8E:21:42:BD:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/8092af76-214c-34c1-a5f8-aad25351bfc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.crl

            X509v3 Authority Key Identifier:
                keyid:A8:C1:4B:3D:D1:52:6C:35:99:64:83:60:2D:FC:F0:4C:0A:BC:EC:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.118.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:84:d6:4f:80:c0:58:be:88:5e:ff:76:b6:ee:3e:88:68:d2:
         57:8b:bf:d6:67:c0:e8:45:d3:dc:3b:14:f7:f2:7b:18:cb:55:
         e5:ad:5b:3c:09:73:e2:11:19:9a:bc:c7:f6:6a:f7:73:77:ad:
         29:80:e8:ce:f0:bd:98:12:1d:ef:03:ff:76:48:1f:51:83:6d:
         f7:f1:9f:05:ca:e9:8d:7c:49:88:4a:e0:82:41:ef:ee:d6:1a:
         25:7b:ba:fd:3a:fa:2b:c5:5b:c9:af:fa:f9:13:50:d2:0d:03:
         16:09:9f:c0:15:40:6f:5e:b0:18:ac:7d:27:b7:eb:61:9b:e1:
         56:ee:26:b1:ab:c4:22:50:d3:1b:01:1e:2d:13:6f:56:3e:6b:
         5a:74:25:14:e6:46:bd:5e:b7:f9:42:e1:5b:a1:57:03:7b:10:
         0e:a2:0d:46:21:51:28:60:fd:f5:ae:5b:3e:37:25:1f:f5:de:
         65:50:27:69:d5:83:c7:3d:12:5b:f6:12:ff:16:2f:19:53:78:
         bd:4c:6f:78:be:a2:81:cd:e9:9a:51:f1:8d:55:d6:17:1c:14:
         40:2f:5f:60:fe:70:43:1e:b4:8c:77:54:08:3c:65:07:fc:aa:
         37:e0:6d:c2:bb:d1:89:c0:89:fd:f9:06:44:ed:c4:9c:21:45:
         68:b2:62:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 00:34:41 2026 by rpki-client