Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/ebd1cf4e-93d3-3961-b615-09b9940fb1ee.roa
File:                     ebd1cf4e-93d3-3961-b615-09b9940fb1ee.roa (raw, json)
Hash identifier:          31+Xuj+TC5u7kM5igxdPSFZXp7qLOoLeCLyA9Srde1k=
Subject key identifier:   D5:A6:C0:98:B3:6F:9C:75:CD:5E:59:35:8F:7B:7C:6A:A4:D5:AA:8B
Certificate issuer:       /CN=22d0e02a-e4f0-4960-ad79-68f3b53a3861
Certificate serial:       010D0C9F4328584DF4DB590A0B66461A290F0A80
Authority key identifier: 7B:AD:C0:FB:0B:DF:43:6A:C8:C8:A5:9E:5B:3D:44:12:94:A3:5C:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/ebd1cf4e-93d3-3961-b615-09b9940fb1ee.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     63201
IP address blocks:        147.160.168.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:59:0a:0b:66:46:1a:29:0f:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d0e02a-e4f0-4960-ad79-68f3b53a3861
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=455851c9-98b1-43f5-8f8f-de03e3069032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9a:cb:2a:9c:21:1c:47:7f:49:5b:47:d7:f4:
                    d8:5c:f1:9f:96:59:48:1b:c1:aa:b1:d4:3d:5d:78:
                    8e:53:22:df:0e:7e:6b:1f:c5:00:8e:79:bf:7d:be:
                    73:d2:0d:af:93:35:ec:06:53:22:34:6c:77:19:8f:
                    f6:ff:9a:94:03:b5:93:a1:b3:17:f0:b3:cf:0a:95:
                    18:10:5e:92:8f:a5:01:cf:41:97:c6:1f:4a:12:aa:
                    d0:9b:f9:47:16:db:5a:f8:fb:23:c2:00:4b:89:e4:
                    d3:23:6e:37:31:4a:62:86:46:6a:69:7f:57:64:51:
                    15:2e:73:4c:95:fb:d1:43:b7:7c:2d:5c:82:f1:54:
                    17:4c:ce:4a:6c:6b:59:8b:35:c6:c3:3a:11:9e:c1:
                    ce:ac:f9:62:b9:bb:57:5e:f3:f1:e0:1d:63:e8:0a:
                    0b:f0:ed:33:13:3c:68:97:89:61:17:52:2b:0b:8e:
                    73:1d:ff:0f:ee:e9:a3:b9:7e:1b:95:0c:6a:83:30:
                    fc:be:e9:40:7f:74:03:98:fa:ee:04:d3:13:08:0d:
                    86:2e:a1:49:3a:c3:5f:a7:ae:e8:9c:b7:89:a5:1c:
                    37:83:e7:a0:ac:6b:2c:fa:8f:e5:73:b3:89:69:d9:
                    f2:ba:66:62:51:96:32:f0:5a:50:bf:89:b2:fe:2a:
                    97:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:A6:C0:98:B3:6F:9C:75:CD:5E:59:35:8F:7B:7C:6A:A4:D5:AA:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/ebd1cf4e-93d3-3961-b615-09b9940fb1ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.crl

            X509v3 Authority Key Identifier:
                keyid:7B:AD:C0:FB:0B:DF:43:6A:C8:C8:A5:9E:5B:3D:44:12:94:A3:5C:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.160.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:e5:72:3e:50:ae:e5:ee:75:4a:2b:9a:8e:82:0a:1f:90:f9:
         31:bd:72:4f:be:5c:02:dd:1d:43:c2:24:3e:dd:12:60:d8:8a:
         6f:ea:bb:49:bb:07:14:84:9c:d4:b6:a5:81:76:09:d2:97:b5:
         a6:09:40:1f:61:42:ba:03:8a:1c:ed:e4:3e:84:86:47:f1:c7:
         10:b7:79:be:e8:7c:37:30:f4:05:74:2c:af:c4:4e:8a:98:86:
         fb:9b:b6:94:a1:75:59:57:e1:c1:0e:74:64:71:72:46:16:6a:
         df:b2:fc:12:16:fa:e6:64:30:9a:c6:14:52:6e:b2:49:6e:d8:
         3c:1d:1d:bf:0f:37:c8:23:9d:c7:d0:53:8e:a2:14:a7:d0:30:
         bd:b6:fd:e0:50:6e:91:3b:2d:8c:5c:67:1d:b3:8f:ca:cf:0a:
         47:4b:1b:c7:8c:a9:87:8c:cb:ca:5d:0e:04:bb:3d:f2:7b:d0:
         07:3a:ad:97:f8:a4:a3:b3:5e:78:8e:b5:d1:c0:eb:3c:6b:d4:
         7f:b2:78:02:08:2d:4d:b9:ab:32:bb:b5:32:39:29:02:5f:1e:
         ba:71:2a:2c:e2:08:16:92:57:12:1e:cf:bd:dd:04:20:aa:df:
         de:e4:d1:89:e8:03:d3:3a:75:32:cc:66:33:b0:1f:9c:82:25:
         14:f2:6b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:11:09 2026 by rpki-client