Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/4f6aebf0-73d4-3703-8f1c-e00f97701e74.roa
File:                     4f6aebf0-73d4-3703-8f1c-e00f97701e74.roa (raw, json)
Hash identifier:          R5kGFRcn9pOdoyfOauJtnOOs2kzKrj8yYbicfOWSDMY=
Subject key identifier:   70:B6:A9:B9:8B:17:70:E6:CD:47:92:07:58:BF:D2:53:A8:3A:0F:BA
Certificate issuer:       /CN=df7ca79a-f8f5-408a-86fb-472d63ed156f
Certificate serial:       010D0C9F4328584D5243483E647A412CB9228540
Authority key identifier: CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/4f6aebf0-73d4-3703-8f1c-e00f97701e74.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     396982
IP address blocks:        162.222.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 31 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:48:3e:64:7a:41:2c:b9:22:85:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df7ca79a-f8f5-408a-86fb-472d63ed156f
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=ee1683d4-2361-40cd-be1d-c914391a4ae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:15:7e:fa:d2:63:ba:61:c3:8e:8b:c8:94:85:
                    30:f6:cd:37:e4:f9:5b:01:f6:9b:4f:81:6e:08:3d:
                    ff:a9:c4:5a:32:72:94:24:ca:c7:58:ef:ec:2d:c1:
                    d2:3b:7a:0e:55:50:57:c2:0c:f5:09:7e:41:33:5f:
                    be:c2:da:e6:e1:55:26:99:b1:a6:45:43:93:57:69:
                    d2:c9:d2:80:8c:0a:47:b9:bb:3a:8d:8b:8a:41:4d:
                    a7:10:32:4f:28:2e:6d:d9:26:c8:c7:12:8c:fc:4d:
                    b1:10:77:b8:29:a8:65:66:b7:8b:d9:34:7d:dd:ca:
                    4f:ed:5c:60:c3:9c:aa:7d:d4:a0:2a:bb:a8:1e:de:
                    b7:6b:54:69:4d:57:a1:6f:8b:e8:c6:75:9c:16:8a:
                    22:2e:14:59:18:e3:73:d9:fc:e9:4c:89:38:ba:f1:
                    48:01:b6:1c:a3:a6:30:e3:60:81:b8:e7:cb:b3:b4:
                    06:f4:4a:33:ea:75:88:41:b4:fb:e3:fe:b9:e2:6c:
                    a7:b5:6d:dd:04:e2:8f:2c:6f:d5:6d:fc:95:7c:38:
                    16:47:3c:aa:c7:0f:cf:ce:bd:ef:75:4f:ca:20:c1:
                    fa:9a:df:39:e8:a4:d5:e8:b2:95:cd:33:0d:a5:d0:
                    9f:5c:bc:2a:0b:ea:3a:e5:38:8a:6f:17:3d:28:2e:
                    19:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:B6:A9:B9:8B:17:70:E6:CD:47:92:07:58:BF:D2:53:A8:3A:0F:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/4f6aebf0-73d4-3703-8f1c-e00f97701e74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.crl

            X509v3 Authority Key Identifier:
                keyid:CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.222.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:bc:21:3d:3d:fc:14:d2:97:af:8b:f3:eb:61:e8:42:2e:b2:
         b0:5b:bb:bc:8e:4e:d7:06:1a:04:68:27:c5:b6:39:d3:93:9c:
         27:bc:52:8d:b3:79:6f:90:5f:81:09:c4:09:b2:23:10:ba:a6:
         e0:07:c3:5a:eb:50:de:8c:10:e8:fa:d8:00:10:1c:bf:a8:99:
         e7:fe:14:cd:4f:0f:5d:0a:c9:16:70:69:60:10:8d:7d:63:86:
         32:0a:52:ad:74:8a:15:35:45:b0:28:7e:2a:21:47:c5:bf:fc:
         e7:b9:36:93:3b:b6:cb:47:fd:82:8d:5a:1a:8e:f5:d0:93:59:
         38:04:e7:37:64:3e:9a:f5:d0:8a:3c:04:17:0c:63:6a:85:c4:
         09:e8:14:69:fc:25:c0:a4:2c:f8:41:48:e1:91:5e:8e:9b:12:
         b2:e7:7c:a4:8f:6e:f8:d8:a3:f8:0c:29:54:39:c3:de:fd:a5:
         ea:1c:0b:04:fe:c6:f3:05:f0:49:71:21:37:0b:31:fa:1a:ca:
         4d:f4:fb:d4:f6:73:4b:9e:7b:34:dd:7a:53:46:d0:05:5c:06:
         87:a1:bd:e5:e6:17:17:ba:51:6e:1a:c2:14:4e:e3:8e:b0:8a:
         66:16:de:24:94:b3:0c:c8:78:18:fb:86:d5:41:02:4d:ac:8f:
         17:82:b4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 23:31:29 2026 by rpki-client