Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/13799451-54fa-34dd-b52f-0a27ba83acb9.roa
File:                     13799451-54fa-34dd-b52f-0a27ba83acb9.roa (raw, json)
Hash identifier:          tGfz8oDeC0yAp4QpNJVFRx8O9kA40VbSgERRq3X7WT4=
Subject key identifier:   D8:2E:F8:E1:89:BA:3B:6B:30:FB:B6:FB:38:22:BB:4A:AC:F2:11:D4
Certificate issuer:       /CN=3e65c610-fa49-4d7b-a2e7-69124f1e5c85
Certificate serial:       010D0C9F4328584EBB11BC7419A86F73059D2E60
Authority key identifier: F1:40:ED:33:FA:99:FA:E6:68:C3:42:37:01:C2:6B:4C:6A:AE:35:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/13799451-54fa-34dd-b52f-0a27ba83acb9.roa
Signing time:             Wed 05 Aug 2026 01:00:12 +0000
ROA not before:           Wed 05 Aug 2026 01:00:12 +0000
ROA not after:            Tue 03 Nov 2026 02:00:12 +0000
asID:                     14228
IP address blocks:        162.249.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bb:11:bc:74:19:a8:6f:73:05:9d:2e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e65c610-fa49-4d7b-a2e7-69124f1e5c85
        Validity
            Not Before: Aug  5 01:00:12 2026 GMT
            Not After : Nov  3 02:00:12 2026 GMT
        Subject: CN=c10ecf28-1417-4c0f-87c0-258b32ab8abb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8d:99:6c:b7:9c:8f:ec:89:01:d7:c1:f0:ed:
                    15:c3:74:fa:05:78:93:29:05:f7:87:0f:c9:65:69:
                    e6:a1:36:ce:0f:12:e6:4b:21:68:2f:13:a6:8f:01:
                    24:24:47:f6:32:bf:b2:d2:1c:88:63:c5:b7:47:5b:
                    05:8f:39:1c:2e:12:08:20:b1:1e:6c:5a:ae:bc:81:
                    5f:70:60:7c:c4:7a:6d:0b:2f:61:0d:2e:f4:9c:14:
                    9a:fa:e1:cc:f9:0c:45:37:04:14:20:f6:0e:8b:24:
                    a5:7a:b1:55:74:ec:fa:d2:70:39:0d:ef:74:b9:f3:
                    55:28:a7:ce:8e:ae:cb:73:98:fc:c6:7d:f1:e2:23:
                    0c:bd:52:47:d6:66:ff:6b:58:09:a7:43:0f:bf:14:
                    2c:6e:a8:8d:72:8a:52:4e:b6:0d:04:4a:49:46:8d:
                    06:10:9e:71:e1:26:9c:d2:16:fb:1a:64:6d:66:43:
                    2b:b9:f6:7d:5e:75:89:61:1c:19:11:7e:94:45:d4:
                    6d:6e:c6:2c:8a:c0:ac:40:dd:94:48:3e:a2:f2:09:
                    da:f7:f6:27:8a:e2:c2:35:8e:77:73:c3:59:c5:da:
                    3b:d1:37:77:e0:0e:d0:72:f6:8b:00:b3:51:da:a7:
                    43:b6:af:1c:4c:2a:4e:71:78:01:2a:8f:e2:28:a0:
                    0b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:2E:F8:E1:89:BA:3B:6B:30:FB:B6:FB:38:22:BB:4A:AC:F2:11:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/13799451-54fa-34dd-b52f-0a27ba83acb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.crl

            X509v3 Authority Key Identifier:
                keyid:F1:40:ED:33:FA:99:FA:E6:68:C3:42:37:01:C2:6B:4C:6A:AE:35:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.249.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:ac:0b:80:0e:8e:19:3b:a0:95:33:c0:2b:3b:2d:4c:fa:66:
         50:80:e7:bb:55:6f:cc:8f:8d:7a:57:1e:d7:a8:7a:13:0b:e8:
         c3:77:d9:70:ee:c5:8c:4b:a4:8a:52:71:44:c1:45:7b:74:45:
         1d:bb:39:df:c6:4a:2e:a6:62:13:f6:90:bd:c8:4b:5d:8b:48:
         b1:c1:6d:6b:af:50:7b:84:89:eb:0d:4e:7f:13:73:a0:7a:b9:
         89:f7:0f:9d:b2:18:3e:69:6d:08:23:a7:36:56:4e:8b:44:29:
         19:9a:a7:a7:8b:85:63:57:bb:4e:0b:0e:2e:8e:90:d9:62:e5:
         89:8b:44:16:bd:9e:7f:54:58:d3:cf:45:52:c5:59:0b:73:73:
         88:96:85:e5:c3:5e:f7:69:78:81:d1:01:0e:0e:2c:b6:b8:26:
         55:e1:0c:36:c9:4a:34:5e:a6:df:f0:fe:69:78:e6:71:6a:a6:
         4e:69:c9:1d:fd:9f:93:56:e6:23:5f:59:dd:4b:03:a5:f8:4f:
         0b:25:65:cd:2a:d0:dc:1a:f9:65:a8:a8:74:35:57:04:8d:71:
         d6:7b:6c:ab:a1:d4:30:31:b8:46:a1:90:88:48:65:2d:e2:22:
         2a:b0:ad:be:b9:6c:7f:13:13:d1:ff:ca:81:4c:b6:1b:25:f2:
         fd:dc:9a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:46:00 2026 by rpki-client