Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2d058dde-c74c-32d0-b305-5c96d40e13cd.roa
File:                     2d058dde-c74c-32d0-b305-5c96d40e13cd.roa (raw, json)
Hash identifier:          EyMAvDr8ESO3/HS7dg6IsskDwQMOMPHAFaB/KhMbVAI=
Subject key identifier:   63:7D:56:1D:8D:66:C9:A7:A8:91:67:AF:3C:FF:63:A8:2D:B9:44:6B
Certificate issuer:       /CN=2ac961ff-f406-4f80-b06d-e1284358815a
Certificate serial:       010D0C9F4328584DEC342BEAF34648BC2CA55BD8
Authority key identifier: F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2d058dde-c74c-32d0-b305-5c96d40e13cd.roa
Signing time:             Fri 22 May 2026 22:37:28 +0000
ROA not before:           Fri 22 May 2026 22:37:28 +0000
ROA not after:            Thu 20 Aug 2026 22:37:28 +0000
asID:                     22472
IP address blocks:        162.248.64.128/30 maxlen: 30
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ec:34:2b:ea:f3:46:48:bc:2c:a5:5b:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac961ff-f406-4f80-b06d-e1284358815a
        Validity
            Not Before: May 22 22:37:28 2026 GMT
            Not After : Aug 20 22:37:28 2026 GMT
        Subject: CN=42f86b44-19d7-4413-adba-5595817f46ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:19:3d:75:e2:65:d3:e6:1c:22:82:c2:95:8f:
                    10:64:fc:ef:61:ba:cb:c6:4e:17:cb:6b:5a:6f:84:
                    c6:9d:14:52:38:17:70:6d:92:be:ae:20:a3:a5:c6:
                    1c:5b:18:59:73:db:29:3e:d1:db:fb:43:66:bd:aa:
                    b2:8b:62:9e:94:dc:4c:6c:a6:9b:03:be:74:ba:93:
                    7a:53:3e:da:b0:9c:90:57:0f:80:79:4d:39:bb:41:
                    f7:22:b8:d7:5c:45:a5:2a:b2:0b:ec:51:e5:72:af:
                    f6:82:e4:fa:c4:97:97:10:62:76:ca:ba:85:1e:ee:
                    ad:fe:fe:05:f9:e4:90:4c:14:8e:ef:8e:b5:a6:66:
                    e5:76:27:c3:dd:56:61:85:cc:e5:1b:d8:33:f5:f6:
                    a4:f3:25:4f:47:db:9b:b1:8f:15:1e:fd:af:5b:20:
                    8e:ce:7b:b0:dc:8d:65:46:3c:72:26:0b:f1:01:fd:
                    8c:66:a1:ee:66:7f:58:8c:a4:ff:e8:c9:12:e3:24:
                    d9:88:f9:0b:56:4b:b6:4c:5f:30:20:83:12:22:3d:
                    2f:9e:b0:5f:64:48:74:d4:80:98:37:f4:5f:c9:f3:
                    02:89:1f:51:87:56:07:a0:d1:a8:9b:e9:37:91:07:
                    72:f0:44:ce:87:bd:e3:53:b9:42:cc:4c:35:48:18:
                    d8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:7D:56:1D:8D:66:C9:A7:A8:91:67:AF:3C:FF:63:A8:2D:B9:44:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2d058dde-c74c-32d0-b305-5c96d40e13cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl

            X509v3 Authority Key Identifier:
                keyid:F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.248.64.128/30

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:da:02:27:50:84:21:07:57:1c:da:ce:6a:24:b6:08:2c:2f:
         1a:ff:9f:f7:1a:9f:21:4d:af:b0:b0:1e:37:ba:28:87:5b:3a:
         f7:c5:24:82:6f:dd:07:d2:c6:59:6d:a7:d0:bf:3a:60:ed:f3:
         fe:09:90:0c:40:cd:d4:1a:44:39:32:bd:30:6c:e1:cc:a1:f0:
         cd:0b:3c:a4:75:66:0f:ec:d0:94:ec:96:22:29:7e:fb:c8:2d:
         03:df:15:8a:bc:79:f5:5d:d2:6e:cb:08:f2:32:61:56:6e:b9:
         cc:b4:b7:8b:30:ef:8e:4d:62:90:87:f7:28:77:2c:e5:83:2b:
         90:f1:67:68:1e:90:e8:c4:db:d6:5b:54:f2:74:93:de:38:37:
         e4:ee:23:e0:ab:55:89:2d:8f:cd:21:13:8b:d0:c5:a7:b9:ef:
         90:04:92:50:2c:50:24:af:84:1f:90:af:05:70:aa:4e:55:d9:
         91:52:90:f2:a8:b1:58:55:82:10:12:f1:41:8e:aa:5d:98:fb:
         b7:db:77:86:00:69:ee:3b:11:e3:af:b1:b3:6e:c3:d0:a0:7b:
         8a:64:81:d0:3c:0c:af:02:3d:8b:d9:d6:5f:da:91:af:53:2a:
         ed:ce:c7:cf:86:2c:e2:fc:f3:a0:d7:39:bb:50:f0:5a:0d:32:
         6b:2e:4a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 21:16:15 2026 by rpki-client