Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb/1659d63c-8540-306b-bf4a-24efb85f2921.roa
File:                     1659d63c-8540-306b-bf4a-24efb85f2921.roa (raw, json)
Hash identifier:          dQGtLvPi85KF+25Bhd+05GwxguVmmQvoCA+s81Sk7d4=
Subject key identifier:   0E:FF:D7:5C:A1:A0:AD:33:8B:CE:83:56:46:86:0F:AD:BF:58:A0:60
Certificate issuer:       /CN=bb69a441-76b7-4b20-a411-7a618bd61bcb
Certificate serial:       010D0C9F4328584ED431EF5B9691EC79D019A600
Authority key identifier: 09:46:D0:A7:31:C8:12:1B:5F:66:60:53:4B:90:0C:BD:5D:9D:15:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb/1659d63c-8540-306b-bf4a-24efb85f2921.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     32338
IP address blocks:        162.254.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb/bb69a441-76b7-4b20-a411-7a618bd61bcb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb/bb69a441-76b7-4b20-a411-7a618bd61bcb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:ef:5b:96:91:ec:79:d0:19:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb69a441-76b7-4b20-a411-7a618bd61bcb
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=6d673b89-971d-49e7-9baa-5d38413558a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b3:3d:d9:d8:94:f9:f1:de:e5:31:0f:fd:3e:
                    22:d9:0b:a6:85:48:8d:70:9c:cc:04:d7:0f:86:b3:
                    63:62:61:30:34:c7:bd:fe:59:cf:ca:ad:b9:79:04:
                    2b:ec:24:f0:90:ae:87:54:79:86:7c:75:18:5d:91:
                    78:35:dd:87:5b:96:79:23:5e:1c:ee:a0:c9:4d:15:
                    d8:6d:46:9b:33:de:ae:d4:e6:ac:26:60:51:c7:5d:
                    07:3e:d1:92:ff:ce:e1:ee:06:2a:04:23:99:37:0a:
                    a4:f5:00:db:85:cc:39:3d:54:14:92:72:6a:0a:ca:
                    1d:db:c2:d3:38:bb:7a:54:25:8a:99:9e:26:40:8a:
                    81:af:b8:e1:ee:99:51:78:ef:71:6c:d2:e0:eb:c1:
                    3d:7f:68:16:4f:9b:18:21:df:35:53:3d:6a:52:6e:
                    ad:04:03:5d:cf:04:70:83:9d:0b:80:64:74:f6:5a:
                    91:d6:52:95:91:4f:61:0d:da:97:db:80:16:b6:aa:
                    11:c1:37:bf:a7:0d:71:3f:55:e7:72:e1:07:83:8b:
                    3c:78:c9:73:74:5c:60:ae:6b:44:e3:e0:fc:e7:b6:
                    b9:f8:d2:ff:bf:49:5e:9f:ac:56:25:4e:84:94:4c:
                    23:26:1f:b1:f9:d4:e1:dc:f7:95:1b:a3:0b:e9:63:
                    0b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:FF:D7:5C:A1:A0:AD:33:8B:CE:83:56:46:86:0F:AD:BF:58:A0:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb/1659d63c-8540-306b-bf4a-24efb85f2921.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb/bb69a441-76b7-4b20-a411-7a618bd61bcb.crl

            X509v3 Authority Key Identifier:
                keyid:09:46:D0:A7:31:C8:12:1B:5F:66:60:53:4B:90:0C:BD:5D:9D:15:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.254.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:68:bb:d0:e7:4d:5b:a4:f3:1d:e4:05:1f:5a:44:8c:8e:45:
         b6:e2:54:1d:1f:3f:2e:9e:87:01:95:cd:98:c8:f8:0b:71:74:
         4b:ce:88:d7:2c:61:be:d0:2c:6e:de:0d:d2:c6:a3:c5:c9:51:
         cd:0a:50:c0:24:a5:df:8e:00:85:d9:1a:e3:ff:d3:aa:19:fb:
         78:ac:08:6c:74:8d:ff:db:b8:9b:b9:1b:59:7f:9f:de:87:aa:
         a7:79:5d:8d:4c:98:ec:72:00:f1:44:62:b8:9b:ba:3e:74:51:
         55:ad:69:f9:f5:2e:7d:41:3f:b2:39:7c:55:07:a1:1c:40:29:
         d4:ab:8b:5d:fc:5a:69:b8:1b:ae:a8:53:b2:42:1a:c7:d6:63:
         f5:d7:21:0d:56:a4:4b:07:9a:cb:88:c7:1b:8e:04:71:95:1b:
         45:4e:ee:34:f0:53:a5:e0:de:bc:5a:bc:50:c4:ec:f2:79:b5:
         f3:ae:a6:d8:d0:45:34:65:70:01:13:58:89:39:49:41:39:70:
         78:62:b5:7e:75:d4:f9:94:86:24:82:a6:05:02:c0:b5:a0:ac:
         a8:a0:fe:bd:8d:be:b9:19:d8:ff:d0:d9:21:3d:5f:9c:67:ef:
         67:2b:a2:79:7e:a0:8a:48:fa:f0:63:d0:ab:b2:0a:a6:ca:c0:
         9c:f7:9d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 05:30:02 2026 by rpki-client