Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/5473b85e-e2bd-3ddc-89d6-4e00b7d3ffe2.roa
File:                     5473b85e-e2bd-3ddc-89d6-4e00b7d3ffe2.roa (raw, json)
Hash identifier:          n8qz1JjG2GhrflzDNjmYQ7gIGB6i4ejIZYHS6p2gOkw=
Subject key identifier:   05:28:DD:C5:45:5B:7C:5E:79:0E:37:8D:5C:66:A3:94:F3:5F:62:1B
Certificate issuer:       /CN=ab98592a-7218-439c-b165-34810fd16d71
Certificate serial:       010D0C9F4328584F1037A44C11473C9B13B86E00
Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/5473b85e-e2bd-3ddc-89d6-4e00b7d3ffe2.roa
Signing time:             Fri 04 Sep 2026 13:00:12 +0000
ROA not before:           Fri 04 Sep 2026 13:00:12 +0000
ROA not after:            Thu 03 Dec 2026 14:00:12 +0000
asID:                     3300
IP address blocks:        63.250.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:37:a4:4c:11:47:3c:9b:13:b8:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71
        Validity
            Not Before: Sep  4 13:00:12 2026 GMT
            Not After : Dec  3 14:00:12 2026 GMT
        Subject: CN=aedc7e99-a795-428c-a0bb-4ea42e1c4897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2c:89:d4:75:c8:27:42:80:05:2d:78:5a:d7:
                    40:ac:03:26:e2:d4:73:d4:85:9e:68:5c:49:71:e0:
                    57:07:ab:d9:ca:a5:8f:3d:e9:84:c0:85:a8:58:4e:
                    00:db:31:cb:7a:7c:14:1f:4e:0f:61:5b:51:2c:d3:
                    0b:29:e2:16:6f:a2:48:1b:c4:55:6b:70:ad:69:03:
                    af:2f:29:83:c7:bf:89:e0:19:b5:ea:65:f0:48:34:
                    d3:6b:70:71:97:e0:55:3c:e3:5b:8c:6b:96:f1:d5:
                    95:8e:4a:54:ce:7a:6a:a3:33:4a:f7:a8:81:e0:c6:
                    a9:0d:3f:8b:3e:e6:2c:04:8a:da:b1:3e:36:d7:7b:
                    dc:3d:af:1d:0e:9c:53:1c:99:32:16:3d:24:df:ef:
                    e1:f6:27:1a:ce:43:0e:2f:93:8d:0d:27:9d:b0:a7:
                    5b:1d:56:6a:01:9f:0a:b4:5f:c7:29:11:4a:b9:95:
                    90:b4:35:aa:13:f4:de:c2:3e:5d:ec:c1:ad:e0:c4:
                    67:dc:04:37:47:d7:35:17:53:f7:fd:27:21:81:91:
                    96:36:4b:65:09:92:e9:3a:d1:17:2e:b7:9e:8e:c8:
                    62:a0:ca:7d:c0:b7:a5:e3:74:ce:c8:f9:98:27:4d:
                    61:7e:84:39:f6:4a:81:9f:a4:4d:ea:22:72:88:fc:
                    c4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:28:DD:C5:45:5B:7C:5E:79:0E:37:8D:5C:66:A3:94:F3:5F:62:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/5473b85e-e2bd-3ddc-89d6-4e00b7d3ffe2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl

            X509v3 Authority Key Identifier:
                keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.250.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:b7:bd:f1:e9:11:94:10:18:7d:79:3a:08:ac:09:01:3b:3d:
         a8:ad:ae:3e:45:ce:23:48:08:47:b7:0f:6c:bc:e0:e9:76:db:
         21:c2:de:97:55:74:29:7d:2c:e9:dc:48:b1:4e:97:66:46:46:
         af:39:4b:69:01:ac:99:3d:f2:01:44:37:9a:a3:ef:7e:7a:b3:
         48:45:6a:47:1d:31:26:c8:42:1e:08:19:dc:1e:90:37:92:0e:
         90:08:65:1b:23:8b:d9:90:a8:ae:bd:d3:3d:60:a1:d3:97:c5:
         4d:56:d8:a8:b2:55:1a:34:a6:ed:47:1f:1c:d2:f6:28:ed:27:
         69:c8:22:13:bc:58:8d:4a:4f:fd:b5:4d:ea:10:13:48:12:d7:
         09:29:bc:35:2d:b8:ca:b0:24:01:a4:98:51:5c:5e:a9:e0:f5:
         06:76:06:81:fb:d9:d7:63:9c:6f:7a:6b:ca:6c:c4:18:32:f0:
         73:5c:ae:7c:16:e6:99:a1:cf:6d:89:f7:01:62:8a:05:67:ee:
         37:f5:5b:20:1e:2c:81:27:26:3d:41:6d:95:61:a5:48:26:8e:
         e9:47:c9:43:c6:00:62:f5:98:1b:22:8c:5d:13:e4:87:94:40:
         f5:fc:77:b9:6f:6e:8e:24:9b:7f:d8:b1:66:aa:b8:2d:bf:d0:
         b0:c9:21:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:03:31 2026 by rpki-client