Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0/cd1efd4f-eafb-3b43-ba33-cc5f12dca3b7.roa
File:                     cd1efd4f-eafb-3b43-ba33-cc5f12dca3b7.roa (raw, json)
Hash identifier:          sQdypeRRjCyroyZLrsYW8Nk+U75/pDj444RAyPMQjZg=
Subject key identifier:   31:0E:A5:CF:36:86:9B:A8:8B:71:B5:D5:9D:EB:7F:9C:54:E0:AE:B5
Certificate issuer:       /CN=7dd319be-2876-403e-ba86-24d27aaa8fc0
Certificate serial:       010D0C9F4328584E1E44494D831F5AB2336B9400
Authority key identifier: 16:AA:4C:89:91:D8:F2:EA:74:E2:70:1C:43:61:F4:D9:D9:6A:20:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0/cd1efd4f-eafb-3b43-ba33-cc5f12dca3b7.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     203107
IP address blocks:        162.217.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0/7dd319be-2876-403e-ba86-24d27aaa8fc0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0/7dd319be-2876-403e-ba86-24d27aaa8fc0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:49:4d:83:1f:5a:b2:33:6b:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dd319be-2876-403e-ba86-24d27aaa8fc0
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=ddf74571-1a39-458c-870a-bfc5ef10d899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0e:b5:53:b7:0f:fe:d3:18:f2:6a:e6:21:25:
                    e5:23:e6:7b:0c:73:f8:f6:bd:ac:e8:89:e9:ea:f5:
                    67:a8:79:13:2a:04:86:c1:6c:84:60:c1:b9:86:04:
                    50:8b:6f:ad:41:9a:a0:fa:ef:73:f8:b1:06:73:c0:
                    8f:66:f1:c0:ff:d6:db:06:da:20:51:d9:33:d0:c4:
                    61:dc:ab:08:8a:89:22:4c:37:d9:10:9f:ad:da:ce:
                    0c:3d:43:22:5f:7e:d8:d3:9c:70:6a:a4:2f:de:46:
                    84:4a:74:ae:28:0c:fc:fb:4f:25:16:63:de:90:4a:
                    52:b4:e9:99:fe:fa:20:98:2c:9d:da:01:d8:16:6e:
                    55:8d:c8:20:eb:4b:60:93:ad:f8:bc:d8:2f:ae:82:
                    c9:89:f6:62:50:65:64:d2:98:20:e9:43:5f:d5:78:
                    39:47:7d:58:56:0a:84:64:e1:89:4d:b6:3d:e5:e2:
                    2f:3e:b7:17:c8:91:8a:c6:0a:23:e5:d8:3b:fb:f3:
                    bb:7b:f9:9b:2a:09:56:7f:64:86:35:b3:e8:b9:42:
                    d0:a4:8b:a1:b1:a3:a9:47:32:d0:0c:df:ef:6d:dd:
                    45:e2:c6:28:5f:a8:f6:f6:59:13:17:26:6d:f3:d8:
                    10:d9:f1:07:c2:a0:5f:ec:03:5f:97:b2:b3:fc:db:
                    9b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:0E:A5:CF:36:86:9B:A8:8B:71:B5:D5:9D:EB:7F:9C:54:E0:AE:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0/cd1efd4f-eafb-3b43-ba33-cc5f12dca3b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0/7dd319be-2876-403e-ba86-24d27aaa8fc0.crl

            X509v3 Authority Key Identifier:
                keyid:16:AA:4C:89:91:D8:F2:EA:74:E2:70:1C:43:61:F4:D9:D9:6A:20:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.217.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:0c:cf:31:98:fe:a0:8f:0a:fe:14:9c:2f:9f:6f:f9:26:5d:
         28:d1:24:3b:9d:a9:8c:d5:22:f3:46:14:b5:55:7a:bb:85:43:
         6f:09:6e:0e:0f:bf:20:58:3c:3b:df:5f:e9:53:3d:c9:93:13:
         3c:64:5d:d9:b9:d7:30:5b:2c:8c:72:6d:d1:05:03:42:92:70:
         a7:60:f2:25:d1:e2:ee:4b:39:95:9d:97:4b:05:f8:9f:00:e4:
         1f:05:8f:e3:10:dc:79:27:78:3e:77:60:94:e4:3f:f8:14:53:
         3f:f4:eb:08:99:86:40:12:50:57:27:95:41:d2:4d:ca:18:c9:
         9b:cb:83:eb:2b:44:0c:16:dd:4b:cc:21:a3:cc:ef:42:3f:2e:
         7e:b8:6c:51:5f:5b:a6:d3:ce:2d:0e:d7:f5:40:8c:c6:b9:5d:
         28:93:11:f0:bd:17:e5:16:b0:9d:31:35:00:e4:ba:8e:32:f7:
         bb:d3:95:d7:a4:c3:ef:b2:d2:95:4d:24:a6:a0:cf:63:98:88:
         ff:2d:d9:8f:78:42:2d:9d:47:e8:e4:c4:24:c5:e3:27:29:76:
         f5:3b:a1:78:27:82:2f:db:b4:8d:69:3a:fd:01:19:4b:2c:2c:
         8c:b8:ec:e1:a4:fe:a1:65:39:77:0e:29:00:d9:f8:0f:b1:fc:
         2b:f5:ba:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:07:33 2026 by rpki-client