Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2f466c0a-e3e9-393c-89d7-0ea4e1063535.roa
File:                     2f466c0a-e3e9-393c-89d7-0ea4e1063535.roa (raw, json)
Hash identifier:          qa7LZRHzcbf7MVWk8yk7uBEIIvERu0/dPG2T9iYWAf4=
Subject key identifier:   53:F9:0E:86:55:C0:54:48:5D:DB:C2:E6:CB:AD:16:E3:40:60:D3:39
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584DE556EA0B92505655B2061D40
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2f466c0a-e3e9-393c-89d7-0ea4e1063535.roa
Signing time:             Wed 20 May 2026 11:36:48 +0000
ROA not before:           Wed 20 May 2026 11:36:48 +0000
ROA not after:            Tue 18 Aug 2026 11:36:48 +0000
asID:                     7029
IP address blocks:        158.62.212.0/24 maxlen: 24
                          158.62.214.0/24 maxlen: 24
                          158.62.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e5:56:ea:0b:92:50:56:55:b2:06:1d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: May 20 11:36:48 2026 GMT
            Not After : Aug 18 11:36:48 2026 GMT
        Subject: CN=b66c8922-6639-483c-a768-382a405bf71d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1d:bc:1a:2d:12:c3:fe:fc:f3:63:c5:82:34:
                    42:ed:f5:25:1f:78:c2:61:f9:a9:18:d7:20:9c:05:
                    12:ed:bf:f3:c1:c8:3d:85:be:d2:5a:82:cc:f9:14:
                    92:7a:34:41:db:f7:5e:62:92:92:c7:8e:1a:cb:fb:
                    17:b1:47:10:ec:f5:69:99:12:6c:9b:71:66:c8:ed:
                    64:fa:72:ca:34:a9:d0:b3:f7:ab:ce:79:f1:06:54:
                    99:37:95:3c:9f:0f:f4:82:55:e8:71:30:ae:c8:c8:
                    a4:81:34:04:17:61:f2:13:96:22:38:df:52:49:a0:
                    76:2a:08:1c:71:22:b5:c0:fb:47:7e:ae:51:d1:19:
                    43:6c:62:ae:0f:38:43:5d:66:3c:9c:cf:59:66:56:
                    30:62:c5:2f:c6:1b:54:0b:96:5d:22:57:73:22:9d:
                    8e:b3:23:83:89:72:ac:f4:6f:a6:fc:27:d2:56:64:
                    2e:89:3f:df:4c:09:cf:65:e8:0d:88:8d:e4:7a:9f:
                    a8:ac:5f:7c:c5:8c:51:e0:db:c0:30:eb:2d:71:4d:
                    e4:17:be:83:d5:70:94:1c:58:35:e3:e5:0d:fb:23:
                    8a:8c:86:2c:c5:94:7a:fa:2b:8c:64:5d:16:8a:46:
                    99:5b:99:6f:4f:db:98:e1:fb:be:d6:48:af:a3:0d:
                    14:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F9:0E:86:55:C0:54:48:5D:DB:C2:E6:CB:AD:16:E3:40:60:D3:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2f466c0a-e3e9-393c-89d7-0ea4e1063535.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.62.212.0/24
                  158.62.214.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:3c:7f:59:12:56:90:d1:6f:4b:77:49:17:4b:a1:d9:9e:bc:
         48:08:99:52:3d:78:2a:8f:e6:ed:d6:24:9b:90:26:8f:6a:bc:
         b7:54:8b:b7:3f:4e:04:30:b9:30:30:f9:f3:fe:d8:67:5b:20:
         a5:9b:50:19:d2:f6:de:3c:42:37:cc:82:0b:f6:bb:d7:77:73:
         b3:aa:98:5c:27:93:f5:c1:db:ee:6e:70:a9:70:4a:09:1e:a1:
         a0:4a:6a:a2:6c:17:2c:96:8f:c2:42:4c:f8:ac:e9:4c:90:1b:
         19:10:4f:86:37:fa:bf:22:a2:2c:eb:a5:1d:50:86:a1:6a:e7:
         4c:ab:dc:80:9f:d5:21:aa:52:4c:7e:99:c2:b4:cb:16:4e:ef:
         21:3c:8d:98:9e:f0:8a:d5:be:f4:25:bf:31:49:46:9a:96:9b:
         f9:07:91:61:1b:6d:d7:25:96:5b:be:81:a2:03:c8:d4:03:2f:
         6f:a6:d8:0e:fe:79:1a:12:04:af:9e:d1:77:f5:d5:89:c8:36:
         ed:ef:1b:fe:d9:19:c3:78:45:7d:e8:cf:20:e5:06:d8:5f:89:
         1d:5e:c7:ea:67:ae:53:c0:7b:8f:97:23:6c:90:c9:11:cc:75:
         2d:07:fb:9d:60:5b:98:72:02:e4:fc:b2:ee:da:34:52:10:3d:
         0d:ee:fa:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 25 06:42:43 2026 by rpki-client