Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/b1099213-921b-3b69-9393-243e92b32f6d.roa
File:                     b1099213-921b-3b69-9393-243e92b32f6d.roa (raw, json)
Hash identifier:          qXot/VlY6n/zgOwOqRropySLXNc94N+AZemMvDQgunI=
Subject key identifier:   08:0A:E1:3A:C1:86:C3:7E:9F:EE:21:1B:30:67:A1:7B:6F:3C:C8:F5
Certificate issuer:       /CN=835152c2-2ed8-4151-8f82-ac9407335b2c
Certificate serial:       010D0C9F4328584D6DDDCA871C3CB9209EF53D00
Authority key identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/b1099213-921b-3b69-9393-243e92b32f6d.roa
Signing time:             Tue 07 Apr 2026 16:31:34 +0000
ROA not before:           Tue 07 Apr 2026 16:31:34 +0000
ROA not after:            Mon 06 Jul 2026 16:31:34 +0000
asID:                     198949
IP address blocks:        162.210.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:dd:ca:87:1c:3c:b9:20:9e:f5:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835152c2-2ed8-4151-8f82-ac9407335b2c
        Validity
            Not Before: Apr  7 16:31:34 2026 GMT
            Not After : Jul  6 16:31:34 2026 GMT
        Subject: CN=8b118233-d544-4036-bfd6-2faf58d4ae1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e2:6c:0d:d5:80:37:42:47:31:3f:dc:dd:5a:
                    8f:cc:aa:d8:45:a1:b7:40:b6:09:71:be:4e:d2:59:
                    0d:c3:ff:80:a3:33:9a:48:28:9e:c1:e6:b7:80:a2:
                    ab:bd:1a:80:55:12:5f:6a:93:25:5a:3c:cb:5c:df:
                    94:b8:81:93:02:1b:1e:6d:59:0f:34:f2:10:28:a9:
                    52:e0:bd:e2:69:8f:79:e2:d4:aa:f2:da:2f:24:bf:
                    49:5a:24:f5:3f:4b:ce:4d:63:af:7a:8a:d9:69:46:
                    a8:72:10:43:e0:3f:6c:76:97:51:28:0a:99:f7:5c:
                    bb:8a:67:3c:7e:20:41:46:b9:bd:01:19:80:b9:25:
                    65:1d:8a:48:4e:03:e2:9d:6c:20:39:e0:9c:5b:d1:
                    2c:3b:c7:52:bd:7f:68:86:df:9e:1c:e2:49:b8:b6:
                    37:c1:c6:da:a5:98:79:38:a6:f9:cb:a6:63:9a:87:
                    0e:4d:e9:3e:80:ca:d1:8b:08:f1:49:df:3b:03:be:
                    33:58:ab:c3:ed:c1:7a:fe:a2:db:d8:40:b9:2e:0b:
                    02:6b:92:cd:5b:45:2a:91:62:19:66:4c:a7:9d:8c:
                    c9:f7:af:87:75:f0:e8:51:61:17:3a:65:c4:2b:28:
                    09:1d:e1:4a:30:8a:73:a8:68:78:8d:10:47:3d:d8:
                    29:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:0A:E1:3A:C1:86:C3:7E:9F:EE:21:1B:30:67:A1:7B:6F:3C:C8:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/b1099213-921b-3b69-9393-243e92b32f6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.210.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:0c:dd:c0:23:a5:0f:c1:1b:43:ec:df:94:9f:cb:4b:7e:e2:
         a5:59:bb:46:3e:ab:2d:c4:b3:5a:0f:0c:8c:c7:44:64:84:d7:
         48:f9:2c:4f:14:06:96:d6:60:4b:25:7e:26:ad:b1:61:b2:08:
         36:93:82:f2:5d:80:8b:6c:67:bb:47:e0:04:c8:64:8d:59:eb:
         6c:9a:a1:e0:97:8a:8f:70:fa:7a:09:9c:c0:72:a1:74:18:9a:
         a3:7e:b4:24:38:31:b6:07:57:86:93:f0:4b:4b:23:65:76:1c:
         16:71:06:fd:f5:fd:63:72:e6:35:67:53:51:ec:c3:bb:53:59:
         93:d1:56:2c:4c:15:e8:55:57:44:bf:8c:f7:ad:48:df:3b:7b:
         ca:56:95:a1:b3:db:8c:17:8d:3c:4c:bd:18:a7:a3:9f:4b:80:
         ea:eb:8e:fe:00:23:c3:25:d0:22:cc:a0:ff:ed:11:bb:b0:48:
         f4:8d:26:cf:f8:68:53:ca:05:8f:82:9a:4c:35:f3:fe:d7:91:
         34:27:64:94:2b:7b:15:bb:5a:c2:21:a2:3a:9c:c0:51:5f:5f:
         b4:21:70:f3:a1:2e:f4:25:39:5e:12:d5:b8:6e:f1:da:80:3a:
         53:36:3b:92:da:43:55:8f:33:25:5e:08:17:2a:56:7d:f1:40:
         c8:26:df:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:26:01 2026 by rpki-client