Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/a1ecb8e5-39af-3240-a6fa-7655e15e9d63.roa
File:                     a1ecb8e5-39af-3240-a6fa-7655e15e9d63.roa (raw, json)
Hash identifier:          XLp+0Oe+TfjcEs33sr78wn4Z/etWnN2FgTad1QO9kHE=
Subject key identifier:   DC:D1:45:F5:D7:F6:30:4B:9D:AC:2F:DB:18:8F:B8:EA:EB:CC:D7:9F
Certificate issuer:       /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
Certificate serial:       010D0C9F4328584EA79A63C119D1E86D23533D80
Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/a1ecb8e5-39af-3240-a6fa-7655e15e9d63.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     198949
IP address blocks:        162.221.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:63:c1:19:d1:e8:6d:23:53:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9ec35a3c-3d5f-41fc-a91d-f5cd7068bcc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fb:35:fd:6d:0e:c1:58:74:0c:37:f8:f3:2b:
                    6a:f7:57:7e:43:8c:60:75:fc:7a:06:d2:cc:10:4a:
                    2d:9e:b7:8f:3d:02:0d:17:c5:14:f5:62:04:2e:ee:
                    36:5b:e3:48:08:8d:c6:4b:36:e8:5f:0b:bd:00:37:
                    10:51:f7:34:56:e5:ca:2b:b0:98:27:3e:73:0f:d5:
                    c4:6a:c4:2e:a3:2c:99:5b:3e:fa:82:0b:8c:b9:ad:
                    84:aa:1b:1b:aa:0b:1b:96:11:fa:ec:14:07:37:57:
                    82:ba:7b:f5:0c:66:3f:20:c6:9f:5d:98:7e:79:cc:
                    75:ed:6a:47:5d:40:74:44:e4:4a:40:83:2e:e9:8c:
                    ae:73:fe:f3:38:37:f5:74:92:a9:a3:64:55:bf:58:
                    fd:61:3b:10:d4:c2:b9:5b:e0:56:6c:1e:7d:23:57:
                    b7:a2:bc:6d:d7:80:14:75:6b:16:b6:32:ad:52:c8:
                    d7:06:07:39:03:56:e5:53:e8:63:95:7a:d3:1c:68:
                    5e:1a:39:75:73:cb:fa:43:66:82:83:9e:b8:93:5d:
                    e8:1d:c1:84:74:f5:be:41:bb:de:33:ab:74:d7:bd:
                    87:5c:3a:8e:7f:49:71:e8:1e:8c:17:65:da:e1:ee:
                    e6:ba:93:0d:d8:db:d1:78:b0:71:64:69:3d:c9:c1:
                    d2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:D1:45:F5:D7:F6:30:4B:9D:AC:2F:DB:18:8F:B8:EA:EB:CC:D7:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/a1ecb8e5-39af-3240-a6fa-7655e15e9d63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl

            X509v3 Authority Key Identifier:
                keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.221.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:35:af:b5:95:60:da:ee:52:ec:a5:89:af:e9:da:fa:ff:c5:
         eb:e2:fe:eb:02:2e:4d:d1:b7:8d:8d:83:4a:9a:73:1d:fe:ac:
         a3:ba:ed:d8:ca:6b:4e:43:ae:ac:2a:a7:69:73:1c:86:d1:5b:
         5e:4a:f6:ff:8d:39:0b:6f:88:ca:88:ad:13:6d:1d:d5:a7:d3:
         ac:30:49:6b:9d:65:77:09:03:34:58:00:13:d9:17:f4:ba:93:
         e2:f2:ac:ff:ba:32:ce:f9:68:35:da:7f:a6:87:c0:b4:04:d2:
         db:48:81:06:13:a9:ae:3e:8f:e0:e2:1a:4b:fc:cf:d0:b9:25:
         e8:4c:51:1c:ca:fa:88:c5:20:9a:0a:02:88:a0:84:eb:40:73:
         c2:ab:5e:3b:ef:d1:50:70:ef:30:58:b5:e1:e0:cb:4b:03:8b:
         ed:f1:ae:35:c5:8b:f4:d5:40:df:3f:dd:ce:e4:d0:b8:01:f5:
         72:d4:1c:b4:30:1c:5f:bd:1c:a6:a6:ac:a5:b3:3d:49:cc:13:
         e7:ab:e5:0a:0c:65:f5:70:1a:06:2e:c6:a2:3b:49:e5:f5:b1:
         94:0b:54:cb:08:2d:83:de:1e:c6:03:7b:02:97:16:51:2e:f4:
         e2:c6:34:53:56:0f:6a:0b:98:3f:65:e4:97:c5:24:87:ab:2d:
         b8:1e:31:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:52:30 2026 by rpki-client