Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/4969497d-cdbb-3462-8386-28d4169411b3.roa
File:                     4969497d-cdbb-3462-8386-28d4169411b3.roa (raw, json)
Hash identifier:          w/Uk9KiZStyqzopGwpwi+/8Wispw9uNz+132K1aRH08=
Subject key identifier:   18:EE:CA:8F:9A:52:9C:8C:4B:5E:3C:34:2A:FF:9D:70:29:1A:C8:7E
Certificate issuer:       /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
Certificate serial:       010D0C9F4328584E296EF694F15D1CBD7BB08700
Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/4969497d-cdbb-3462-8386-28d4169411b3.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     14555
IP address blocks:        198.23.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6e:f6:94:f1:5d:1c:bd:7b:b0:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=978d1fc7-0720-4940-82e5-f89900fd618a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cf:c8:bd:c5:1f:c0:3e:d1:4c:8f:cb:7e:29:
                    93:e7:da:7d:ce:0c:4e:86:57:dc:0a:84:81:71:ba:
                    e5:b5:c4:f8:66:24:76:3b:14:1b:5b:03:3b:c8:5b:
                    c4:3e:78:72:0b:b5:49:61:69:e7:9e:6d:d7:23:c0:
                    c9:7c:53:a6:f9:6a:56:a6:c8:ae:e3:26:83:2f:c1:
                    54:76:e7:90:91:4b:ae:78:7b:93:95:32:f1:4f:d5:
                    ba:d3:a0:cc:ff:83:b9:f2:d2:94:be:cd:de:20:8a:
                    a8:d7:e7:8b:1c:da:85:8d:cc:b7:4f:e5:86:61:f9:
                    bf:e6:45:21:3d:b6:67:50:d3:1e:e9:32:43:3b:be:
                    65:45:8e:fa:26:f5:aa:1b:d4:28:65:04:a2:10:f6:
                    e4:95:df:f7:3f:e5:50:87:eb:bf:a7:fb:40:c3:d8:
                    61:c5:4f:52:0a:3a:98:88:46:0f:20:42:2c:4f:3f:
                    36:2f:a1:c2:ca:7f:e8:3d:3c:2f:21:5d:44:23:c4:
                    6a:32:b7:38:09:e0:a5:ed:50:01:e6:52:1f:16:da:
                    63:48:c1:55:46:e3:c6:01:b1:12:e8:f9:c2:99:c3:
                    90:8d:f0:8e:0e:fb:3c:4b:0f:8a:2a:15:d7:e4:57:
                    72:ca:e9:9d:d3:3d:d4:86:20:0c:70:34:b5:a6:ae:
                    06:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:EE:CA:8F:9A:52:9C:8C:4B:5E:3C:34:2A:FF:9D:70:29:1A:C8:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/4969497d-cdbb-3462-8386-28d4169411b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl

            X509v3 Authority Key Identifier:
                keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.23.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:d9:ff:97:ac:b7:a0:2b:b3:da:f8:7f:60:16:bc:41:34:96:
         03:2a:fc:21:e4:61:b0:55:7b:d9:a0:5a:9a:99:d1:f3:a8:90:
         c9:56:cf:5b:a3:50:e1:22:d3:53:93:9f:cb:21:56:37:7b:be:
         7b:79:a6:d9:34:6f:68:91:9e:fc:15:71:99:ea:56:49:5b:4a:
         70:72:88:ae:e0:c3:da:f0:24:13:03:6c:31:ed:82:5f:48:c9:
         f9:1b:96:e9:a5:1c:f7:84:63:65:03:4f:8b:51:82:5f:eb:76:
         2c:cd:63:b2:23:e7:58:7b:a6:43:8f:46:7b:0f:50:46:d9:48:
         24:81:1d:bd:18:70:e0:2c:60:8a:0e:e3:25:f0:c7:8f:8d:d4:
         63:f7:b5:0f:19:16:7f:2f:74:07:6f:1b:6b:d4:49:7f:74:51:
         a5:79:b2:7c:4c:7a:bc:07:3e:34:38:89:d2:79:a4:77:7a:a6:
         75:de:ba:be:70:81:3e:83:6b:d0:d2:4a:40:f2:07:12:8f:89:
         3b:c7:d2:90:42:5b:80:a6:61:46:a4:43:ec:ec:cd:1e:b8:be:
         6a:a0:df:d5:6f:ce:8d:13:94:12:0c:d2:4e:65:bc:7d:41:5c:
         e3:3d:2b:c5:d4:ec:ae:1b:8e:6d:20:07:26:ac:91:9d:fe:cf:
         51:e4:b5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:01:33 2026 by rpki-client