Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/12a1fd27-4a44-3df7-87d6-9aac44cf6dfa.roa
File:                     12a1fd27-4a44-3df7-87d6-9aac44cf6dfa.roa (raw, json)
Hash identifier:          MAKUxyszNU7VJWd4cNH9+8Y4J8cWvA8ZGzkf+yry3Ww=
Subject key identifier:   4A:30:DC:07:07:3E:B2:AF:D8:DD:5D:22:DB:A3:5E:35:92:EB:64:76
Certificate issuer:       /CN=dc8dacf3-283f-4888-8217-ee30c6e58c44
Certificate serial:       010D0C9F4328584EE38CB127038FCF9BDD4AA700
Authority key identifier: BC:78:88:8A:0C:C4:26:DC:74:DC:53:A1:5F:F0:3B:F8:4A:D7:51:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/12a1fd27-4a44-3df7-87d6-9aac44cf6dfa.roa
Signing time:             Wed 19 Aug 2026 13:00:11 +0000
ROA not before:           Wed 19 Aug 2026 13:00:11 +0000
ROA not after:            Tue 17 Nov 2026 14:00:11 +0000
asID:                     14434
IP address blocks:        162.253.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:8c:b1:27:03:8f:cf:9b:dd:4a:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc8dacf3-283f-4888-8217-ee30c6e58c44
        Validity
            Not Before: Aug 19 13:00:11 2026 GMT
            Not After : Nov 17 14:00:11 2026 GMT
        Subject: CN=5ee64e29-8ef4-4299-a8dd-42270b2e8445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:26:00:37:eb:a7:58:7a:f8:6e:b5:be:2d:34:
                    f0:cd:d2:87:7d:a6:7e:10:45:71:9d:c4:b0:ea:9f:
                    46:a5:a9:5b:ec:dd:93:7a:24:2d:3a:2b:40:3b:22:
                    4e:4d:d7:05:43:f9:26:f7:89:ad:d2:8e:b6:46:11:
                    cc:bc:de:85:d1:58:ac:5c:a4:24:98:cc:09:27:a0:
                    cf:c9:99:34:76:8c:55:6c:bb:ca:72:77:b6:2b:d8:
                    cd:10:ca:71:79:fb:46:de:f6:45:44:fd:07:80:ca:
                    0e:89:3f:27:9c:8f:09:11:c7:45:ff:23:fe:69:55:
                    50:0f:a1:1f:0a:da:c5:23:0d:4a:b0:49:83:2c:68:
                    54:28:4b:ca:39:2e:b9:06:f7:45:c2:0f:b9:f2:54:
                    bf:42:b5:3e:02:9e:69:ba:8b:76:30:4b:80:30:46:
                    fe:21:8c:e0:33:e5:a7:51:e4:56:0a:40:8f:c5:53:
                    15:23:c7:77:15:00:49:12:ea:6b:7e:f4:64:78:b3:
                    c2:ef:94:7b:e2:e9:36:26:c2:3c:79:5f:14:49:41:
                    b0:78:61:cd:7f:41:5a:1c:d2:f3:6e:51:42:39:81:
                    e4:a5:83:01:c3:11:ce:12:a6:f2:f8:4c:f8:e1:52:
                    2b:c1:ec:4b:0c:78:bd:ef:36:96:86:43:25:d7:c6:
                    47:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:30:DC:07:07:3E:B2:AF:D8:DD:5D:22:DB:A3:5E:35:92:EB:64:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/12a1fd27-4a44-3df7-87d6-9aac44cf6dfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.crl

            X509v3 Authority Key Identifier:
                keyid:BC:78:88:8A:0C:C4:26:DC:74:DC:53:A1:5F:F0:3B:F8:4A:D7:51:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.253.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:d1:54:c1:f4:c1:7d:50:3c:5a:30:61:fd:88:e8:fd:49:52:
         c8:20:69:c6:f8:4c:b7:fe:68:b7:59:04:ae:0f:8b:bb:c4:b7:
         ae:2e:cd:dc:2f:87:87:f5:32:ff:67:f2:21:2c:1e:12:91:eb:
         48:17:25:73:25:ee:04:a8:40:29:f3:c9:03:7a:58:08:b5:98:
         ed:6a:cd:64:98:0a:51:46:e1:e5:fb:91:fb:9e:ba:72:f3:6b:
         5b:90:39:b4:39:39:d6:b2:4b:e0:ac:74:18:b4:0a:1a:f6:86:
         bc:f9:b4:1c:bc:73:fe:15:75:bc:ec:c9:65:44:a3:79:5e:aa:
         e6:5b:64:ab:76:41:60:b3:b2:72:cf:b1:c4:d6:a9:09:37:20:
         d7:01:ad:58:37:18:58:6d:8b:b4:72:9e:ee:8c:be:4d:87:7b:
         dc:6f:47:c4:5e:2f:d9:9e:dc:a3:20:4b:13:08:d6:a4:95:49:
         94:ce:fc:ef:bc:3c:13:d1:72:26:88:f5:70:15:cc:ab:45:ac:
         b5:c9:27:44:6a:57:9b:1b:6b:f5:f1:b6:ac:d8:af:be:95:de:
         19:56:aa:da:ed:80:ca:40:09:3b:53:b7:8e:2e:1c:ce:cf:71:
         21:fe:20:9f:6f:17:9f:8d:c8:02:d3:5e:91:61:b6:76:06:59:
         0c:75:2f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 18:07:52 2026 by rpki-client