Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/dd7ee9a6-00f3-3daf-874c-8a9dfacb5e4c.roa
File:                     dd7ee9a6-00f3-3daf-874c-8a9dfacb5e4c.roa (raw, json)
Hash identifier:          qItx1JO86R1/Gh/AKVjay1OcWERIT8DXWscvuK+2L98=
Subject key identifier:   41:EC:58:76:0D:3F:2D:0A:2C:A9:1C:10:A8:03:67:BD:11:0A:5F:8A
Certificate issuer:       /CN=dba6a643-b5d0-4f09-8e60-e82ba1eb7848
Certificate serial:       010D0C9F4328584EA79B3221B67045BBB02D78C0
Authority key identifier: 35:7F:A0:24:D8:87:21:3B:59:64:E8:FB:42:28:35:80:AE:5D:53:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/dd7ee9a6-00f3-3daf-874c-8a9dfacb5e4c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14537
IP address blocks:        162.250.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:32:21:b6:70:45:bb:b0:2d:78:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dba6a643-b5d0-4f09-8e60-e82ba1eb7848
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=67d93ccc-bcbb-4b76-b53e-25f73409bf5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:05:ea:0f:f0:1d:e1:94:ab:a3:de:2e:b9:56:
                    e0:9b:46:3e:f7:17:46:a4:5d:d7:3a:91:e2:5d:0f:
                    00:38:8f:92:e6:fc:00:70:89:41:f4:7f:87:cf:06:
                    b3:de:7b:43:9a:ae:5a:e3:04:9d:4b:eb:31:b3:b3:
                    f4:86:a6:0d:c4:41:5d:fb:9e:ef:aa:a9:b5:35:67:
                    d9:ec:19:28:d9:36:61:2a:28:37:2b:c8:9e:2f:bb:
                    ab:34:ba:4e:e2:b5:92:5e:f2:80:57:86:63:d7:69:
                    56:25:6e:78:36:8d:6c:4a:b0:b3:db:0f:18:ff:87:
                    99:ba:ce:16:4b:d9:8f:d6:8e:4f:61:de:23:83:4f:
                    bb:36:ea:8d:50:7a:67:b0:c6:f7:49:fd:15:70:47:
                    ac:bd:43:03:e3:0a:56:dd:e5:8b:30:21:20:37:e7:
                    9f:2e:a7:a1:36:e0:d5:37:23:6e:82:3a:b4:33:80:
                    da:23:6b:c0:4e:7a:45:e6:c6:5d:61:68:a9:8f:31:
                    85:ef:2d:86:74:45:9f:8c:a3:e8:f8:f5:45:8c:23:
                    33:92:c6:89:0f:f6:38:e6:ff:1f:d6:46:60:0c:d3:
                    2c:53:3a:da:2b:99:c3:bb:88:f3:7c:7b:5b:c4:77:
                    d4:ef:05:45:d3:3f:16:9d:5e:f0:f9:1f:77:fe:a5:
                    d4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:EC:58:76:0D:3F:2D:0A:2C:A9:1C:10:A8:03:67:BD:11:0A:5F:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/dd7ee9a6-00f3-3daf-874c-8a9dfacb5e4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.crl

            X509v3 Authority Key Identifier:
                keyid:35:7F:A0:24:D8:87:21:3B:59:64:E8:FB:42:28:35:80:AE:5D:53:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.250.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:44:cc:fd:4a:dd:18:c7:5d:f5:6a:14:24:3d:99:a3:f4:a5:
         7d:d1:16:db:c7:eb:15:dd:cf:f2:65:07:50:bb:b1:59:36:c6:
         af:54:ff:3c:52:81:9d:ca:68:37:67:07:73:7f:63:d9:ca:50:
         97:db:89:0d:8c:ad:69:d5:37:48:07:f5:61:8e:62:a1:65:2d:
         7e:c7:b5:cf:27:d4:f1:92:92:8c:ea:20:bf:c3:63:d1:86:75:
         b5:02:a8:d7:73:ec:c7:23:1d:12:6c:ad:3c:fc:ce:99:38:30:
         e1:7c:5a:de:b8:87:14:0e:9c:27:0c:c3:12:d3:f7:33:a8:35:
         41:76:83:6b:99:e2:df:dc:fb:b5:33:68:82:1b:80:46:0b:65:
         21:e8:fe:c3:35:c0:9d:cb:8b:db:67:95:82:44:db:e9:20:fd:
         0e:ab:b6:02:1d:7b:0a:85:72:3a:71:b2:8b:fb:6c:24:d2:12:
         06:ae:66:7c:bc:50:7d:d4:60:69:4b:ff:e4:c9:e3:07:28:41:
         26:94:a0:f1:ec:7b:33:a6:7a:c6:47:ac:a1:86:64:42:26:04:
         ca:42:af:d4:b9:f3:ec:5b:8e:fa:20:83:bb:00:1e:4d:94:1c:
         ad:3c:7e:af:d3:af:f9:a4:4f:83:a2:85:47:95:57:4d:2e:5e:
         38:2f:af:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 03:51:02 2026 by rpki-client