Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/01358594-e32c-38e0-81fb-b4074c1d41eb.roa
File:                     01358594-e32c-38e0-81fb-b4074c1d41eb.roa (raw, json)
Hash identifier:          WJgCfotV9r0WmiFhWJLMUS6t1v3pcnH2vpYXarcUTTU=
Subject key identifier:   4B:37:69:BD:08:80:1E:F9:8E:4A:E9:83:72:5C:9D:1A:DD:66:85:64
Certificate issuer:       /CN=0ad2b3c4-a64c-4afd-b0df-103361339550
Certificate serial:       010D0C9F4328584EAD1C54BE5BF82E20634E8D80
Authority key identifier: B8:DE:C1:C3:64:52:F0:42:07:DB:3E:84:A4:35:F9:05:C1:BF:3B:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/01358594-e32c-38e0-81fb-b4074c1d41eb.roa
Signing time:             Fri 31 Jul 2026 01:00:11 +0000
ROA not before:           Fri 31 Jul 2026 01:00:11 +0000
ROA not after:            Thu 29 Oct 2026 01:00:11 +0000
asID:                     11287
IP address blocks:        163.182.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/0ad2b3c4-a64c-4afd-b0df-103361339550.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/0ad2b3c4-a64c-4afd-b0df-103361339550.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ad:1c:54:be:5b:f8:2e:20:63:4e:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ad2b3c4-a64c-4afd-b0df-103361339550
        Validity
            Not Before: Jul 31 01:00:11 2026 GMT
            Not After : Oct 29 01:00:11 2026 GMT
        Subject: CN=7b70f85b-8ae0-42e5-80d1-12209afe3e0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ad:6d:f2:d8:05:5e:76:6f:76:df:34:d5:20:
                    81:92:c5:4b:37:bb:d0:af:c6:f7:5f:4f:b7:ae:21:
                    41:46:4d:4a:41:01:aa:91:59:71:3a:e8:08:74:d6:
                    98:fb:b9:35:9c:23:e0:fb:4d:71:b3:41:3c:eb:7a:
                    a5:b4:1f:bc:4c:81:7f:68:5c:0f:ed:21:cc:4b:34:
                    2d:08:bd:13:f5:4a:71:05:6b:d0:81:64:f5:1b:2d:
                    7c:94:aa:84:cc:fc:1d:8d:0b:4d:6d:40:df:67:fe:
                    75:69:d7:a9:c9:e7:49:4f:c5:15:e4:dc:0a:c3:46:
                    55:e1:12:70:8b:81:d8:a4:fd:88:b1:cb:cc:d1:48:
                    ae:45:41:ff:4f:b3:4f:7a:a2:9c:f1:8e:ed:47:c6:
                    0a:24:f1:d7:77:51:38:b2:8f:a7:32:57:db:56:01:
                    dc:01:6c:f0:fa:cf:ea:be:e1:ee:46:50:2c:38:1c:
                    e9:11:c3:1b:1b:4f:1c:3c:8b:e2:0d:a0:ae:a8:cb:
                    e8:5c:e3:49:fb:c4:53:73:b0:ea:ba:35:0a:2a:60:
                    1c:d5:4d:f2:79:a5:e4:7e:0e:5c:41:18:59:81:a1:
                    0e:d8:26:3f:7d:dc:35:e1:46:fd:cf:1a:72:83:c6:
                    44:7a:ec:17:50:df:4a:19:4c:26:ac:08:ab:81:f2:
                    92:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:37:69:BD:08:80:1E:F9:8E:4A:E9:83:72:5C:9D:1A:DD:66:85:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/01358594-e32c-38e0-81fb-b4074c1d41eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/0ad2b3c4-a64c-4afd-b0df-103361339550.crl

            X509v3 Authority Key Identifier:
                keyid:B8:DE:C1:C3:64:52:F0:42:07:DB:3E:84:A4:35:F9:05:C1:BF:3B:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.182.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:2c:a1:85:94:4a:eb:94:ae:eb:c5:e1:1d:bd:a8:04:76:2d:
         de:8b:8e:0f:6b:2b:7c:51:8e:c3:07:27:9d:d8:50:51:48:cf:
         55:df:3a:00:69:9f:de:50:ad:16:0e:76:04:ab:ce:a6:a5:f9:
         d6:6a:ac:b1:22:13:44:f6:b2:a0:ca:83:12:de:53:fb:da:5f:
         42:48:11:ef:9a:bc:63:f4:8e:b9:40:82:4b:08:64:2e:ee:ea:
         ba:3c:74:d3:ba:0d:d7:3a:9c:96:8c:f3:f9:14:33:6b:ec:56:
         16:7c:ba:3f:4a:42:b1:6f:41:76:f0:fc:fb:5c:b2:00:02:f3:
         6e:8f:f3:eb:ac:38:8a:af:21:5d:37:c9:99:42:2c:ef:13:06:
         59:09:dd:14:af:4b:c1:f3:df:ce:cd:08:be:74:68:43:b0:91:
         31:6c:66:f8:ea:e1:8a:07:1b:35:3a:c7:70:69:98:d1:d2:6d:
         23:df:63:0f:f3:fd:c2:b3:29:78:ae:49:29:5a:e0:55:cb:1c:
         87:da:99:7f:4e:19:b9:1c:4f:92:d1:08:a9:ff:8b:a6:7f:9f:
         48:b4:d2:55:a0:93:36:34:3a:de:37:ed:dd:f1:31:5e:74:0a:
         df:67:fd:0a:ea:1c:a1:17:19:a0:6d:ec:9b:2a:dc:a3:32:ca:
         50:e7:24:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:33:10 2026 by rpki-client