Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/31a88443-36ee-3c34-8fee-e6c4d8090991.roa
File:                     31a88443-36ee-3c34-8fee-e6c4d8090991.roa (raw, json)
Hash identifier:          66bcOLlOFBZnqGLSFqnkFrcl9GViB+4r2uWnsKXVgNw=
Subject key identifier:   60:7A:D7:49:31:D8:8C:6A:AC:85:48:04:B8:9A:D8:22:AE:F3:0B:EC
Certificate issuer:       /CN=8d499d1b-9023-4410-8b4a-909ca6a083df
Certificate serial:       010D0C9F4328584A4F05C6438EB283B79AC00000
Authority key identifier: B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/31a88443-36ee-3c34-8fee-e6c4d8090991.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     397666
IP address blocks:        162.220.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:c6:43:8e:b2:83:b7:9a:c0:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d499d1b-9023-4410-8b4a-909ca6a083df
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=1769e145-3c68-4e5d-8820-60cdcbe3bcf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:67:b1:37:b2:a1:ec:8c:7c:23:4f:d7:18:83:
                    28:16:30:6b:9c:b1:bc:c7:8a:a4:dd:b3:14:8d:5f:
                    f1:c5:fb:8b:c1:05:4f:5e:95:c5:03:cf:db:01:b8:
                    99:bb:aa:c8:dd:2b:72:25:cc:02:d7:17:08:b6:e0:
                    fb:3d:58:b1:c9:db:cb:92:50:d1:b8:af:1f:65:03:
                    3f:1f:76:11:8a:00:36:9f:75:07:ed:3b:93:a5:45:
                    89:c8:85:85:16:51:09:08:52:25:65:7b:88:96:4e:
                    2e:67:ba:79:12:57:52:98:14:25:b1:59:6b:a2:45:
                    6e:2d:94:78:80:a6:3e:7a:4b:af:5f:29:0a:63:9d:
                    5d:3f:58:3e:f5:97:a2:01:d6:9d:41:7c:bf:29:48:
                    85:b7:f6:05:fd:1d:26:14:8d:8a:4b:1c:05:2f:87:
                    f4:e4:10:d5:c0:a2:27:41:84:ec:45:15:2b:1f:cc:
                    fb:ef:d1:a4:c6:bb:5a:53:8e:99:ad:20:ca:ea:9c:
                    3e:ab:07:9d:08:67:94:f4:6e:0d:0f:6c:4a:41:ac:
                    7e:32:7c:28:f4:e1:95:ec:1c:e6:e6:2e:66:64:c6:
                    40:b8:7a:d7:d1:a1:ce:ff:78:70:20:e2:07:cc:c3:
                    dd:a0:b3:1d:cf:06:b4:aa:f6:89:d7:05:38:a8:87:
                    90:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:7A:D7:49:31:D8:8C:6A:AC:85:48:04:B8:9A:D8:22:AE:F3:0B:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/31a88443-36ee-3c34-8fee-e6c4d8090991.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl

            X509v3 Authority Key Identifier:
                keyid:B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.220.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:8d:0b:ae:52:b0:8d:1e:0a:5f:f8:72:08:27:b5:78:47:fb:
         4b:e6:a6:f6:b0:2c:9c:ed:cf:b7:1c:67:f7:e9:40:5d:9d:7b:
         d6:fa:bf:a0:57:9b:6b:d1:f2:82:c1:21:d3:ae:36:8c:03:a7:
         bd:70:7d:04:17:a2:d6:4d:77:4e:92:a2:d5:f9:ed:c5:e7:1f:
         58:d4:11:37:8e:3e:a3:cc:17:2e:0d:02:74:a0:cd:cb:64:28:
         2d:e3:27:4a:bf:1e:14:9e:3b:1d:09:a7:d8:33:a0:3e:c3:cf:
         f1:d9:b3:57:88:06:1f:46:a5:7d:64:0d:7f:dc:ce:e9:44:c6:
         15:43:3e:7e:ef:2d:ff:4e:84:61:69:1d:7e:e3:13:a6:c3:1e:
         9f:31:8f:95:c9:d4:e3:b9:5e:f9:cd:23:ce:38:f5:0a:34:ea:
         c6:48:64:f1:0b:ae:3b:77:26:f5:6a:bb:28:97:11:44:eb:06:
         0f:44:96:27:d1:c4:1f:8a:05:64:b9:55:02:0e:75:e9:27:61:
         c8:b6:94:1b:75:2e:5a:4b:f4:b8:8a:49:24:0e:0d:fc:fb:55:
         e6:b6:6e:f4:6a:e7:2b:44:2f:4b:4d:17:40:2d:2a:f9:95:1f:
         6d:2d:10:e6:19:71:83:f6:e9:ff:8b:3b:a3:a9:f4:01:6c:d2:
         28:1f:7c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:47:44 2025 by rpki-client