Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/0662bfc3-9ab0-3172-9e56-66414ef41478.roa
File:                     0662bfc3-9ab0-3172-9e56-66414ef41478.roa (raw, json)
Hash identifier:          sz/h+L60JX4lqt6Nah4e1vtyAcD5H22rY4Tw/oqc3QE=
Subject key identifier:   67:77:1D:B9:BA:87:A4:32:DA:3D:98:38:FF:F1:BD:8D:3D:3E:D8:2E
Certificate issuer:       /CN=e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0
Certificate serial:       010D0C9F4328584E2D9F26AED0E395013EC66A61
Authority key identifier: 0D:39:5C:E3:0D:1F:BD:B6:79:8A:1D:50:60:EC:FC:62:57:43:80:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/0662bfc3-9ab0-3172-9e56-66414ef41478.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     44632
IP address blocks:        208.99.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:26:ae:d0:e3:95:01:3e:c6:6a:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=48629963-6f90-4571-879a-bca7caef8d3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d8:32:71:89:08:47:50:91:11:a6:38:a2:06:
                    bf:08:6e:59:e1:1d:c5:14:92:40:d4:b4:2f:bc:50:
                    84:8e:a4:ac:96:29:ed:a1:bc:db:a5:0c:4e:da:46:
                    fd:e2:30:1a:8f:d5:15:1f:41:85:e3:ec:f6:69:fb:
                    4b:17:f9:6a:dd:88:ef:49:ca:7a:aa:74:5e:4e:da:
                    78:ba:77:fd:85:b7:25:51:e6:2f:3b:56:d1:dc:0d:
                    d8:7b:30:92:21:9d:7d:27:02:5f:5e:d0:fa:5d:27:
                    f3:ce:6f:55:40:db:f0:20:3d:4c:68:39:4d:06:aa:
                    c2:af:4e:22:20:24:0f:4b:9d:e4:f8:be:78:2f:fc:
                    c1:a5:6b:91:b9:8f:3b:a7:67:90:36:b1:4d:01:bd:
                    84:a3:eb:7a:52:0f:a9:37:2b:3d:07:51:ae:6e:d5:
                    05:75:f3:1c:5b:48:89:db:10:9a:99:c8:b0:e2:02:
                    bf:a7:08:bf:45:97:1f:8e:2b:c5:2c:3b:21:5f:76:
                    8c:19:00:57:bc:e1:49:ab:5c:93:6d:f6:9f:af:21:
                    67:5f:f6:f2:67:69:1f:72:17:2b:ea:16:0a:c9:5c:
                    ec:d1:b4:ae:6b:88:41:ee:72:0c:f2:87:ed:87:ea:
                    67:0d:d0:2b:f9:55:81:c9:d3:aa:e6:76:11:bb:08:
                    50:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:77:1D:B9:BA:87:A4:32:DA:3D:98:38:FF:F1:BD:8D:3D:3E:D8:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/0662bfc3-9ab0-3172-9e56-66414ef41478.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.crl

            X509v3 Authority Key Identifier:
                keyid:0D:39:5C:E3:0D:1F:BD:B6:79:8A:1D:50:60:EC:FC:62:57:43:80:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.99.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:3f:09:cb:0e:df:b2:c7:d9:61:09:6d:73:be:95:f3:54:1b:
         ac:0b:09:94:7f:8c:34:b3:f2:cc:4b:10:e3:8f:0c:31:62:d5:
         1b:49:e7:ad:de:1a:27:2d:03:d5:7b:35:d3:a9:82:02:6d:d0:
         a0:11:d6:35:fe:3d:cf:01:e7:f9:44:26:db:4b:b7:8b:50:cd:
         d0:fb:6e:7c:df:9a:d9:88:da:6e:83:77:74:a5:d0:5c:ee:e3:
         fc:2b:b7:71:d0:12:f4:53:91:58:41:bd:dd:38:32:e3:3d:80:
         96:44:9e:7a:b3:44:b2:65:26:6f:4a:c2:45:65:3c:89:3c:ee:
         a7:3b:f7:2e:dc:1c:99:73:5e:10:c8:d8:99:82:0e:77:b0:c0:
         31:2a:08:04:a0:00:bf:2a:28:f0:6d:5c:0a:b0:c2:00:37:69:
         ca:a3:28:9a:39:69:c3:e9:b9:85:c5:d2:8e:5a:31:a2:6f:c4:
         21:83:1f:22:b9:62:b3:b9:41:e9:55:c2:10:17:cf:d0:2d:b3:
         09:a3:6d:64:06:e5:6f:6c:10:b9:b6:e9:54:07:76:47:7c:78:
         6d:a7:d8:f9:68:ec:c3:4a:f0:3f:4f:7b:e8:62:57:b3:e8:4f:
         4e:bb:18:9f:67:ef:ec:3d:0e:63:9b:55:b4:08:0d:22:0b:7a:
         81:96:b1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 21:57:06 2026 by rpki-client