Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5c1ac775-846b-34c5-befd-aa1852377b7f.roa
File:                     5c1ac775-846b-34c5-befd-aa1852377b7f.roa (raw, json)
Hash identifier:          RB/tNc5Ym5KNIw+njlUe5EoqIHSVXgRBPcv35rodhqo=
Subject key identifier:   6F:5B:E4:4F:F5:3A:92:C4:D2:40:FB:F7:D6:5E:A5:48:C2:48:0A:19
Certificate issuer:       /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
Certificate serial:       010D0C9F4328584E104EEBC6B14B3294743D1880
Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5c1ac775-846b-34c5-befd-aa1852377b7f.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     174
IP address blocks:        162.250.96.0/21 maxlen: 24
                          162.254.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4e:eb:c6:b1:4b:32:94:74:3d:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=12155f27-8929-439c-9537-b4e0d5337f19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:85:7e:04:59:2c:e9:c4:da:04:ea:a0:2e:9e:
                    39:8b:d4:68:7e:cf:3e:c3:3a:ee:9c:d8:b9:5c:78:
                    da:51:46:6e:97:e5:4a:74:41:9b:15:57:d8:ad:bd:
                    51:11:91:d7:45:24:89:0c:16:53:6f:65:a7:2b:b2:
                    17:b9:17:8c:0f:5a:71:8d:24:3b:45:77:a4:0e:87:
                    e3:50:e0:48:49:2c:98:4b:68:2d:48:72:da:b1:4a:
                    fa:e2:68:a0:1a:49:c4:28:ae:80:27:0d:6c:a9:c3:
                    df:fd:84:81:90:3c:37:59:2a:02:57:6f:e4:c3:53:
                    5b:81:77:d6:b7:ff:a8:1d:a0:25:b6:2f:f2:1b:5a:
                    8b:1c:a2:8a:7f:34:cd:d6:64:16:54:94:6f:24:4a:
                    2f:0f:42:e0:db:3d:50:5e:8b:08:36:f6:61:34:2e:
                    42:b2:fd:d0:64:ab:eb:5d:9f:4f:db:1a:b9:d9:9e:
                    c0:13:40:48:d8:13:ed:be:ae:a3:ae:ca:18:40:0f:
                    ad:38:a5:39:00:de:99:e3:8a:64:73:18:13:d6:53:
                    bd:52:4e:01:5e:14:22:c3:23:ac:81:4b:a6:81:0b:
                    34:18:d3:ad:1d:af:97:7c:91:13:37:e3:db:f8:62:
                    37:ef:09:52:85:d6:5b:ef:e3:08:e4:b1:40:8e:d2:
                    58:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:5B:E4:4F:F5:3A:92:C4:D2:40:FB:F7:D6:5E:A5:48:C2:48:0A:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5c1ac775-846b-34c5-befd-aa1852377b7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl

            X509v3 Authority Key Identifier:
                keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.250.96.0/21
                  162.254.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:4f:95:6b:54:d0:55:15:33:e3:a0:3a:0a:ff:41:2e:82:73:
         da:3a:fb:c2:a9:ab:83:60:af:90:0b:7f:b8:56:7c:37:8e:72:
         2c:09:b1:1a:18:1c:2c:e2:c3:2a:b5:c9:c1:14:a0:39:5f:6b:
         ac:57:07:29:91:67:6c:8a:69:48:be:21:2e:af:ff:00:da:fc:
         93:09:51:ec:8e:95:f3:26:17:d2:f9:35:67:bb:3d:25:4e:f9:
         d4:b1:6a:32:21:06:39:49:30:88:29:28:ab:97:9a:89:08:01:
         a4:71:3b:2e:87:b0:76:56:a1:e7:9d:76:c1:46:b1:1f:ee:55:
         c0:b7:48:34:20:97:83:4e:25:7c:e1:1f:a4:83:21:4b:cb:ff:
         21:59:fb:15:db:33:97:8d:55:ea:1c:b0:f6:fb:bf:8a:77:78:
         27:45:28:0c:b7:a8:ed:0e:70:e6:d6:a9:c9:61:93:ba:73:41:
         37:58:c0:9f:10:91:ab:da:00:96:57:d2:b9:ce:dc:06:bb:b2:
         77:a7:4e:39:c3:b7:44:76:e6:7b:ff:d1:35:73:8b:cd:85:94:
         4e:b3:dc:66:db:58:5a:3a:23:1a:41:ef:9f:70:16:66:2e:40:
         b9:fc:49:8b:a8:63:dc:2f:60:93:4e:c6:29:c5:31:15:8a:7f:
         47:44:87:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:57:10 2026 by rpki-client