Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/229e87d4-47a8-3f43-b4ff-059cc7140be1.roa
File:                     229e87d4-47a8-3f43-b4ff-059cc7140be1.roa (raw, json)
Hash identifier:          jYgL7dxlIEIYah8DrlqeABa6tAOQk+nyn/XMK0z2EeY=
Subject key identifier:   12:2A:74:4E:82:18:B3:D7:EE:F9:DD:16:F4:E6:AA:41:23:0C:4C:A7
Certificate issuer:       /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
Certificate serial:       010D0C9F4328584E35FF12C262A0CD8A0B67CD80
Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/229e87d4-47a8-3f43-b4ff-059cc7140be1.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     13984
IP address blocks:        162.217.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:12:c2:62:a0:cd:8a:0b:67:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=02ad311f-7278-44c4-8f03-5cf77d7d5877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e8:0c:c7:65:f9:8e:6c:3c:eb:86:1d:35:9f:
                    b5:05:2d:34:54:66:21:5a:bb:ec:8a:6a:52:b3:cd:
                    99:4b:10:e5:0e:72:4d:36:2a:ff:05:ce:51:38:40:
                    7d:86:29:cd:29:cc:03:03:a4:60:2c:9f:24:c2:e4:
                    ce:43:55:51:ec:31:c6:0c:36:b9:52:7f:f2:16:de:
                    ad:61:f6:d3:77:50:f6:c4:89:fc:60:ef:cb:b6:aa:
                    0e:fd:ed:84:a0:18:43:78:79:7c:70:49:af:16:bf:
                    00:81:63:bf:e5:d9:6e:15:e2:7b:8e:0c:cd:2c:21:
                    e3:ae:8f:a5:ee:c8:5f:04:bf:a5:de:d9:ec:f7:71:
                    1b:8b:8c:10:55:69:9c:6d:3b:94:08:43:af:c8:3d:
                    20:9d:e8:83:01:98:58:15:30:c9:34:e3:64:04:44:
                    e5:81:01:d4:82:65:be:32:61:ba:b6:60:02:d2:95:
                    f8:57:01:38:ae:48:d8:ed:11:ff:3b:ff:98:35:e7:
                    ae:29:fb:7d:e3:1e:48:0c:db:67:31:fd:d3:b8:87:
                    52:bd:0a:95:5a:39:21:ad:6c:4f:57:ed:7d:cb:21:
                    43:a9:c6:43:48:30:25:e3:0d:04:9b:99:a4:6d:91:
                    ba:23:27:3c:51:34:fb:1b:9e:37:15:ce:98:92:26:
                    dd:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:2A:74:4E:82:18:B3:D7:EE:F9:DD:16:F4:E6:AA:41:23:0C:4C:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/229e87d4-47a8-3f43-b4ff-059cc7140be1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.217.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:55:8a:2a:9d:73:e3:02:86:f9:c8:b0:f0:98:15:9b:d7:30:
         d0:1d:6b:a7:80:eb:d4:c1:d5:44:a3:f1:50:e7:08:af:36:7e:
         7e:76:57:63:3e:49:e5:12:00:3a:f1:fc:52:71:29:b9:35:47:
         02:f8:c6:56:f0:82:fb:ea:e8:4d:5d:7e:d1:7d:f9:e2:ea:00:
         83:33:a0:83:41:42:51:2f:92:1f:76:2f:77:c1:4e:b8:ff:05:
         bd:19:66:0f:e5:d1:b3:6f:9e:82:b9:37:16:6e:69:64:f0:b3:
         7f:aa:93:da:eb:32:52:55:67:6a:59:49:51:b5:07:90:04:d7:
         79:57:91:5f:03:5f:ae:f9:c1:12:25:7d:26:aa:8f:8e:60:ca:
         ee:e6:3a:a1:de:3b:cd:97:55:07:fb:a4:53:4a:7a:b8:61:11:
         d8:46:bf:cd:11:c2:0d:fc:6f:c5:50:09:2d:d2:26:ff:47:43:
         14:f8:6c:f6:49:f9:5d:07:99:3e:6a:d3:69:14:62:f6:29:72:
         17:5c:01:80:57:17:38:b5:bc:26:28:fb:d7:16:9c:51:b0:cf:
         c4:f7:cc:96:2f:8e:43:d8:d5:58:87:45:12:81:b9:db:c7:3c:
         98:db:30:f4:57:d6:b8:76:8f:d4:6f:5d:7c:40:0c:50:f5:99:
         c0:a6:67:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 15:44:30 2026 by rpki-client