Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6686876b-a727-36f0-ae91-f3c442edbcea.roa
File:                     6686876b-a727-36f0-ae91-f3c442edbcea.roa (raw, json)
Hash identifier:          +8gD+mPzNvI5CvWGyVpJ13Ii05bHT0KXMmyLDhLHAsc=
Subject key identifier:   4D:0A:64:2B:B0:73:22:02:83:AE:38:CD:CA:23:0F:59:3A:D8:FD:0A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE8615CE5F6C7FB16F591F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6686876b-a727-36f0-ae91-f3c442edbcea.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     7725
IP address blocks:        162.150.16.96/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:86:15:ce:5f:6c:7f:b1:6f:59:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=81f15d4c-f347-4567-8554-3d53c1620de1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4d:eb:8b:48:d5:0e:09:60:2e:29:b0:21:02:
                    0c:49:49:c1:2a:d5:3b:92:1a:63:49:1c:90:6b:75:
                    99:d0:7a:d3:aa:ff:48:75:c3:a2:07:b0:b3:1f:eb:
                    73:fb:94:08:9c:df:84:14:d0:62:9c:e2:39:f9:41:
                    2c:c3:22:c9:95:1c:d2:65:a1:56:e3:7a:0a:c4:64:
                    2e:bc:d9:66:b4:2b:f5:a5:3f:49:e4:fd:b5:ee:fc:
                    1e:a0:33:f2:87:52:00:3e:b5:ed:e7:30:2f:f5:a0:
                    a2:98:10:fc:40:31:92:0c:e9:6b:b6:6b:37:8f:71:
                    8f:10:06:af:31:f0:3f:75:9e:9c:8c:87:e0:81:8d:
                    d3:3e:ba:0a:f7:ee:85:82:55:67:cd:3c:dc:df:4f:
                    e0:c6:72:54:2b:eb:e3:b4:76:cb:a1:0d:e4:57:d1:
                    6e:68:83:da:07:33:38:21:2d:2e:98:37:03:32:91:
                    8d:68:f8:2a:bd:ad:6d:45:7c:82:b5:c6:57:0d:87:
                    38:ee:9b:d2:52:7e:f5:c4:08:06:7f:6d:f2:23:2c:
                    f7:34:83:c2:87:c1:5c:fd:15:2d:10:e9:14:45:30:
                    a6:e5:d1:f7:12:02:77:29:38:78:12:da:01:e6:e5:
                    b2:dd:fb:36:ba:a7:d7:a6:8e:ba:3d:9f:20:f1:0c:
                    0b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:0A:64:2B:B0:73:22:02:83:AE:38:CD:CA:23:0F:59:3A:D8:FD:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6686876b-a727-36f0-ae91-f3c442edbcea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.150.16.96/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:eb:90:f7:94:2e:67:77:0b:8b:6e:b5:ed:17:10:7b:ca:46:
         14:f8:00:8c:30:c1:07:80:67:79:a6:c2:b1:d4:e0:35:5c:58:
         34:57:19:98:56:5b:74:f0:7d:43:66:b8:4f:40:a8:51:4f:f9:
         9b:81:2e:58:75:9c:cf:c1:28:ba:7c:fb:02:b6:13:f9:f2:b5:
         76:92:d3:10:98:84:49:13:04:f6:fe:b9:61:f1:5d:98:bd:a7:
         1b:63:16:8e:f7:2e:c1:92:f8:53:45:3d:f7:96:62:59:66:a4:
         ba:25:8b:8f:49:09:7d:68:46:d4:68:d5:b8:a9:e2:04:49:09:
         22:6e:5b:24:37:4d:aa:6c:aa:ac:bb:f1:a3:b2:c7:cd:fd:3f:
         9e:ab:29:19:c9:75:fa:da:bb:9d:85:64:4c:77:04:82:53:42:
         24:79:94:7d:e5:9d:11:6e:e2:41:34:e8:08:b9:b3:35:f3:ba:
         67:ca:d5:4f:b0:7e:cd:0d:d5:01:3d:6a:c2:d3:e4:d6:39:b9:
         87:45:fd:3a:0d:cc:7f:5c:59:91:db:c4:82:26:47:ff:d4:04:
         11:ec:82:93:62:49:6e:37:3b:9f:7b:67:99:d6:08:3a:fd:c5:
         bf:47:9a:eb:74:cd:64:bb:e6:1b:3c:2f:3d:ae:4e:b4:40:d8:
         44:63:18:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:01:45 2026 by rpki-client