Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/41081f1b-d82b-37ee-bd2d-85ddb0792990.roa
File:                     41081f1b-d82b-37ee-bd2d-85ddb0792990.roa (raw, json)
Hash identifier:          se/JPd0n/RIT88T7GxzsOwPADh1XkSNRzNS0+SmrJwU=
Subject key identifier:   5A:49:30:EA:6D:31:5D:A6:AA:ED:20:55:C0:49:23:1D:C6:08:A8:E8
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F4328584D571FA46A6FB520AD0C091260
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/41081f1b-d82b-37ee-bd2d-85ddb0792990.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     16904
IP address blocks:        162.221.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Apr 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:a4:6a:6f:b5:20:ad:0c:09:12:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=25990640-d263-44e8-8e24-7139433455ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5a:19:a8:6d:6e:77:65:a9:41:32:b3:8f:6d:
                    31:2a:cc:bd:3d:eb:a9:36:be:07:5d:8a:2b:4c:62:
                    e0:e7:09:51:01:6c:7d:dd:51:97:da:46:33:f9:3b:
                    ee:29:54:cc:fb:7c:27:68:3a:54:2c:0b:2c:46:57:
                    05:5a:8c:16:f5:99:b4:8d:a3:e7:87:26:84:55:ab:
                    96:78:37:a6:d0:7c:cf:51:8b:11:b7:49:64:4d:96:
                    a0:0b:d7:a5:92:d2:83:f3:a9:02:02:c4:2d:aa:a5:
                    91:12:87:2a:c2:43:5b:3d:8f:4d:40:52:83:29:a1:
                    49:53:d8:a1:3f:82:b1:97:cf:d0:0b:1c:65:55:e6:
                    53:fb:da:91:60:c5:3f:6d:6c:b3:e0:37:3c:a1:df:
                    f4:33:00:85:2d:91:94:4a:19:05:6c:c2:c0:10:64:
                    11:6e:f6:73:91:ac:37:76:db:8c:5e:ef:02:fd:dd:
                    0b:c5:76:1e:f3:9c:21:d5:98:2b:dd:75:20:3e:a3:
                    9d:77:d1:9c:3b:fc:12:c3:32:6e:37:56:7e:99:c7:
                    60:35:8f:58:1a:cc:39:32:18:81:31:6e:b8:85:6d:
                    f4:e7:96:d0:a3:4f:eb:e6:55:7f:94:87:1b:fe:11:
                    e5:e4:71:0f:a6:ba:ae:f0:53:54:ec:08:4c:3d:2d:
                    54:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:49:30:EA:6D:31:5D:A6:AA:ED:20:55:C0:49:23:1D:C6:08:A8:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/41081f1b-d82b-37ee-bd2d-85ddb0792990.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.221.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:d8:b4:01:a1:cc:01:19:52:52:ab:58:b7:ab:44:36:0c:2e:
         08:33:b8:e2:f1:7e:10:33:6e:a0:84:8a:2c:ab:ea:81:44:79:
         d7:8f:22:d6:fe:cc:5a:5f:f4:a4:ff:c4:91:8b:ef:9c:b4:9a:
         3d:1b:37:44:f6:b1:ed:fd:e6:8e:21:53:de:54:bd:50:57:69:
         bb:4a:c0:cd:f6:f1:36:89:db:6a:c1:8c:2e:b8:45:db:af:87:
         20:89:bd:ba:99:84:f8:22:54:a8:d4:01:ad:c2:45:37:2a:40:
         ee:a1:66:42:ad:52:65:c3:22:d9:8d:f6:4b:5c:fd:fa:11:13:
         09:73:f9:fd:a9:47:10:95:15:44:7c:c2:c3:86:c5:c2:67:51:
         f6:64:8c:e6:70:12:1e:0a:b4:53:21:35:3e:96:58:17:96:f5:
         db:6f:ca:ec:38:5f:7d:41:6a:ca:47:14:7f:8b:a0:b5:08:18:
         bc:85:38:a4:67:83:06:fd:64:9e:b9:22:0d:c4:9f:0b:13:b4:
         b3:70:e2:f5:6a:a2:a6:b0:a5:25:bd:db:29:55:8e:6e:b0:ce:
         7b:fa:68:32:c9:e1:57:80:0a:5c:81:cf:fd:06:d1:f8:4e:c7:
         37:c7:a1:fe:b2:58:97:33:a9:74:75:60:53:51:ea:8c:d0:6b:
         e1:37:a0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 01:33:42 2026 by rpki-client