Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/acf10d95-d331-3615-8cb6-ef75756ed4f5.roa
File:                     acf10d95-d331-3615-8cb6-ef75756ed4f5.roa (raw, json)
Hash identifier:          y3X+ku48y9v1DEYvtfRMhqDRzllGUca2wi+3n8xNOzI=
Subject key identifier:   75:EA:C4:8B:AA:A5:B2:25:13:D1:CC:93:C8:EB:43:78:E7:AD:88:0E
Certificate issuer:       /CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Certificate serial:       010D0C9F4328584EA78F704A8ADF8F909A2DC540
Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/acf10d95-d331-3615-8cb6-ef75756ed4f5.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     45327
IP address blocks:        162.98.44.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:70:4a:8a:df:8f:90:9a:2d:c5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=080c608d-681b-4317-b8ec-6a640d8cbb0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9c:67:04:91:ee:f6:7c:18:ee:a0:84:6e:d2:
                    da:2b:7b:19:52:11:5b:6c:c4:2b:43:7e:0b:ab:ff:
                    51:09:7c:eb:d9:03:c5:fd:eb:17:e9:00:02:6f:52:
                    67:f6:e8:91:c2:8a:b7:1e:a6:b0:ad:12:17:57:57:
                    14:71:be:04:38:8c:56:d9:49:1d:32:14:bd:33:87:
                    ea:6d:d5:64:eb:55:8b:76:7f:4b:a7:a6:8c:51:4f:
                    59:68:aa:ca:20:c1:30:72:3d:7f:37:96:b5:3b:68:
                    53:90:b5:85:78:df:91:19:35:34:1a:86:b4:c7:f0:
                    4c:69:3f:24:b0:7c:3d:ac:72:eb:f7:19:49:fc:96:
                    ea:3c:2b:a1:ed:67:90:a1:30:65:f9:c2:51:10:bd:
                    34:3e:c1:6f:5c:7e:a8:3e:59:8b:70:cc:c8:1e:c7:
                    62:b9:61:7a:21:25:d8:b3:59:ac:71:be:e6:ac:66:
                    dc:ca:a2:3e:06:a9:cc:1f:27:ec:d1:46:f4:0f:9d:
                    20:44:00:4b:46:36:3c:2d:81:8c:1e:e1:f4:ee:6b:
                    9d:56:74:f2:58:26:83:f4:0f:9d:c6:94:48:39:80:
                    5e:d9:7e:34:fd:74:17:f1:af:23:3a:6f:49:b3:60:
                    38:2c:00:d3:61:d7:ac:2e:d3:01:c6:46:7c:dc:87:
                    4d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:EA:C4:8B:AA:A5:B2:25:13:D1:CC:93:C8:EB:43:78:E7:AD:88:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/acf10d95-d331-3615-8cb6-ef75756ed4f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl

            X509v3 Authority Key Identifier:
                keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.98.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:28:fa:5b:70:00:8f:16:38:69:fb:d4:c9:b8:56:10:98:72:
         b7:87:f0:53:fe:f2:b7:fa:36:3a:f4:00:c5:0d:a2:75:af:f5:
         45:de:9a:e9:ca:1e:7e:f2:20:78:56:45:96:d3:8c:bf:77:f9:
         d8:45:ef:48:60:6a:ad:98:4e:31:af:01:03:1c:e2:61:34:af:
         ae:2e:5d:8e:53:42:a5:01:ca:eb:9a:03:d8:f8:0a:e2:83:d4:
         f2:c6:a3:7e:a3:f8:42:13:ab:68:c7:cf:fc:7c:2a:86:9e:ca:
         a9:a3:0f:08:92:64:39:57:67:10:48:c1:e0:95:a5:ff:41:da:
         52:61:c4:44:58:63:df:bf:d6:26:8d:76:2c:d1:b9:75:25:a4:
         e3:c9:8b:dc:b8:5a:c2:5a:12:20:10:b9:2e:4f:39:00:89:44:
         f4:c4:27:8d:fe:9c:c3:6c:9d:20:e2:09:a5:a8:2f:95:a0:ce:
         f3:b7:73:52:e9:ec:0a:68:d5:b0:19:79:16:39:13:02:40:c1:
         94:c2:e5:c6:45:75:d3:84:04:eb:66:7b:af:6a:38:60:64:60:
         8f:1e:d0:c5:54:47:92:23:ad:ed:85:03:5e:06:9c:14:e5:2f:
         63:5a:48:8d:96:50:d1:75:10:b4:3b:df:c0:03:ef:9a:08:24:
         73:7a:66:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 20:35:28 2026 by rpki-client