Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13/79edf77d-01f4-3799-9e85-b5e31791acc9.roa
File:                     79edf77d-01f4-3799-9e85-b5e31791acc9.roa (raw, json)
Hash identifier:          zIn7NdbrQfErtQ7qh94+q1vvLS0/hcSTvXyIg8DZARI=
Subject key identifier:   DA:62:22:5C:8A:A7:8F:06:B1:71:3A:4A:BD:52:45:27:20:CE:56:7B
Certificate issuer:       /CN=a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13
Certificate serial:       010D0C9F4328584E9A7FC2FA89F02DF7F2D9CC40
Authority key identifier: BA:CA:B1:CC:95:8A:80:DF:CB:14:94:8D:05:44:9E:A7:B0:46:28:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13/79edf77d-01f4-3799-9e85-b5e31791acc9.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     14576
IP address blocks:        162.248.224.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13/a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13/a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:c2:fa:89:f0:2d:f7:f2:d9:cc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=d3117d2c-3169-47d2-82b7-e428753dbde1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:21:2f:7e:94:a9:85:4e:45:e7:04:e3:44:3e:
                    c2:f5:93:8b:6c:6f:ac:99:ac:6f:fa:f6:38:0e:86:
                    a6:f0:02:7c:0a:4b:7b:9e:dc:2e:a6:be:7b:39:f1:
                    b2:fd:79:ea:c6:98:46:25:c5:d0:b3:7c:f3:60:99:
                    88:32:38:4c:28:f8:75:a9:fe:c4:b8:8f:38:9b:0b:
                    fb:72:47:5d:94:b1:45:93:aa:55:04:32:0b:f7:40:
                    15:7c:0a:0e:5c:1e:ca:db:ef:6b:8b:98:71:d1:7a:
                    65:40:86:10:c1:ca:83:f7:fd:a0:3e:d8:04:58:8a:
                    66:bb:31:32:7c:5e:60:83:0b:4c:e5:1d:8b:8e:2d:
                    6e:fc:06:42:2c:98:e3:5a:01:e0:81:f1:02:5c:38:
                    7a:48:2c:b3:16:66:af:92:4d:2b:1d:1f:b8:4b:57:
                    98:88:35:5a:9b:3e:95:26:a0:93:d7:15:38:61:c4:
                    46:b0:27:de:aa:ba:f1:67:56:ad:1c:c7:7a:1d:9b:
                    da:28:d0:98:82:0d:22:19:1a:bb:c2:b6:fb:a4:58:
                    7d:e1:9d:5e:7e:58:e8:00:4f:6d:df:80:e2:6a:e3:
                    a3:09:dc:5d:d6:b3:30:e8:99:e1:c6:8b:4e:42:9c:
                    c0:ee:75:20:f6:9d:66:9a:bf:39:e5:a4:25:05:28:
                    54:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:62:22:5C:8A:A7:8F:06:B1:71:3A:4A:BD:52:45:27:20:CE:56:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13/79edf77d-01f4-3799-9e85-b5e31791acc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13/a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13.crl

            X509v3 Authority Key Identifier:
                keyid:BA:CA:B1:CC:95:8A:80:DF:CB:14:94:8D:05:44:9E:A7:B0:46:28:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.248.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:04:c9:d3:92:f6:23:f9:93:57:5b:ea:84:82:03:e4:65:72:
         7b:4d:f3:5f:b6:b1:d5:0e:a7:28:89:3b:3b:d1:a8:96:e6:8a:
         94:a2:20:02:27:40:93:1e:6c:49:01:a3:38:0d:ad:a8:c8:26:
         f4:c6:79:41:8f:4e:dd:0b:45:7e:e0:c3:d5:c2:3f:66:84:f3:
         48:9a:a4:bd:62:3b:ce:47:b3:fb:9e:43:7d:70:cb:46:b0:9b:
         b0:1d:8a:b0:97:a7:ec:0b:c7:13:02:71:68:17:bd:f8:14:45:
         21:9c:0c:56:21:33:38:59:80:23:5f:ee:76:2a:30:1a:d3:d4:
         69:5d:3e:fb:d2:a0:63:8e:c5:d2:ed:24:35:58:de:5d:c1:fd:
         cd:02:3d:d4:89:3d:63:aa:42:34:f8:65:31:e5:17:4a:bf:82:
         69:a3:cc:de:fb:bf:41:00:7c:af:9b:cb:f8:d4:cd:dc:73:e3:
         80:3a:ce:26:6d:fb:d0:d8:93:07:c0:b0:b3:f5:ed:0b:13:01:
         25:b0:ac:b7:6b:60:7a:f4:7a:82:fb:7b:47:28:b2:02:57:c4:
         91:7f:a2:6a:85:3b:47:4d:b1:c4:f7:e5:f9:80:c1:77:05:a3:
         9c:32:84:51:de:38:4c:a2:d2:06:8a:54:7a:e7:f2:eb:fb:f9:
         32:d4:3c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:23:15 2026 by rpki-client