Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/35174644-c2c2-3b02-832d-cdd5f1067172.roa
File:                     35174644-c2c2-3b02-832d-cdd5f1067172.roa (raw, json)
Hash identifier:          q8WUV5B2RsTq+mSvWWx4lkyOobkHRcp290JVJHm4fNA=
Subject key identifier:   DC:2F:5A:18:F1:88:49:12:E0:D7:FA:65:BB:1E:2B:F3:5D:EF:D0:36
Certificate issuer:       /CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
Certificate serial:       010D0C9F4328584F6B57A1796C6A7F6140985CC0
Authority key identifier: E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/35174644-c2c2-3b02-832d-cdd5f1067172.roa
Signing time:             Wed 07 Oct 2026 04:23:30 +0000
ROA not before:           Wed 07 Oct 2026 04:23:30 +0000
ROA not after:            Tue 05 Jan 2027 05:23:30 +0000
asID:                     27523
IP address blocks:        162.222.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6b:57:a1:79:6c:6a:7f:61:40:98:5c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
        Validity
            Not Before: Oct  7 04:23:30 2026 GMT
            Not After : Jan  5 05:23:30 2027 GMT
        Subject: CN=4f7d0a5c-7cb7-4c76-9c2c-e0664995509d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:53:72:f0:b2:d2:67:b4:5f:9d:f1:51:60:06:
                    9e:4c:15:c6:42:0d:da:78:8c:28:60:e6:a5:2a:27:
                    8d:f5:d0:eb:66:95:bb:43:47:71:ec:97:03:00:fd:
                    bf:9f:2e:2b:49:e2:27:1c:e1:bf:61:08:41:a0:2b:
                    98:58:45:14:a1:a3:d3:29:f1:33:b9:a9:32:f4:69:
                    7d:ba:04:d0:fc:64:1a:59:db:da:45:46:40:c8:1b:
                    bb:7e:9e:c7:15:c0:92:17:ef:27:44:2e:ba:98:49:
                    96:0e:da:bb:fb:36:d2:27:34:54:03:95:99:5e:62:
                    64:48:c8:eb:ee:a8:e3:0f:37:ea:2a:48:fb:e4:95:
                    f7:4f:f5:86:05:00:5e:ed:4d:f1:59:49:43:bd:51:
                    84:34:fc:17:80:fd:c0:d9:50:04:aa:38:fb:06:c5:
                    6b:8d:1a:8e:74:cd:79:0f:bb:7f:79:f5:ce:55:d5:
                    d9:34:9c:88:91:6e:3e:c5:9b:a3:d5:31:0a:6e:fc:
                    d3:7d:11:11:45:21:97:0e:d0:5c:8e:12:f7:22:77:
                    74:cc:5c:7e:9f:c8:c5:20:5a:0a:d1:64:07:13:b3:
                    a7:f7:d4:22:4c:46:46:53:db:5e:9a:7e:55:1e:46:
                    cf:6f:5a:2b:ab:19:ab:5c:63:fb:8b:a7:59:ca:c2:
                    2e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:2F:5A:18:F1:88:49:12:E0:D7:FA:65:BB:1E:2B:F3:5D:EF:D0:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/35174644-c2c2-3b02-832d-cdd5f1067172.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl

            X509v3 Authority Key Identifier:
                keyid:E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.222.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:46:d2:03:ee:c9:9e:6f:c0:ff:60:e4:5a:1a:02:ed:42:4a:
         9c:10:39:25:fd:4c:d6:b6:54:9a:ea:b8:c1:03:9a:ee:3b:74:
         08:b0:5d:f2:84:5e:c7:62:dc:6c:05:7c:e3:5f:44:cf:fa:bf:
         e0:27:90:55:2d:69:bf:6a:02:46:ad:e5:57:8c:fa:a8:a7:6b:
         b6:a1:1d:69:ed:07:f0:bc:ac:13:e4:4b:c0:e8:24:b8:ed:1f:
         30:f4:82:7c:ae:46:3d:0d:cb:3f:ef:e6:3c:f3:28:53:6a:7b:
         b3:d8:89:b6:92:46:14:6b:72:d2:04:ca:db:ec:4c:c6:e2:49:
         9e:08:16:1d:91:a4:31:bb:70:49:76:c2:70:55:ba:7b:e6:2a:
         99:39:f4:96:10:3d:72:e1:68:63:24:d9:13:fd:e7:6e:6c:b9:
         cf:c3:04:85:bf:c6:d8:3c:a7:c0:32:a9:e6:37:86:cd:dd:72:
         7f:eb:d3:fc:33:15:af:95:84:e4:16:d9:e7:cd:4b:a8:41:43:
         54:f6:ea:2e:ef:e1:8a:37:41:7c:8b:14:5a:77:ac:f3:22:0e:
         b5:6c:27:da:23:76:b3:8a:b7:cb:24:20:f6:c4:66:0b:32:3f:
         fa:b8:b6:ff:35:1e:66:b6:6d:bd:67:8e:96:ba:46:f1:15:b9:
         c4:b8:84:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 19:54:04 2026 by rpki-client