Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/84a0a74c-cc53-3066-8960-1cddc270afad.roa
File:                     84a0a74c-cc53-3066-8960-1cddc270afad.roa (raw, json)
Hash identifier:          b4Y0o+UtxGSF7vY+WJlOd2JWuhbBn1T+Z4UU1luECZw=
Subject key identifier:   BD:36:D2:9C:61:C9:41:15:09:9B:F2:3D:1A:D2:E9:E4:57:12:B0:39
Certificate issuer:       /CN=3779ad5d-5ca7-4c23-928f-091e0e1a3f93
Certificate serial:       010D0C9F4328584DDE85C9746222AF71E2A39400
Authority key identifier: DD:40:58:A3:BD:22:13:B4:A1:67:C5:07:2E:03:D5:40:0B:92:1C:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/84a0a74c-cc53-3066-8960-1cddc270afad.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     62739
IP address blocks:        162.220.116.0/24 maxlen: 24
                          162.220.117.0/24 maxlen: 24
                          162.220.118.0/24 maxlen: 24
                          162.220.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/3779ad5d-5ca7-4c23-928f-091e0e1a3f93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/3779ad5d-5ca7-4c23-928f-091e0e1a3f93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:85:c9:74:62:22:af:71:e2:a3:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3779ad5d-5ca7-4c23-928f-091e0e1a3f93
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=e7d9cbae-9cf7-4c3d-a110-3f90c82818a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:55:96:5d:86:ae:0c:35:8d:6c:6a:f5:c1:3f:
                    3f:76:b4:fc:75:7c:54:d5:10:0d:d8:ca:3e:9a:a6:
                    90:93:51:76:4b:dd:90:59:af:13:b6:30:52:16:31:
                    19:2b:dd:76:12:b9:d5:a7:f7:67:0c:49:51:9c:0a:
                    6d:fe:1b:53:04:29:7a:19:3f:85:69:a9:2f:7a:3c:
                    67:30:a4:6a:6f:ad:af:d2:2f:bf:42:81:8b:9d:05:
                    ee:b7:d6:4e:03:71:db:e3:f3:fd:41:65:43:43:66:
                    bf:03:64:a8:2e:f7:dc:5c:8d:6a:28:5d:ea:66:a6:
                    c9:d2:d2:35:7f:35:9a:85:3b:80:0b:52:79:db:bc:
                    09:b5:2c:3f:9a:45:64:f9:08:4f:da:7d:90:97:a6:
                    3e:50:a1:e3:e8:26:50:d3:05:2e:7a:77:7a:3d:68:
                    40:83:86:24:d9:30:fa:24:c7:50:d8:e2:c4:de:4b:
                    67:1c:db:61:27:0c:28:98:00:0c:43:54:c7:bd:c3:
                    03:4e:70:41:19:48:42:2c:3b:f0:5d:d5:25:1b:b5:
                    a7:c2:84:38:e5:76:2d:82:0f:b0:65:54:14:1e:5d:
                    a1:86:e2:e4:1b:36:25:1a:05:bc:75:92:33:f9:d3:
                    49:7d:12:61:98:44:7f:64:70:e7:b5:4b:51:35:90:
                    73:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:36:D2:9C:61:C9:41:15:09:9B:F2:3D:1A:D2:E9:E4:57:12:B0:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/84a0a74c-cc53-3066-8960-1cddc270afad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/3779ad5d-5ca7-4c23-928f-091e0e1a3f93.crl

            X509v3 Authority Key Identifier:
                keyid:DD:40:58:A3:BD:22:13:B4:A1:67:C5:07:2E:03:D5:40:0B:92:1C:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.220.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:9d:76:11:24:af:2b:f3:64:99:8b:57:d2:13:92:b9:df:5a:
         77:a0:89:b5:da:04:dd:1e:55:ab:b7:6f:b0:e6:aa:94:34:ec:
         4e:bb:ee:27:ed:b3:b0:51:c0:5e:30:c6:f8:5e:4c:f8:cf:97:
         f5:c6:ed:90:2f:5d:8f:4b:3c:41:d2:63:f3:11:a0:6b:d9:57:
         eb:1e:c0:10:d1:47:6d:17:7b:f5:0f:78:f7:de:92:2a:95:05:
         68:5c:4a:af:ab:f6:77:12:67:10:d8:4f:3e:fd:d0:14:10:48:
         9c:79:80:dc:c0:6b:53:4a:90:31:ef:52:8c:ff:1a:a4:8e:9f:
         90:ea:cd:1d:b1:37:92:68:84:15:6f:fb:52:67:5d:56:73:03:
         78:83:8a:2a:b4:12:9d:36:85:68:d2:d4:9f:55:a4:31:25:1e:
         2a:4f:38:d9:b0:45:ea:62:32:ee:72:04:b4:63:c6:f5:a8:c5:
         e9:d0:02:99:cd:74:c8:1b:42:39:22:76:bf:fb:e0:ab:dd:98:
         10:35:59:d0:be:48:f0:76:c1:c0:fd:c5:a2:b4:c6:12:4b:4d:
         b6:a1:9c:ad:8e:bb:62:8d:87:c9:a2:c3:9f:e0:fc:88:cc:b3:
         ce:67:5e:4e:a9:97:0e:cc:7d:9f:fc:cf:7c:99:00:40:19:ac:
         0e:b0:a1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 18:32:22 2026 by rpki-client