Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/6f48c7e7-586c-3b33-b893-1ceb9bb4c354.roa
File:                     6f48c7e7-586c-3b33-b893-1ceb9bb4c354.roa (raw, json)
Hash identifier:          P8oPJRst6G+zfNZ/Ja0+2ixQoCsaS0tY8TxUfSNko1c=
Subject key identifier:   C2:C1:89:22:16:91:9F:0F:FD:91:52:97:0E:53:0D:1D:EB:80:F7:D0
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584E8DA2370D41FCD6B93D896FC0
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/6f48c7e7-586c-3b33-b893-1ceb9bb4c354.roa
Signing time:             Sun 19 Jul 2026 18:24:20 +0000
ROA not before:           Sun 19 Jul 2026 18:24:20 +0000
ROA not after:            Sat 17 Oct 2026 18:24:20 +0000
asID:                     54858
IP address blocks:        162.222.168.0/22 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8d:a2:37:0d:41:fc:d6:b9:3d:89:6f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Jul 19 18:24:20 2026 GMT
            Not After : Oct 17 18:24:20 2026 GMT
        Subject: CN=19c82989-d60a-40f8-8dd1-c50d5b7b8c90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6d:8d:b1:d5:7f:d0:c3:8a:d8:35:83:e9:ae:
                    d6:35:cd:c9:1a:43:ea:df:01:36:31:65:38:d6:b6:
                    3b:a3:75:d4:17:b5:17:6b:6a:24:29:1a:e8:7b:4e:
                    1d:21:5c:4b:38:8b:11:b4:8e:33:7c:9a:21:6c:2f:
                    0d:12:9b:e7:68:0a:29:84:4d:82:75:f1:96:43:a5:
                    18:0f:f8:3f:f6:0c:f9:98:9d:84:8f:5b:c6:fb:b7:
                    06:81:5b:bb:a3:98:5c:c8:e4:27:01:d0:f9:01:ed:
                    60:74:90:91:bb:57:1a:19:56:f0:fb:c9:7d:2a:ac:
                    47:13:f2:18:c0:2c:d2:cf:d0:d4:7d:a9:83:66:b0:
                    bb:fa:89:96:c2:5b:e4:18:89:06:a2:41:13:6b:b1:
                    48:03:90:86:17:3f:3b:de:29:84:10:ae:2c:cf:98:
                    cf:fb:f1:3b:23:6c:45:99:7b:df:97:74:5d:7f:03:
                    ce:d2:ea:5a:07:8e:7b:a0:c8:01:84:61:23:0e:ad:
                    52:bc:4e:53:ac:8f:c6:5c:b1:8d:90:85:b9:d3:00:
                    ed:92:23:89:9a:8c:e5:c4:97:dc:63:f4:16:4c:6a:
                    bb:de:dd:07:e8:3b:bc:c3:b7:b9:4f:6d:8d:8f:6f:
                    c8:5b:1f:8a:d0:de:c6:e6:02:2b:f6:68:e7:31:5d:
                    39:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C1:89:22:16:91:9F:0F:FD:91:52:97:0E:53:0D:1D:EB:80:F7:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/6f48c7e7-586c-3b33-b893-1ceb9bb4c354.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.222.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:ee:2b:63:9e:02:b7:f5:ef:91:d3:53:b9:f9:f3:05:a3:4d:
         75:d1:1b:c7:67:da:ba:40:90:72:e8:cc:29:a1:35:c2:3e:ed:
         5d:f4:40:ec:1d:60:90:76:e1:c3:a5:a3:13:80:9f:71:52:29:
         60:4e:23:d6:61:06:f0:0e:cc:fd:39:78:e2:59:83:13:fe:3b:
         3f:26:63:86:68:40:34:d8:73:88:6d:72:bd:cf:c6:b0:57:89:
         b0:35:e6:4e:bd:30:f2:48:67:50:65:8d:36:bc:47:ae:43:55:
         1f:07:05:51:88:af:20:dc:9a:9d:61:da:3e:fc:ae:18:a4:01:
         c4:5e:b8:f8:73:19:05:02:0d:22:18:b3:12:8a:d7:2d:50:fb:
         d5:a7:75:04:07:aa:34:94:c2:4f:81:0b:5a:22:38:8c:77:2b:
         61:40:03:cf:74:85:25:2d:b4:a1:37:3d:c3:b6:15:1e:32:fc:
         eb:5b:ca:be:15:8e:1c:65:ab:1d:36:f1:13:f0:a3:f4:da:d2:
         7b:aa:62:d6:b6:bf:a7:71:3f:3c:22:4f:41:0d:44:e4:fe:1b:
         f2:b5:2a:05:73:ba:35:e7:16:cf:0a:ce:1d:56:68:94:60:a8:
         46:e8:81:b8:db:b9:87:f7:83:c5:d8:12:b0:ad:67:86:43:91:
         a3:f0:85:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:37:30 2026 by rpki-client