Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/65ad56d8-2c2f-3c1b-900e-8f61b34d0dfe.roa
File:                     65ad56d8-2c2f-3c1b-900e-8f61b34d0dfe.roa (raw, json)
Hash identifier:          dfhoDNAloNyrlHHXP2KjMjnN7v9Vu4jwRtK6uAbS75c=
Subject key identifier:   A6:2B:0E:01:89:62:59:7F:F0:50:55:33:17:66:19:44:80:C8:5F:A0
Certificate issuer:       /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
Certificate serial:       010D0C9F4328584E5D14AC25B8ED8D32ADFF7080
Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/65ad56d8-2c2f-3c1b-900e-8f61b34d0dfe.roa
Signing time:             Thu 02 Jul 2026 09:00:12 +0000
ROA not before:           Thu 02 Jul 2026 09:00:12 +0000
ROA not after:            Wed 30 Sep 2026 09:00:12 +0000
asID:                     6079
IP address blocks:        162.250.96.0/21 maxlen: 24
                          162.254.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5d:14:ac:25:b8:ed:8d:32:ad:ff:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
        Validity
            Not Before: Jul  2 09:00:12 2026 GMT
            Not After : Sep 30 09:00:12 2026 GMT
        Subject: CN=875bfc99-8f47-4fb5-aab3-ed54ef52c4d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:23:01:2d:1e:24:82:32:b0:b1:de:ee:be:10:
                    27:10:4a:91:93:8b:a7:43:e8:ca:c8:7c:b1:4c:fc:
                    e6:46:6a:bd:79:f9:41:eb:0c:79:42:d1:03:a6:69:
                    5d:16:db:da:ad:3d:69:0b:40:a8:d8:67:c6:28:c8:
                    dc:8a:a2:a3:3b:04:3b:e0:99:02:d3:e7:91:f0:cd:
                    63:ee:58:e8:36:e2:15:ca:0a:bd:0e:64:f9:c2:ff:
                    cf:6e:54:3a:e9:c2:1e:f1:40:12:b0:74:10:fb:d3:
                    78:6a:25:19:bf:10:ad:37:3c:e1:53:c2:78:0c:7c:
                    f1:fa:6c:02:ee:9a:bd:b2:f8:15:c2:a6:cc:db:80:
                    dc:ab:b8:39:f9:a7:41:ee:c2:4a:8e:bf:18:3e:32:
                    dc:cb:ba:db:6e:16:2f:77:c6:4c:dc:9f:eb:e4:4d:
                    f0:22:09:2f:e7:8c:4b:cb:60:20:82:3e:f0:ab:90:
                    ae:40:43:70:0a:55:a8:e7:01:7f:cd:bb:d4:40:9d:
                    45:87:5e:ab:c0:84:d5:ef:d8:a5:f1:71:b2:6c:b9:
                    0a:10:de:9a:eb:a3:fa:9b:19:6a:22:af:8b:60:c3:
                    b3:c4:c7:69:3f:6d:76:42:45:53:d8:69:5b:54:fc:
                    0d:30:36:d8:7b:01:06:6e:f2:5e:ab:cb:0d:42:4f:
                    c4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:2B:0E:01:89:62:59:7F:F0:50:55:33:17:66:19:44:80:C8:5F:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/65ad56d8-2c2f-3c1b-900e-8f61b34d0dfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl

            X509v3 Authority Key Identifier:
                keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.250.96.0/21
                  162.254.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:6f:cc:58:12:65:6f:cd:a9:d0:ee:e6:d5:c1:3f:83:a9:54:
         55:0a:a2:e2:05:04:4d:45:9e:84:e9:12:fd:d4:64:bf:51:a6:
         69:77:b0:18:20:f4:c0:14:76:96:ec:b7:ff:e6:08:81:5a:a2:
         e8:f4:34:be:d8:08:30:a3:09:8f:c2:02:d8:52:be:17:89:4f:
         0e:8a:2f:e8:07:ed:cf:bf:5e:5f:cf:91:ad:45:c9:ad:51:f3:
         62:11:36:ab:25:a5:25:77:17:31:43:0b:ee:b2:68:65:a5:6e:
         4e:f3:b7:71:37:27:d3:3d:6d:02:8a:39:6a:93:b8:ac:bb:97:
         35:ca:57:27:99:fd:a5:d8:9a:82:aa:e4:4f:ae:84:a7:b3:45:
         e0:53:10:5b:25:7c:d8:dd:80:5f:d2:d6:29:9b:ad:04:6c:a2:
         94:f1:de:48:8e:b1:78:a6:39:ba:5a:39:42:19:f9:5f:f2:f5:
         97:1a:60:f5:16:55:c2:a4:ed:82:e8:c7:df:e9:40:09:b4:8e:
         99:05:8c:e5:2e:e1:c8:be:ac:8b:8e:66:9f:ca:57:5b:ad:ab:
         73:fb:a0:b3:a7:9b:64:1f:5d:7d:6e:ed:75:ec:9e:d9:9c:6a:
         6e:9b:f5:63:b1:cc:f0:49:e2:a1:cd:9f:d8:2d:6a:97:15:cb:
         4d:06:6a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:36:24 2026 by rpki-client