Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/950373ec-0593-386e-8602-37c09d8513c1.roa
File:                     950373ec-0593-386e-8602-37c09d8513c1.roa (raw, json)
Hash identifier:          iYNdWCElrASTWon5TCMPEvzZ+QzVBCyf9dzwwsF9H1I=
Subject key identifier:   D7:F3:F2:C1:AA:6A:A8:45:08:FE:3B:90:4B:8D:45:0D:8A:83:1B:9E
Certificate issuer:       /CN=f4f85718-cda0-442f-9727-709a536e1e27
Certificate serial:       010D0C9F4328584F71ED8936804D0B49ED33AF00
Authority key identifier: 6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/950373ec-0593-386e-8602-37c09d8513c1.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     6639
IP address blocks:        162.211.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:89:36:80:4d:0b:49:ed:33:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4f85718-cda0-442f-9727-709a536e1e27
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=f69bcbce-d68d-4a01-8fa6-0f3708476142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9e:26:e8:91:9a:32:4d:05:c1:6a:cb:ee:f2:
                    50:20:a8:3a:23:16:d0:5d:71:71:d0:e6:50:1b:15:
                    74:63:19:77:72:27:c0:a8:04:05:58:0d:2a:54:1a:
                    fc:84:b0:08:61:23:5f:a4:1e:b9:56:a8:1c:ef:e9:
                    89:6b:c8:0e:16:76:7a:5d:b5:e0:b0:a7:8c:d2:53:
                    97:8c:8c:f6:b7:ae:fc:d3:84:da:dc:e5:9b:c8:3f:
                    8f:6d:d6:68:0b:94:df:36:fc:17:98:54:67:60:2c:
                    64:5c:dd:85:9c:05:68:6f:ec:e3:74:89:de:c0:4e:
                    1d:00:2a:0c:48:23:2d:7d:4b:75:30:c6:64:f0:ca:
                    0a:d2:9f:89:16:2b:fe:8b:95:8a:5d:45:ff:0c:10:
                    64:21:02:01:f7:73:c9:7a:e1:6c:de:a8:39:18:fc:
                    8f:31:85:dc:25:dc:4e:f0:5f:46:7b:26:35:81:02:
                    a3:33:ed:af:7b:df:18:43:ff:47:37:0e:e6:a0:f1:
                    8b:b5:15:00:20:95:ea:45:b3:35:14:e0:ae:fd:67:
                    32:47:52:3a:f0:f1:f7:de:7d:2c:c6:91:80:a9:05:
                    ac:63:04:79:2a:90:2d:47:62:c5:59:c5:75:a4:51:
                    63:ed:95:8f:62:5d:9e:87:bc:76:20:2c:db:2f:24:
                    a2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:F3:F2:C1:AA:6A:A8:45:08:FE:3B:90:4B:8D:45:0D:8A:83:1B:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/950373ec-0593-386e-8602-37c09d8513c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl

            X509v3 Authority Key Identifier:
                keyid:6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.211.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:55:aa:4c:a9:ee:ea:78:53:2c:65:3a:c2:96:14:ea:de:92:
         3c:e0:47:da:b1:82:78:c3:69:0e:1e:ed:80:31:55:6e:92:0f:
         27:06:00:d4:33:77:60:b2:03:f7:b3:a8:2c:28:fa:2b:f9:8f:
         83:f2:bf:86:c0:6e:d3:30:74:10:5c:5b:a1:f4:7f:3d:26:34:
         c3:9d:d3:f2:13:7f:cf:a0:05:06:fd:5a:c0:f5:26:34:ef:02:
         1d:76:31:72:82:dc:b0:7b:21:a2:cb:dd:99:f2:22:6b:fd:01:
         65:c0:fb:fd:21:f2:0d:cf:25:1c:ee:13:00:d3:9d:61:0d:4e:
         fe:3c:76:27:a4:dc:d2:01:e3:45:8b:61:62:ce:03:91:8d:3b:
         ea:ca:8f:2a:0a:55:46:7f:43:c6:dc:df:8e:f5:56:17:f6:81:
         b1:d6:62:60:03:6a:cf:b1:eb:56:bd:8f:d8:f8:24:37:a4:bb:
         0c:0e:57:77:2f:d6:92:ca:fb:ad:95:12:9a:53:c0:24:2f:69:
         d3:9c:91:f1:00:0c:28:71:f5:77:74:16:eb:9e:8a:08:86:7f:
         f3:2b:43:ed:52:22:db:0f:11:33:4a:28:2f:56:75:ce:75:10:
         11:c0:85:dc:3c:6b:5f:4e:19:0b:81:0d:32:91:75:b4:7d:db:
         2b:16:0f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:34:10 2026 by rpki-client