Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/4ac254ff-e70d-3c47-b69d-0b7f99a9aea5.roa
File:                     4ac254ff-e70d-3c47-b69d-0b7f99a9aea5.roa (raw, json)
Hash identifier:          DwqmKyt1zlQVCBvTmm4tIBt1ZQaXxRu1mIEy7tqnsoQ=
Subject key identifier:   22:D5:F6:68:CC:C4:EB:3C:29:B6:5C:4C:F5:8E:B1:46:EC:AB:1F:7B
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584E3946C01B2A586C4D91040D80
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/4ac254ff-e70d-3c47-b69d-0b7f99a9aea5.roa
Signing time:             Fri 19 Jun 2026 13:12:08 +0000
ROA not before:           Fri 19 Jun 2026 13:12:08 +0000
ROA not after:            Thu 17 Sep 2026 13:12:08 +0000
asID:                     54080
IP address blocks:        162.244.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:39:46:c0:1b:2a:58:6c:4d:91:04:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Jun 19 13:12:08 2026 GMT
            Not After : Sep 17 13:12:08 2026 GMT
        Subject: CN=a1caad90-4c92-47e6-8e88-8b123e0fe034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ae:1f:b5:f4:03:1c:66:90:cd:09:c1:c8:2f:
                    53:28:1a:6e:a2:95:15:b0:cd:dd:ed:6f:3c:98:12:
                    50:3b:12:d6:33:9c:46:80:40:ad:ee:9e:c8:85:22:
                    df:eb:c8:77:c0:6d:e8:82:3c:1f:21:e8:0d:5c:97:
                    76:6f:e3:8d:4a:38:72:06:34:5e:62:37:3f:92:e1:
                    66:a9:52:88:e1:82:4a:ac:7f:bd:0c:d9:7e:49:d8:
                    af:56:4d:db:80:86:25:73:1a:f4:b1:65:0d:93:18:
                    6b:1a:74:eb:92:c9:c8:e2:9b:7a:0c:af:63:5a:37:
                    66:c3:30:de:6d:d3:55:01:25:5d:9f:34:ff:c7:08:
                    45:f9:42:ee:78:3c:0d:1c:b1:49:89:d4:04:56:97:
                    83:7a:e8:cd:c6:3b:2a:ba:eb:2c:9b:ed:a6:d7:0a:
                    07:38:11:e5:42:1a:1a:c6:6f:6c:0d:1f:71:3b:ad:
                    68:8f:52:7c:1e:67:68:56:dd:cd:78:5f:ed:fd:49:
                    c9:80:23:69:bb:a8:41:ad:15:e1:c8:a2:2b:78:4c:
                    f8:31:a6:10:58:59:2c:15:39:0a:b1:5e:ab:a0:62:
                    13:46:bb:52:18:80:30:96:82:b8:66:f7:bd:bf:3e:
                    81:1d:37:22:f3:31:02:82:a9:5d:99:f9:53:21:15:
                    ba:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D5:F6:68:CC:C4:EB:3C:29:B6:5C:4C:F5:8E:B1:46:EC:AB:1F:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/4ac254ff-e70d-3c47-b69d-0b7f99a9aea5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.244.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:a1:0f:cd:0f:22:99:bd:b1:87:d2:99:87:cd:f2:48:70:35:
         a0:d2:45:cc:fe:dc:ad:12:b8:27:be:13:83:50:b0:51:d5:5e:
         fb:28:78:cc:74:91:5d:cf:17:cb:09:41:99:58:01:13:75:31:
         13:df:3f:44:88:4a:2b:53:df:9c:73:b0:ca:d8:36:66:fb:b0:
         3e:3a:13:b2:1f:c4:c6:64:00:0d:ab:ce:b6:25:b6:5b:a8:63:
         97:3d:7c:53:8b:ca:4a:34:71:94:b3:fa:f1:f7:6e:3e:d4:af:
         71:cb:97:07:7c:96:93:a5:e3:3d:4d:0d:65:15:fe:34:de:11:
         80:76:8f:18:d9:bc:14:e8:90:23:06:63:d2:ef:db:8d:c5:ac:
         a2:2d:79:73:88:a7:01:95:e5:8d:0e:20:d1:13:c7:50:54:94:
         4d:af:fe:f6:f9:00:2f:68:a8:af:79:a3:53:d6:89:32:5d:7c:
         41:b7:d0:f6:3c:08:75:85:0f:34:ec:5f:69:26:62:ed:a3:79:
         81:af:d9:d8:81:a5:98:2b:9a:7f:77:61:2b:db:b8:ca:5f:98:
         12:5d:ab:2d:d0:7d:b4:ce:97:21:9d:1d:e3:fa:15:e6:0e:4b:
         4c:5e:6d:fb:11:14:6a:be:26:40:15:6c:d2:ad:5a:81:0f:2c:
         75:66:2d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:08:09 2026 by rpki-client