Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62/9685251b-82c4-3025-86c9-cb5bf2145c58.roa
File:                     9685251b-82c4-3025-86c9-cb5bf2145c58.roa (raw, json)
Hash identifier:          wqI0SVnEAamQYEeqMnH9YBUQxTZIz+Fui/JIzjnTmf8=
Subject key identifier:   23:48:FA:2E:F9:72:C4:DB:C8:25:74:F3:A9:34:17:E3:D3:86:82:16
Certificate issuer:       /CN=0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62
Certificate serial:       010D0C9F4328584EA786E35BE166EA9ED97BE090
Authority key identifier: 4D:B5:2F:46:B2:3B:D1:0C:89:9E:88:83:77:12:B0:7E:2B:24:EA:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62/9685251b-82c4-3025-86c9-cb5bf2145c58.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16437
IP address blocks:        162.247.220.0/23 maxlen: 23
                          162.247.222.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:86:e3:5b:e1:66:ea:9e:d9:7b:e0:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ec3fdf96-f41c-4c76-8822-16433b8f383d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:81:a6:e3:e8:3c:a9:9d:c6:cb:af:62:65:6c:
                    00:6c:ce:91:00:79:f5:24:c7:37:b8:dd:fa:42:f3:
                    c5:a3:6f:e4:a2:0d:fc:f8:ef:75:4d:a6:85:76:ee:
                    15:2d:6e:8e:7b:d5:c1:26:2d:5b:6b:ed:f6:a1:bd:
                    c6:8a:51:6f:d2:4a:bf:50:24:d0:f8:da:4d:09:30:
                    7d:b8:af:75:d2:06:46:3c:13:4b:92:0a:62:5b:c2:
                    5b:54:64:df:15:a7:03:86:ec:d6:08:ce:f7:9c:43:
                    d7:89:3d:6e:a6:07:6b:dc:d3:8b:d4:db:73:79:78:
                    d3:21:ac:04:6c:31:f5:89:c0:87:29:10:f8:20:bc:
                    2f:cf:9c:81:be:e2:d1:c2:47:eb:96:b2:93:99:23:
                    09:9a:74:a3:d6:f4:8e:71:13:98:73:fc:dd:37:df:
                    00:10:88:13:f9:af:ae:52:31:0d:aa:7f:2f:c8:19:
                    3b:76:04:8e:2f:26:f4:44:98:0a:d0:0a:f9:a1:2a:
                    9e:c9:d2:0a:9e:7e:6a:1a:11:fe:63:95:a7:d1:bb:
                    be:e8:68:78:61:78:c6:62:c3:66:ec:1c:0b:e5:b4:
                    92:5b:dd:cd:2f:d5:ee:e8:8b:d8:34:5d:2f:2d:67:
                    03:20:9a:d0:95:a0:7d:04:e5:d7:05:d4:35:a0:e6:
                    90:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:48:FA:2E:F9:72:C4:DB:C8:25:74:F3:A9:34:17:E3:D3:86:82:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62/9685251b-82c4-3025-86c9-cb5bf2145c58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62.crl

            X509v3 Authority Key Identifier:
                keyid:4D:B5:2F:46:B2:3B:D1:0C:89:9E:88:83:77:12:B0:7E:2B:24:EA:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.247.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:62:fc:30:8a:63:55:0e:57:6b:81:3d:bc:6b:7f:f8:91:01:
         b9:09:62:22:99:7a:86:56:df:36:e0:24:2c:7c:9e:51:e6:43:
         6e:a8:b9:9c:cd:97:14:6a:db:e4:12:ad:53:88:68:c8:86:70:
         5a:71:40:d0:9c:e2:36:67:c7:e0:3d:4d:98:6b:1a:f8:49:e6:
         30:4c:69:08:f3:0d:48:12:a9:0d:c3:a1:5b:37:67:96:3f:9a:
         54:76:54:60:df:1f:52:00:f1:d9:e5:b0:42:53:8f:d4:4a:84:
         06:54:b6:96:4a:26:ed:fe:cb:41:0c:1b:d7:69:7b:99:3f:83:
         e1:49:b5:d2:4d:40:1b:f5:e8:b5:90:d3:c3:69:d1:b9:29:be:
         66:a7:df:0d:fe:86:f1:ea:ef:4c:d4:b9:63:91:3f:f0:f8:2b:
         ab:b8:d8:4d:95:74:d9:5a:cf:e4:ac:40:96:cf:c2:4c:49:9d:
         4e:01:b6:07:68:91:b4:c2:c9:d9:c7:80:44:6c:47:88:36:70:
         08:f5:33:db:71:9e:d9:00:69:61:b0:23:0d:ad:20:04:af:6b:
         29:04:d0:24:ed:59:22:16:71:63:9a:60:2d:a5:54:3c:44:b9:
         d6:7a:a8:6c:1f:75:51:af:91:f9:5d:2f:42:ec:42:78:34:0a:
         55:d7:f5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:16:04 2026 by rpki-client