Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5b7e148b-09dc-438a-a672-fbc8c8341d0b/0a5fd428-0210-3e7f-8831-16c203de93c0.roa
File:                     0a5fd428-0210-3e7f-8831-16c203de93c0.roa (raw, json)
Hash identifier:          rAcsRtYYmdRWyUotuv4ZN22NLN53KmDAuvzq5NL3H8s=
Subject key identifier:   B3:1E:50:A8:AA:09:B7:1A:C1:AD:F4:AD:90:5D:D1:49:83:71:DA:ED
Certificate issuer:       /CN=5b7e148b-09dc-438a-a672-fbc8c8341d0b
Certificate serial:       010D0C9F4328584E11B437EDD95A45A55C4FA620
Authority key identifier: D4:6E:BE:81:E8:CF:A3:3E:FE:8B:C7:85:72:97:80:C4:AD:20:11:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5b7e148b-09dc-438a-a672-fbc8c8341d0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5b7e148b-09dc-438a-a672-fbc8c8341d0b/0a5fd428-0210-3e7f-8831-16c203de93c0.roa
Signing time:             Fri 05 Jun 2026 09:00:12 +0000
ROA not before:           Fri 05 Jun 2026 09:00:12 +0000
ROA not after:            Thu 03 Sep 2026 09:00:12 +0000
asID:                     54611
IP address blocks:        162.222.48.0/22 maxlen: 24
                          198.235.132.0/22 maxlen: 24
                          2602:fffb::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5b7e148b-09dc-438a-a672-fbc8c8341d0b/5b7e148b-09dc-438a-a672-fbc8c8341d0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5b7e148b-09dc-438a-a672-fbc8c8341d0b/5b7e148b-09dc-438a-a672-fbc8c8341d0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5b7e148b-09dc-438a-a672-fbc8c8341d0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:11:b4:37:ed:d9:5a:45:a5:5c:4f:a6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7e148b-09dc-438a-a672-fbc8c8341d0b
        Validity
            Not Before: Jun  5 09:00:12 2026 GMT
            Not After : Sep  3 09:00:12 2026 GMT
        Subject: CN=8edf87ed-2662-4fd6-88e7-8b73adae88c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:13:1b:db:b6:ea:cf:97:4b:0b:38:19:d8:ca:
                    38:dd:aa:ae:55:4a:9b:d8:28:38:7c:b7:18:d4:da:
                    83:dd:cd:04:59:41:e2:3e:08:6e:85:e0:39:06:d3:
                    69:07:9e:2b:70:ff:14:b8:ba:75:71:fd:be:bc:b0:
                    88:57:8b:e2:51:6a:b2:0f:cd:1a:2a:b6:5e:bb:0b:
                    a6:aa:99:d2:5c:76:bc:b0:14:5f:e8:42:41:19:77:
                    7b:f4:4a:6d:51:ce:45:03:26:e2:23:fc:65:20:69:
                    43:37:37:10:94:72:83:fa:01:a5:fb:75:fb:4d:fc:
                    62:a3:bb:30:67:3d:f1:2e:c8:b3:0e:d0:c4:5e:cf:
                    ed:59:b0:36:af:eb:20:88:95:d8:1f:af:38:4e:a8:
                    fd:57:51:69:bc:36:fa:39:2e:8d:67:8b:b2:0b:32:
                    5c:96:36:ed:62:4b:10:8c:e0:98:35:23:44:08:26:
                    a2:f3:5c:be:73:c8:94:5f:a7:5f:de:b5:52:83:a1:
                    ff:20:3c:15:19:0e:30:94:f4:7f:e3:7f:9a:d9:d9:
                    2e:bb:77:07:19:dc:45:b9:1a:ee:f8:da:28:59:3c:
                    ec:be:0a:59:fa:75:b2:7b:62:ae:28:c1:21:7d:6c:
                    fe:ed:11:21:9a:df:30:fc:5d:cf:32:7a:05:94:08:
                    61:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:1E:50:A8:AA:09:B7:1A:C1:AD:F4:AD:90:5D:D1:49:83:71:DA:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5b7e148b-09dc-438a-a672-fbc8c8341d0b/0a5fd428-0210-3e7f-8831-16c203de93c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5b7e148b-09dc-438a-a672-fbc8c8341d0b/5b7e148b-09dc-438a-a672-fbc8c8341d0b.crl

            X509v3 Authority Key Identifier:
                keyid:D4:6E:BE:81:E8:CF:A3:3E:FE:8B:C7:85:72:97:80:C4:AD:20:11:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5b7e148b-09dc-438a-a672-fbc8c8341d0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.222.48.0/22
                  198.235.132.0/22
                IPv6:
                  2602:fffb::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:47:70:a4:53:4e:da:d5:5c:ac:6a:bf:f9:85:be:cc:32:a2:
         eb:b7:91:ee:a2:9a:a4:c3:f7:1b:88:a7:50:81:77:b4:6c:ff:
         1f:78:01:67:1a:58:a9:28:92:32:08:e2:ee:f9:15:e0:4b:30:
         68:08:0b:cd:af:01:76:cd:84:c5:9c:89:79:7c:03:2d:3d:b0:
         5d:03:5a:c4:7a:87:e7:f0:92:e8:73:c2:34:6d:06:4b:53:52:
         5d:3a:da:04:a8:e3:54:d8:a8:c7:51:8c:cc:66:37:5e:70:d3:
         73:f6:89:cf:03:8a:0c:10:c4:60:47:03:cb:02:db:d2:be:3d:
         9c:ee:d3:6a:e9:9e:ff:4d:e6:8f:7e:05:bb:23:66:3e:03:8a:
         f4:b3:07:9b:27:62:3a:66:ab:86:b9:d2:48:6b:f0:cf:0f:ed:
         d9:e4:cd:e5:77:d8:1e:18:96:b9:c3:94:d8:30:ab:f1:3f:6b:
         bc:70:07:dd:6a:fe:eb:f5:59:41:58:3d:0b:8e:b3:c2:f0:c2:
         0b:9f:39:1f:aa:57:7c:ba:58:cb:b4:25:6c:55:c4:fe:d7:71:
         c1:7a:98:53:e2:ab:91:8b:fa:75:cd:4b:d7:9c:31:9c:95:f1:
         81:8a:90:66:a6:6f:26:07:8c:c9:71:41:c0:4c:48:0e:63:a4:
         7e:ba:15:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:07:46 2026 by rpki-client