Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/07b9d485-da41-3b34-9f85-25926b41b1d9.roa
File:                     07b9d485-da41-3b34-9f85-25926b41b1d9.roa (raw, json)
Hash identifier:          vdaV0N3hNobmeV6DNgP43OQoF4c6rOFLudrppqATXhw=
Subject key identifier:   A1:1F:43:C2:E7:D3:69:23:FC:03:56:16:E2:D3:9F:AF:A2:12:89:24
Certificate issuer:       /CN=fe165f6f-fcf3-4c06-b884-36e60521c216
Certificate serial:       010D0C9F4328584F4542889187C5C3B240FB2380
Authority key identifier: 25:C0:3A:93:32:8F:E5:EA:E5:38:B0:6D:4B:B8:EF:C2:B0:F7:3D:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/07b9d485-da41-3b34-9f85-25926b41b1d9.roa
Signing time:             Wed 23 Sep 2026 13:00:11 +0000
ROA not before:           Wed 23 Sep 2026 13:00:11 +0000
ROA not after:            Tue 22 Dec 2026 14:00:11 +0000
asID:                     16621
IP address blocks:        162.244.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/fe165f6f-fcf3-4c06-b884-36e60521c216.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/fe165f6f-fcf3-4c06-b884-36e60521c216.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:45:42:88:91:87:c5:c3:b2:40:fb:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe165f6f-fcf3-4c06-b884-36e60521c216
        Validity
            Not Before: Sep 23 13:00:11 2026 GMT
            Not After : Dec 22 14:00:11 2026 GMT
        Subject: CN=32616d49-92ba-473a-af54-86ae497305cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5a:1c:32:b8:e5:28:98:87:04:af:32:88:a9:
                    aa:af:43:9e:12:00:a9:86:87:95:9d:53:b9:64:29:
                    1c:bd:93:b6:5b:2f:0d:ae:28:50:47:09:5b:6c:b2:
                    0b:27:1c:79:a8:b1:f0:e2:45:03:71:36:4d:30:83:
                    6c:54:0d:c1:48:1d:ac:d9:b6:49:9c:5e:f7:e6:3a:
                    67:94:c2:49:3e:f6:51:e7:53:04:e1:40:7d:d4:db:
                    60:a5:6f:5d:93:bf:52:48:68:1b:d6:c8:ff:55:e9:
                    ce:56:d6:15:92:ab:70:cf:c4:8f:91:af:db:aa:7c:
                    87:08:69:3b:ea:7c:73:c3:18:f1:37:fc:2d:01:f1:
                    79:04:b1:d5:7c:19:58:9b:8e:c7:bc:3e:03:5b:2c:
                    52:3c:b5:65:ec:1d:6b:30:55:54:b3:48:c4:89:40:
                    30:75:5e:77:2c:ad:a3:11:a2:c0:2e:86:a3:50:5f:
                    99:11:70:46:81:fc:8b:67:25:28:41:e4:ed:b6:78:
                    aa:92:aa:c7:91:37:c1:f7:22:90:22:18:7e:bf:23:
                    ce:9d:e6:7b:40:4a:4f:f8:00:1f:12:b6:2f:36:47:
                    db:04:13:a0:25:08:92:0e:37:84:ef:31:b6:e5:a2:
                    0d:a6:b4:5f:97:02:02:9b:3f:04:79:48:b5:18:39:
                    1a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:1F:43:C2:E7:D3:69:23:FC:03:56:16:E2:D3:9F:AF:A2:12:89:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/07b9d485-da41-3b34-9f85-25926b41b1d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/fe165f6f-fcf3-4c06-b884-36e60521c216.crl

            X509v3 Authority Key Identifier:
                keyid:25:C0:3A:93:32:8F:E5:EA:E5:38:B0:6D:4B:B8:EF:C2:B0:F7:3D:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.244.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:5f:20:c9:4d:c0:71:b3:c9:1c:bd:f4:7e:73:46:7a:d6:ec:
         b9:a6:33:01:37:59:e2:3e:d3:e8:a2:dd:e0:c7:54:a0:05:48:
         06:ad:0e:40:5d:6c:29:06:5c:e3:ec:58:56:f2:03:e9:37:9b:
         d5:88:55:6c:ce:4c:94:9f:4c:dd:ab:c0:fd:5e:9d:e3:4b:18:
         09:ab:aa:9e:98:14:6f:02:4a:8a:22:38:97:a1:2b:84:e9:2b:
         06:e0:cb:ea:d2:5c:00:c1:61:0a:4d:23:5b:2a:df:c3:cc:ec:
         ea:ec:30:96:6b:70:62:d4:f0:44:e5:e8:e0:05:eb:3b:8d:16:
         a4:b8:c1:6f:1c:46:6f:8c:d1:4d:55:38:1c:35:db:59:27:2b:
         66:d2:5e:6c:f3:b3:90:8f:d2:cf:54:b6:ae:53:46:5c:17:7c:
         0a:c2:ab:3d:5e:31:7d:f3:64:cd:26:5d:41:da:b3:2e:73:60:
         58:23:5e:e6:0c:d0:47:9c:3f:05:5b:b0:6c:a7:b1:2c:2e:35:
         0a:bd:49:f0:40:ab:28:81:48:64:18:f2:c6:aa:02:23:97:74:
         46:e4:dd:52:a2:86:d6:ce:54:fe:c6:42:a9:5d:a0:90:10:e9:
         80:67:27:af:c4:a2:33:90:69:b0:08:5d:dd:f7:45:a1:d8:c1:
         cb:97:7f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 00:38:49 2026 by rpki-client