Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/f1adbd29-319d-377f-910e-3fd95df8a73b.roa
File:                     f1adbd29-319d-377f-910e-3fd95df8a73b.roa (raw, json)
Hash identifier:          +c5heRacei4AtDCxW8gFLj77pieZtA376d0U7pUR7cI=
Subject key identifier:   7D:ED:9A:29:BC:D6:59:A1:31:F5:1E:12:DC:1C:DE:5F:81:48:C9:11
Certificate issuer:       /CN=a57f543d-54f7-4dd6-a478-95849cb77e5e
Certificate serial:       010D0C9F4328584D5243515B0A9EE1D51C9A50B0
Authority key identifier: CD:02:D8:4E:6E:D1:32:04:CA:3F:38:D8:21:96:7D:BB:E0:34:9D:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/f1adbd29-319d-377f-910e-3fd95df8a73b.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     16509
IP address blocks:        162.219.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/a57f543d-54f7-4dd6-a478-95849cb77e5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/a57f543d-54f7-4dd6-a478-95849cb77e5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:51:5b:0a:9e:e1:d5:1c:9a:50:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a57f543d-54f7-4dd6-a478-95849cb77e5e
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=05ea4aad-362c-462d-9c56-ee883e4cbd73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:77:d3:25:70:e7:39:c0:5a:7f:cf:78:4e:23:
                    54:93:dc:04:3d:08:03:0b:9c:ae:c8:a5:93:3f:ad:
                    3a:91:19:03:96:62:7e:bb:da:73:1e:74:e8:3b:8c:
                    45:52:82:64:8f:58:f3:7e:ae:f2:26:30:92:4d:d5:
                    75:8c:b5:4a:ae:67:fa:56:49:14:e8:ed:fe:51:28:
                    21:85:ab:19:35:7c:39:ed:e1:ef:96:0c:b8:2b:37:
                    f6:01:21:21:19:2d:f4:81:0d:91:a2:0e:33:32:10:
                    f3:bd:6a:e6:50:e0:82:09:41:ac:23:89:22:20:27:
                    46:a6:3c:f6:5e:b7:54:5e:bb:18:ce:82:92:5c:cd:
                    a5:fc:2b:2f:56:e1:fa:84:d9:c3:b7:12:35:d8:92:
                    05:53:00:7e:51:84:6d:d2:aa:d5:33:b2:12:7a:d9:
                    9c:fc:83:a3:96:05:90:02:df:dc:d7:f3:ae:c5:6d:
                    be:82:16:f4:d5:ee:94:db:4b:27:a9:65:9a:41:a2:
                    9e:e3:f7:d7:54:88:e7:f4:80:16:79:24:f5:a5:8c:
                    af:2c:b1:40:27:89:23:c0:bc:cb:df:e4:bf:36:23:
                    9b:ca:8d:c5:2c:bf:50:4a:30:10:41:33:e8:13:9a:
                    74:e6:b5:03:ab:88:d7:3e:76:bd:bb:04:3c:cc:a1:
                    dd:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:ED:9A:29:BC:D6:59:A1:31:F5:1E:12:DC:1C:DE:5F:81:48:C9:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/f1adbd29-319d-377f-910e-3fd95df8a73b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/a57f543d-54f7-4dd6-a478-95849cb77e5e.crl

            X509v3 Authority Key Identifier:
                keyid:CD:02:D8:4E:6E:D1:32:04:CA:3F:38:D8:21:96:7D:BB:E0:34:9D:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.219.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:29:ba:98:21:5c:e3:5b:d9:f4:7a:bb:e6:39:2a:d9:24:fe:
         22:10:93:fa:1e:0d:a0:87:64:e0:1d:dc:46:1e:8f:25:e3:c3:
         52:21:dc:75:08:96:4b:2e:9a:fe:fb:11:24:f6:b0:b4:bd:98:
         ef:1c:d7:01:ee:56:ed:b0:78:f6:d7:31:20:b6:88:a2:f1:1e:
         fa:3b:34:cf:40:d5:7d:df:0e:13:52:7a:4e:c9:11:9e:fb:ba:
         fb:f4:84:9e:a1:15:6d:b8:bb:bc:1c:e7:dd:70:c5:b4:91:b1:
         23:97:63:64:79:c0:ec:6c:74:1c:18:eb:e3:63:1c:c8:be:e6:
         00:84:d5:a0:3c:6c:f1:0e:58:e0:97:28:5d:67:31:ae:52:a4:
         f6:20:63:76:6c:00:74:21:c1:5c:b6:22:50:1b:a4:ad:cc:54:
         02:9e:f0:b8:f3:0f:a9:02:2c:b5:43:dc:da:75:3d:b7:9c:d2:
         eb:8a:01:fa:0f:fd:c7:58:43:f3:82:ea:0c:71:18:18:64:29:
         27:f5:59:8f:cd:e3:cd:59:18:4b:90:25:dc:0a:c8:30:d9:88:
         cd:46:5f:28:d8:b5:3f:48:b3:ff:58:a4:b3:25:d0:7b:4c:31:
         ce:1d:c6:e6:ea:6d:b9:2f:04:db:eb:50:1c:69:85:fa:f9:1d:
         5f:f7:16:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 3 09:24:16 2026 by rpki-client