Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/97cfe007-0ab6-43e1-9c67-fb4446b0abf3/62bba412-5d5e-3718-8369-77efd12e1895.roa
File:                     62bba412-5d5e-3718-8369-77efd12e1895.roa (raw, json)
Hash identifier:          RSMLkK2kpQuZL8P1IqqamzA2jI0lGIhzgSPHSCXwtBg=
Subject key identifier:   7F:13:33:40:4F:DD:94:7C:36:6A:B3:B2:12:A0:CB:27:E3:C4:CF:A0
Certificate issuer:       /CN=97cfe007-0ab6-43e1-9c67-fb4446b0abf3
Certificate serial:       010D0C9F4328584E70BBD0DFFAAA9C2892EAF7C0
Authority key identifier: 03:6C:35:28:AA:4A:1E:91:4E:B7:98:BE:E3:C0:48:55:29:67:FF:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/97cfe007-0ab6-43e1-9c67-fb4446b0abf3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/97cfe007-0ab6-43e1-9c67-fb4446b0abf3/62bba412-5d5e-3718-8369-77efd12e1895.roa
Signing time:             Thu 09 Jul 2026 09:57:28 +0000
ROA not before:           Thu 09 Jul 2026 09:57:28 +0000
ROA not after:            Wed 07 Oct 2026 09:57:28 +0000
asID:                     63023
IP address blocks:        162.246.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/97cfe007-0ab6-43e1-9c67-fb4446b0abf3/97cfe007-0ab6-43e1-9c67-fb4446b0abf3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/97cfe007-0ab6-43e1-9c67-fb4446b0abf3/97cfe007-0ab6-43e1-9c67-fb4446b0abf3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/97cfe007-0ab6-43e1-9c67-fb4446b0abf3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:70:bb:d0:df:fa:aa:9c:28:92:ea:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97cfe007-0ab6-43e1-9c67-fb4446b0abf3
        Validity
            Not Before: Jul  9 09:57:28 2026 GMT
            Not After : Oct  7 09:57:28 2026 GMT
        Subject: CN=74abc20e-4e4b-408c-ab62-c29829a0fc56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:13:7d:3d:9f:10:14:34:f4:cc:69:ff:c0:d2:
                    be:bb:37:05:40:0a:47:2a:fa:07:4b:54:84:b5:9b:
                    76:89:ff:f2:bd:87:8e:98:80:30:29:39:8f:79:bd:
                    2f:b5:c5:68:e4:d9:ef:68:1f:2c:aa:60:b8:7b:04:
                    48:3a:15:5a:2a:6d:7c:a6:85:3f:89:f6:ef:c2:36:
                    5f:b4:0e:6c:12:41:ba:d7:63:09:f7:55:30:14:b9:
                    24:aa:72:2f:3d:b6:d9:c3:08:f0:90:14:94:a2:7f:
                    1d:18:23:69:62:34:c4:75:85:2d:30:87:8d:32:02:
                    3a:29:1a:36:c9:08:8c:a2:89:26:5f:1a:57:bc:c3:
                    f7:56:f3:b0:08:05:97:f5:2a:58:5f:7a:71:88:75:
                    32:21:56:3f:08:df:b3:b2:ef:f2:46:46:51:93:fe:
                    d3:c7:86:1c:dc:a6:b2:29:6d:9a:78:8b:0e:a8:d8:
                    2c:3a:d0:31:6f:48:64:62:8c:0c:12:75:38:6b:49:
                    54:f8:63:2d:60:6e:9e:bb:de:18:af:ad:4f:bd:11:
                    a4:13:d6:05:ac:89:e4:4b:51:52:9e:c5:cb:22:72:
                    8c:b6:51:67:1d:d3:87:1a:19:22:38:ea:0f:2d:02:
                    08:aa:78:2d:13:95:05:fa:7b:62:6a:e4:00:55:f8:
                    c5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:13:33:40:4F:DD:94:7C:36:6A:B3:B2:12:A0:CB:27:E3:C4:CF:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/97cfe007-0ab6-43e1-9c67-fb4446b0abf3/62bba412-5d5e-3718-8369-77efd12e1895.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/97cfe007-0ab6-43e1-9c67-fb4446b0abf3/97cfe007-0ab6-43e1-9c67-fb4446b0abf3.crl

            X509v3 Authority Key Identifier:
                keyid:03:6C:35:28:AA:4A:1E:91:4E:B7:98:BE:E3:C0:48:55:29:67:FF:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/97cfe007-0ab6-43e1-9c67-fb4446b0abf3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.246.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:c4:40:db:1d:4b:ee:77:32:53:c7:e6:98:15:23:e0:5c:6d:
         30:11:9a:7f:3f:1a:76:a2:c3:32:5a:25:88:89:3c:b3:3d:b9:
         18:de:83:e3:5e:cc:67:d4:c2:27:a9:cc:15:ae:5e:58:5b:69:
         ff:46:f9:cb:2d:d7:56:51:8f:d2:62:24:2b:03:7a:2f:f6:27:
         29:e0:42:58:a2:32:9d:a5:97:e1:00:b7:f4:0d:64:cb:4a:18:
         4b:39:d9:0d:c5:19:8a:8e:00:a7:7d:ad:d2:ba:1a:4a:2e:8b:
         d0:6e:6d:24:3d:18:2c:13:6a:55:19:a9:0e:7a:e2:c9:49:ef:
         0d:44:08:0f:6a:ec:b1:76:4e:f2:4a:ab:aa:df:3d:dd:56:06:
         19:7e:27:52:ac:26:ed:de:3f:79:ae:e5:99:90:ef:29:5b:38:
         5f:38:27:a1:ae:e7:df:c2:82:6f:1a:14:06:c7:94:41:59:f0:
         0a:c2:c6:7e:54:d9:78:c9:b9:2a:30:3e:e6:91:f1:e7:30:ae:
         d5:85:7c:9d:43:5b:6e:67:c5:19:d1:82:77:33:03:7d:c4:6e:
         75:9a:e3:aa:12:15:43:45:81:c5:7e:cf:0b:76:c2:01:52:89:
         0c:c6:5d:a7:64:c8:cb:e4:3c:70:4e:d7:15:20:59:5e:4f:b6:
         9c:53:ee:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 19:21:47 2026 by rpki-client