Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/d744612b-8f67-3f03-acbe-91a2a9cf8102.roa
File:                     d744612b-8f67-3f03-acbe-91a2a9cf8102.roa (raw, json)
Hash identifier:          vBNS+r2t4qpGDYHWNzNZNGNw3BeasVqChTk2M5fNOyE=
Subject key identifier:   83:02:04:AA:C4:82:68:CC:6D:6A:E1:92:8D:40:2B:DC:22:24:06:1D
Certificate issuer:       /CN=fe165f6f-fcf3-4c06-b884-36e60521c216
Certificate serial:       010D0C9F4328584F454284EAF512DE7770C45980
Authority key identifier: 25:C0:3A:93:32:8F:E5:EA:E5:38:B0:6D:4B:B8:EF:C2:B0:F7:3D:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/d744612b-8f67-3f03-acbe-91a2a9cf8102.roa
Signing time:             Wed 23 Sep 2026 13:00:11 +0000
ROA not before:           Wed 23 Sep 2026 13:00:11 +0000
ROA not after:            Tue 22 Dec 2026 14:00:11 +0000
asID:                     396982
IP address blocks:        162.244.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/fe165f6f-fcf3-4c06-b884-36e60521c216.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/fe165f6f-fcf3-4c06-b884-36e60521c216.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:45:42:84:ea:f5:12:de:77:70:c4:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe165f6f-fcf3-4c06-b884-36e60521c216
        Validity
            Not Before: Sep 23 13:00:11 2026 GMT
            Not After : Dec 22 14:00:11 2026 GMT
        Subject: CN=3fc94ef7-228f-4e49-9ff3-0c852bbcb306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:49:24:8d:be:d4:57:e9:9f:c4:cd:6f:6c:3c:
                    30:d4:5f:0e:90:8c:5f:6a:9a:82:9a:d7:08:4c:5c:
                    2e:7f:66:26:f7:0c:78:b1:e3:55:10:8f:8e:95:02:
                    9b:17:1c:28:92:e7:82:14:ee:0c:6d:f6:ca:24:0f:
                    b9:26:82:e6:9d:9c:95:c9:63:f8:89:b9:30:86:4a:
                    0a:1e:3d:fd:f6:01:27:f2:8f:67:96:ad:e4:c3:02:
                    59:13:c6:aa:71:ef:f6:aa:4b:19:fb:f9:12:a4:bf:
                    5d:3a:30:6a:b9:c9:4b:5b:41:ef:38:be:d9:93:10:
                    f9:52:f0:40:d7:22:64:c7:c8:dc:40:b5:f1:27:2e:
                    a8:29:21:64:1f:aa:ab:00:a8:0c:23:ce:37:eb:39:
                    ec:32:b7:f5:50:75:42:22:86:e9:13:5b:92:ba:7e:
                    53:bb:10:9a:fd:40:f4:41:d1:f9:34:3c:b9:e7:47:
                    90:b6:b0:56:27:71:45:1e:8d:a0:89:1a:e2:48:1d:
                    f8:bf:62:fc:a5:fb:ee:b0:65:86:c7:f5:ae:d5:97:
                    93:ea:e8:40:da:42:d5:ea:35:e0:b3:cb:ac:61:b1:
                    d4:e5:37:60:df:62:5b:ef:ac:bb:72:d8:5a:b8:2b:
                    ae:b9:9c:c2:54:f7:f4:e0:ce:bc:3c:fd:6c:a6:69:
                    9b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:02:04:AA:C4:82:68:CC:6D:6A:E1:92:8D:40:2B:DC:22:24:06:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/d744612b-8f67-3f03-acbe-91a2a9cf8102.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/fe165f6f-fcf3-4c06-b884-36e60521c216.crl

            X509v3 Authority Key Identifier:
                keyid:25:C0:3A:93:32:8F:E5:EA:E5:38:B0:6D:4B:B8:EF:C2:B0:F7:3D:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.244.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:3b:72:8f:38:fa:11:b5:3b:65:c9:bc:ca:46:64:80:16:28:
         57:63:0a:8f:e7:83:1d:2d:18:7e:c9:34:33:60:cb:0f:37:38:
         e8:42:91:50:9b:b8:49:d4:e2:a7:e2:4b:17:c0:82:dc:5e:20:
         c0:0d:fe:bd:9a:f2:c6:dd:2d:b5:21:7f:32:00:64:9e:4e:3c:
         fb:63:d5:49:67:5c:03:9b:33:18:47:31:82:a4:f4:92:b4:53:
         b4:ab:77:82:b9:ab:22:2d:9f:c5:0c:ad:c1:a4:9a:38:7b:ba:
         d6:b1:dc:79:6e:39:54:38:47:67:99:10:39:ed:75:0d:ae:9d:
         65:e2:8d:ed:2f:c6:4b:e8:4c:6e:29:66:93:16:d8:a6:39:37:
         2d:bd:14:33:69:50:3a:1e:80:0b:c1:14:49:85:67:f1:7a:bc:
         97:ee:7a:3e:71:9a:93:b6:7a:25:d9:64:97:6c:5a:48:f3:fb:
         92:9c:dc:1d:bc:61:49:2d:a5:aa:42:dc:7d:dc:40:12:c7:f4:
         de:0a:8a:59:19:ce:86:d1:9c:b0:da:4f:86:b0:47:67:b2:4e:
         0d:72:0a:79:3d:1f:c5:db:1f:25:5d:88:89:b3:b3:71:a3:1f:
         7b:40:34:6a:1c:7e:c1:61:08:ad:f9:75:60:97:b7:9d:cf:22:
         e6:52:13:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 09:05:24 2026 by rpki-client