Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/00df72f9-ad3b-38ac-b1a0-9cbbbac6180d.roa
File:                     00df72f9-ad3b-38ac-b1a0-9cbbbac6180d.roa (raw, json)
Hash identifier:          tzhe1oyNzETtBJNpIkQ2hFxCHDsNr/Lh1C+Bh5VHV84=
Subject key identifier:   25:18:79:08:72:F2:AC:90:0E:4F:27:56:2D:C3:F2:8E:FD:7C:AC:14
Certificate issuer:       /CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Certificate serial:       010D0C9F4328584EA787598B1E58EE60B7FBBD00
Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/00df72f9-ad3b-38ac-b1a0-9cbbbac6180d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     59241
IP address blocks:        162.98.40.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:59:8b:1e:58:ee:60:b7:fb:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d95495d1-f437-4367-9d97-ca4194f0243a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:38:14:ee:b1:15:53:18:94:af:6e:d4:2f:3f:
                    6d:e2:3a:d8:93:ea:c5:5b:4c:b6:18:34:29:db:18:
                    14:fe:c3:1d:7c:02:3d:16:29:db:0b:23:73:cc:ee:
                    ca:49:fd:2c:6b:a1:fc:5c:a4:6f:cd:c2:9f:67:4b:
                    45:5f:51:6c:36:c6:29:90:4f:48:ca:bb:9d:f2:fb:
                    13:7d:5e:48:e8:33:c8:00:6c:eb:3d:ee:30:27:26:
                    10:17:e0:85:5f:3c:74:d9:be:f3:f3:2d:a4:8f:9f:
                    66:56:3b:21:7a:57:a3:f0:50:f2:97:90:d9:c9:b0:
                    f4:14:91:9f:af:31:90:7b:fa:8f:36:5c:b0:19:bf:
                    4d:08:a4:a7:e6:c1:b7:bb:92:22:83:fa:23:26:12:
                    09:84:26:18:ad:a0:ca:d8:15:f7:9e:59:7e:19:ff:
                    a1:e0:9e:6f:d8:9a:63:52:4a:61:57:a8:dc:b1:ea:
                    6e:10:4d:5e:d3:88:52:c7:3d:9e:b9:13:7f:f7:f1:
                    7f:a2:da:fb:17:7d:62:54:81:56:5c:8b:a1:95:fb:
                    42:de:9f:63:d5:68:ed:8d:67:ed:b5:50:ba:2a:35:
                    1d:ad:63:53:78:67:53:e9:55:43:99:ea:e5:93:2e:
                    66:08:e8:98:1a:a7:c3:49:7c:14:94:07:5b:1d:df:
                    83:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:18:79:08:72:F2:AC:90:0E:4F:27:56:2D:C3:F2:8E:FD:7C:AC:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/00df72f9-ad3b-38ac-b1a0-9cbbbac6180d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl

            X509v3 Authority Key Identifier:
                keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.98.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:67:d6:ff:24:73:46:48:16:b8:11:ac:e1:27:84:93:6d:71:
         ce:e5:09:43:43:92:0d:6a:77:99:80:f1:3f:08:cc:a8:74:ab:
         50:2b:0d:48:d6:3c:15:f3:07:8f:33:aa:dc:a6:c0:2d:b6:9b:
         83:d8:e7:6e:e6:c2:c3:46:16:ed:f2:f9:10:3b:63:9c:0e:9b:
         13:24:17:8d:d4:6e:e0:73:77:0f:cb:da:81:2a:1d:a6:af:a4:
         33:04:59:b6:41:a5:c0:21:91:a6:35:3b:61:73:1c:18:c1:0c:
         d2:5a:5c:0a:f8:0e:e6:4f:bb:07:59:b4:c2:8d:61:3b:9c:dd:
         c4:bd:be:6a:6c:16:c3:c8:2c:76:d6:41:35:20:18:08:92:35:
         17:fa:eb:4f:bd:80:39:04:19:d3:7f:4b:ef:bb:75:7a:b2:bc:
         1b:df:b2:a1:52:50:44:b8:94:d4:13:73:d2:ae:36:2f:ee:56:
         5c:93:4b:20:a6:b5:a3:c8:f0:ec:ad:a3:d5:d7:a5:7b:a0:5e:
         d4:61:52:77:11:22:64:d5:27:1c:44:53:bd:c3:54:00:1c:41:
         15:dd:3d:b2:5a:ee:2f:8d:6a:9d:34:7d:88:1a:7c:1e:59:4e:
         c5:fa:09:c5:8a:d8:7b:f9:02:98:fa:c8:cc:20:81:86:e3:80:
         84:32:26:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 20:35:24 2026 by rpki-client