Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/09cd0665-7cf1-3162-8078-b32029099734.roa
File:                     09cd0665-7cf1-3162-8078-b32029099734.roa (raw, json)
Hash identifier:          CVU0GEJombu0fYyBMHfgirBL2pWmRnN9NNb3EKcTrck=
Subject key identifier:   1A:E5:72:23:41:DC:07:A3:18:95:E7:23:AC:CD:C0:4C:35:B0:5A:6A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D11726CBA853B0664E63C6B40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/09cd0665-7cf1-3162-8078-b32029099734.roa
Signing time:             Thu 05 Mar 2026 14:00:40 +0000
ROA not before:           Thu 05 Mar 2026 14:00:40 +0000
ROA not after:            Wed 03 Jun 2026 13:00:40 +0000
asID:                     7922
IP address blocks:        162.148.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:72:6c:ba:85:3b:06:64:e6:3c:6b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  5 14:00:40 2026 GMT
            Not After : Jun  3 13:00:40 2026 GMT
        Subject: CN=c92c84b0-c500-42e2-a192-890cf279e8cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a6:10:b9:c8:60:89:19:7c:5b:00:71:52:46:
                    d5:ac:98:f7:7f:96:9b:82:53:30:ce:c4:1c:8b:f4:
                    da:48:15:46:df:94:a0:23:04:e6:89:e2:2b:ef:9a:
                    da:de:73:3d:4c:5a:b6:bc:36:89:b4:a7:69:7c:f8:
                    a1:a8:cd:db:03:38:b7:ee:63:7f:83:c0:53:45:5c:
                    40:9b:13:b8:21:f3:66:ac:71:88:be:28:b2:ad:9c:
                    35:4a:a2:9d:bb:52:35:20:91:f9:cf:03:fa:11:b0:
                    bb:c0:54:b3:71:ba:d6:8d:5d:04:e6:6d:65:72:d7:
                    d0:ac:96:4c:25:14:78:71:19:1c:19:f6:ce:55:b3:
                    4e:cb:1e:8b:42:6d:24:ea:6a:34:38:1b:5b:b9:51:
                    02:58:18:63:26:00:a4:25:e0:bf:27:9c:08:04:76:
                    e5:f9:63:0d:fb:2b:c4:00:64:2f:42:80:3a:64:fa:
                    b2:10:36:bf:49:7a:d6:e4:53:fb:53:c0:05:07:dc:
                    74:4b:31:bc:f4:13:52:25:06:eb:ce:f4:9b:3d:90:
                    0a:07:d7:34:9e:fd:88:5d:94:a0:61:a3:b4:c5:2c:
                    11:7c:6d:70:67:9f:fc:ce:14:40:bc:e0:65:bb:79:
                    b7:ba:e1:60:cc:30:0c:dc:b2:04:60:51:54:2b:2e:
                    7c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E5:72:23:41:DC:07:A3:18:95:E7:23:AC:CD:C0:4C:35:B0:5A:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/09cd0665-7cf1-3162-8078-b32029099734.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.148.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:7f:90:9a:c7:3b:5f:ea:30:18:d2:5a:61:80:83:e0:c2:40:
         1c:94:53:fa:3c:b2:98:94:36:59:8e:60:38:86:32:4c:ab:04:
         ab:a1:88:30:73:e6:d3:15:00:d0:fa:c1:3f:76:78:f2:56:e6:
         1a:e0:03:c5:14:41:96:18:fd:c6:d7:d8:84:67:1e:7a:77:d4:
         0e:03:c4:d6:b9:a7:32:df:e4:d6:07:67:c5:24:55:a8:2b:87:
         06:f0:10:83:1f:46:75:00:42:d4:32:76:97:ad:28:bc:f4:0a:
         6c:35:b4:e6:00:3b:dc:cd:e5:a0:4e:13:6b:f4:1d:ba:ac:2e:
         28:e9:f3:b6:a8:f9:ea:a6:f1:19:86:55:af:9a:14:61:72:1b:
         2d:f1:93:a9:82:86:b7:de:06:5c:33:c8:6f:9c:48:f3:34:75:
         6c:b6:ba:29:aa:59:3c:ea:19:5c:31:b4:71:5e:4f:45:a2:cf:
         a0:3b:9d:f9:cd:e2:3c:61:ee:6d:ab:97:94:c3:6d:29:d0:f3:
         43:bf:46:cd:d6:c5:2c:db:0a:24:8c:22:9b:90:40:3e:72:67:
         63:56:14:4c:da:d9:db:fe:64:e3:ca:67:fc:28:f8:32:1a:6d:
         23:d8:93:7c:24:88:e3:f2:69:96:42:dc:10:07:cf:0a:64:79:
         76:cc:e9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 12:19:26 2026 by rpki-client