Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e5139d2-c3bf-4b18-9616-d83f50a9f4e8/4e9c76f6-e87c-3857-92ba-2f6273a5280c.roa
File:                     4e9c76f6-e87c-3857-92ba-2f6273a5280c.roa (raw, json)
Hash identifier:          BRpXZoLtE5WVxhYEX2SRhTOJ1rQYCIgBzEfhlRP+Lt8=
Subject key identifier:   E4:B4:D0:82:D8:1B:B1:B4:1E:E7:07:A3:27:4E:8E:85:58:D1:5F:48
Certificate issuer:       /CN=2e5139d2-c3bf-4b18-9616-d83f50a9f4e8
Certificate serial:       010D0C9F4328584E9C43C595DBB9FA488B473500
Authority key identifier: 87:A6:1C:A4:00:92:A4:4D:47:93:C3:D9:48:00:C0:2A:5D:CA:D3:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e5139d2-c3bf-4b18-9616-d83f50a9f4e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e5139d2-c3bf-4b18-9616-d83f50a9f4e8/4e9c76f6-e87c-3857-92ba-2f6273a5280c.roa
Signing time:             Sat 25 Jul 2026 00:11:10 +0000
ROA not before:           Sat 25 Jul 2026 00:11:10 +0000
ROA not after:            Fri 23 Oct 2026 00:11:10 +0000
asID:                     399138
IP address blocks:        162.210.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e5139d2-c3bf-4b18-9616-d83f50a9f4e8/2e5139d2-c3bf-4b18-9616-d83f50a9f4e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e5139d2-c3bf-4b18-9616-d83f50a9f4e8/2e5139d2-c3bf-4b18-9616-d83f50a9f4e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e5139d2-c3bf-4b18-9616-d83f50a9f4e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9c:43:c5:95:db:b9:fa:48:8b:47:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e5139d2-c3bf-4b18-9616-d83f50a9f4e8
        Validity
            Not Before: Jul 25 00:11:10 2026 GMT
            Not After : Oct 23 00:11:10 2026 GMT
        Subject: CN=e672ce2f-393a-473a-b778-18ba0155f539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b9:4f:2b:76:54:ee:09:1b:f0:f1:e3:9a:01:
                    82:d8:7a:b0:41:8f:53:38:c3:41:27:37:45:a6:d4:
                    bf:62:a8:d4:9f:a9:c8:30:88:b5:93:06:c4:ef:fb:
                    db:4f:0f:c5:3e:d5:98:80:79:dd:af:d3:da:05:01:
                    3e:ae:0c:4b:e5:ea:25:b8:77:ab:e9:56:79:32:bf:
                    0f:af:84:e9:7f:7d:59:48:b9:0c:bd:eb:87:88:1a:
                    73:80:f7:77:5f:a5:e6:3c:92:21:b4:b3:e4:7a:61:
                    50:4b:4a:41:aa:14:52:46:c6:4b:9c:ae:2d:26:f0:
                    3f:bd:0d:76:ec:3b:4f:e1:a6:42:b2:b6:75:77:83:
                    c7:de:c6:78:0a:ff:17:76:08:0b:2a:e4:2b:05:8d:
                    12:97:70:42:46:16:e4:bd:fe:42:22:51:6f:9e:be:
                    a3:56:51:95:2d:d5:5f:15:70:1f:44:af:26:9b:24:
                    89:29:4b:37:6d:5c:26:03:1b:52:19:de:be:45:56:
                    0d:01:6a:f9:2f:d9:1f:bb:08:f2:13:32:57:32:27:
                    37:5d:e9:ae:24:5c:a0:71:d0:f7:8b:02:e7:f6:12:
                    34:c5:2f:b2:38:e8:17:eb:97:19:0f:2b:ec:89:35:
                    a1:73:57:cf:70:3c:48:a4:e5:bd:df:98:a1:95:81:
                    b2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B4:D0:82:D8:1B:B1:B4:1E:E7:07:A3:27:4E:8E:85:58:D1:5F:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e5139d2-c3bf-4b18-9616-d83f50a9f4e8/4e9c76f6-e87c-3857-92ba-2f6273a5280c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e5139d2-c3bf-4b18-9616-d83f50a9f4e8/2e5139d2-c3bf-4b18-9616-d83f50a9f4e8.crl

            X509v3 Authority Key Identifier:
                keyid:87:A6:1C:A4:00:92:A4:4D:47:93:C3:D9:48:00:C0:2A:5D:CA:D3:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e5139d2-c3bf-4b18-9616-d83f50a9f4e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.210.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:96:7b:26:c3:3b:e5:30:83:33:c7:9c:18:71:65:60:b7:4e:
         8a:fe:1a:1b:01:e8:bf:dd:76:03:0d:75:3c:ce:81:af:0b:49:
         ac:c9:ff:b1:3a:9c:76:ff:19:96:21:d1:a5:33:ab:a5:b0:01:
         ec:74:9e:aa:fb:88:5e:34:93:0a:9a:dd:54:a6:8c:d0:a4:eb:
         ff:1a:31:5d:05:03:c8:46:b3:33:34:e0:40:b1:89:5d:5d:ef:
         41:e1:ee:c7:1b:6c:f6:fe:a3:b0:d4:83:5f:b3:d5:5f:32:44:
         ef:29:a1:76:82:90:e9:10:d0:78:16:24:78:1f:65:6f:2e:64:
         01:1c:b4:07:ed:7b:b7:41:f0:01:84:df:e0:44:f8:00:20:2d:
         7b:f3:28:7d:5e:d9:a2:15:c2:c2:45:bb:9e:bc:25:14:1c:4d:
         58:74:e2:b7:c4:4d:90:bb:5f:34:3c:84:1d:ba:a4:72:e7:9b:
         b6:53:44:96:fe:d2:9d:df:7b:21:f8:31:01:ea:30:85:0c:55:
         28:22:39:e3:c0:06:9f:1b:a1:72:29:ef:51:84:81:e2:3b:2c:
         a2:72:be:f8:ea:87:9c:18:fd:8f:de:38:b9:b1:46:c0:e4:1b:
         d0:54:2e:c2:3d:7c:72:08:7b:0f:c9:0b:6b:f8:70:13:70:bc:
         a2:fb:70:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 04:01:16 2026 by rpki-client