Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a4ef796-0acb-47b9-8949-94de08469d01/473cf4b2-e305-37d9-81a3-4b1b87587364.roa
File:                     473cf4b2-e305-37d9-81a3-4b1b87587364.roa (raw, json)
Hash identifier:          n7JG34TN6QI4gHjUN39dAGBcskNoFJrDdlWhbjFKktE=
Subject key identifier:   61:94:1C:E0:8A:4A:31:79:A3:01:97:CA:AD:09:C3:E9:F7:0F:92:27
Certificate issuer:       /CN=0a4ef796-0acb-47b9-8949-94de08469d01
Certificate serial:       010D0C9F4328584DD8F083C28680AD4E6C565F20
Authority key identifier: 43:4E:A4:D7:B9:67:22:E1:5B:43:D0:F6:8B:32:A3:44:BF:58:A9:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a4ef796-0acb-47b9-8949-94de08469d01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a4ef796-0acb-47b9-8949-94de08469d01/473cf4b2-e305-37d9-81a3-4b1b87587364.roa
Signing time:             Sat 16 May 2026 01:00:26 +0000
ROA not before:           Sat 16 May 2026 01:00:26 +0000
ROA not after:            Fri 14 Aug 2026 01:00:26 +0000
asID:                     13614
IP address blocks:        162.216.116.0/22 maxlen: 24
                          206.217.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a4ef796-0acb-47b9-8949-94de08469d01/0a4ef796-0acb-47b9-8949-94de08469d01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a4ef796-0acb-47b9-8949-94de08469d01/0a4ef796-0acb-47b9-8949-94de08469d01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a4ef796-0acb-47b9-8949-94de08469d01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 03 Jun 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d8:f0:83:c2:86:80:ad:4e:6c:56:5f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a4ef796-0acb-47b9-8949-94de08469d01
        Validity
            Not Before: May 16 01:00:26 2026 GMT
            Not After : Aug 14 01:00:26 2026 GMT
        Subject: CN=1bdf4efb-e5c7-48a8-a37d-3cfe679197d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c9:8a:77:45:21:38:64:52:65:61:ac:07:f5:
                    08:ca:63:79:1c:60:19:af:90:85:30:3e:a3:7f:3e:
                    1d:5d:67:87:83:07:fd:ce:46:1c:23:bb:51:af:06:
                    ab:28:18:ab:90:c8:a3:ca:52:cc:29:1b:ca:b5:0b:
                    bc:a0:e7:3d:68:7c:8e:1e:27:42:aa:1e:a7:73:4d:
                    db:ed:75:05:d5:5a:24:a5:e6:98:12:cd:cd:f5:40:
                    8e:52:50:9a:e8:9c:c0:8c:11:28:40:0c:62:a2:56:
                    8a:26:16:2d:f4:d0:60:bb:4d:61:65:86:26:b2:85:
                    9e:dd:03:89:98:9e:0a:fe:a1:67:44:81:0a:7b:ea:
                    0f:8f:b4:9a:45:ff:3b:b4:a0:7d:74:2a:01:b3:93:
                    71:ca:6e:3c:ab:88:5f:b0:54:81:97:71:bb:0d:f6:
                    01:cf:03:c2:70:fc:be:86:ef:7d:97:7f:d1:86:cd:
                    8a:93:bd:14:29:36:e8:fe:36:74:13:8d:e4:26:82:
                    64:a3:5f:2b:1b:c9:01:4d:7f:83:78:08:00:5d:ce:
                    a7:58:a2:fd:a8:ca:66:85:13:b3:f0:11:c6:c0:24:
                    39:43:fa:ee:a0:7d:78:1b:73:1f:21:3b:cf:ac:84:
                    c2:0f:2d:9b:1f:42:0d:27:66:42:3b:a0:30:bb:70:
                    55:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:94:1C:E0:8A:4A:31:79:A3:01:97:CA:AD:09:C3:E9:F7:0F:92:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a4ef796-0acb-47b9-8949-94de08469d01/473cf4b2-e305-37d9-81a3-4b1b87587364.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a4ef796-0acb-47b9-8949-94de08469d01/0a4ef796-0acb-47b9-8949-94de08469d01.crl

            X509v3 Authority Key Identifier:
                keyid:43:4E:A4:D7:B9:67:22:E1:5B:43:D0:F6:8B:32:A3:44:BF:58:A9:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a4ef796-0acb-47b9-8949-94de08469d01.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.216.116.0/22
                  206.217.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:bc:ef:bb:6e:47:97:28:bf:ab:a2:8e:74:d4:01:a5:13:82:
         2f:89:97:a6:34:f8:0f:84:30:9a:2a:e5:2e:81:b1:e6:08:6c:
         29:1b:ad:3a:4f:72:3f:69:9c:c8:1f:32:72:1e:f9:d0:0d:00:
         52:61:9f:79:c0:ba:14:bf:93:3f:4a:ed:85:54:12:3c:ad:71:
         8f:fe:76:38:b6:25:66:67:ad:01:9c:4b:e1:99:ca:74:3e:b3:
         46:8b:1f:1f:93:00:42:e1:42:b3:be:5d:e9:c6:97:4c:d6:2f:
         cc:00:62:93:ec:dc:1e:c9:d8:ea:5b:0d:8d:6a:24:43:79:20:
         38:3f:db:47:18:46:9b:da:64:68:a9:30:28:30:a1:8a:21:0c:
         a0:d1:82:14:50:ee:ad:9e:76:41:4a:f2:87:05:0f:0b:c7:e8:
         f5:e9:88:58:aa:89:76:18:00:34:45:45:e8:f4:b4:25:91:96:
         fe:65:61:dd:4f:9c:25:78:28:02:69:96:28:3d:95:79:a3:5a:
         9a:2b:af:8c:cd:91:fc:9d:6f:51:50:09:f3:9c:80:d7:1c:a6:
         8f:df:42:d6:53:b8:0a:64:6f:51:c6:09:61:c2:28:97:4a:cb:
         9b:32:2d:fe:51:33:d6:27:f3:19:1d:02:32:9a:60:a8:2e:fa:
         18:21:95:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 1 22:00:11 2026 by rpki-client