Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/feab4e24-c427-3262-ae07-c36619833029.roa
File:                     feab4e24-c427-3262-ae07-c36619833029.roa (raw, json)
Hash identifier:          L3GtLZ+j7mB27q96hONwib8WAlArPjF8fhxSvSNFS48=
Subject key identifier:   65:CD:16:5A:AA:E9:E8:27:C0:B7:83:C4:56:F5:0B:62:C6:C9:FE:65
Certificate issuer:       /CN=2d1407f9-328d-4c44-abc9-11e6d18e8a53
Certificate serial:       010D0C9F4328584EA5AA6AAC7DB52E4F2DBD9E00
Authority key identifier: 38:E6:77:0A:A2:B2:5E:8E:09:E7:DE:3C:D4:26:FA:7C:C2:1B:D5:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/feab4e24-c427-3262-ae07-c36619833029.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     46841
IP address blocks:        162.218.240.0/21 maxlen: 21
                          162.251.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:6a:ac:7d:b5:2e:4f:2d:bd:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d1407f9-328d-4c44-abc9-11e6d18e8a53
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=c6745aea-2a77-4a2d-8e77-18ddee7d6b52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ac:e1:02:47:d3:2f:70:80:2a:4c:cb:85:b4:
                    bb:4f:ed:70:b1:ae:55:bc:2e:94:02:48:ae:64:42:
                    d6:08:c6:f2:6e:60:1d:e5:6d:a5:9f:5e:82:40:32:
                    90:03:80:50:6b:12:6e:37:1d:29:e1:e4:eb:92:63:
                    f2:85:a8:28:ce:f3:f7:38:b2:f6:fd:6a:f6:ad:ba:
                    c6:db:f1:27:9a:5e:48:38:1c:dc:7f:eb:30:0a:5e:
                    c4:8d:1d:0a:aa:e9:f1:c4:d5:cf:2a:40:2a:49:3e:
                    4b:6e:37:56:94:5c:05:07:91:be:f7:50:04:45:97:
                    e5:de:5e:df:aa:5e:49:24:10:76:5c:01:bd:87:ad:
                    0e:11:48:11:c7:61:23:f5:d5:71:8e:a3:a0:92:65:
                    3e:c7:50:74:3f:b6:78:16:ab:88:df:d6:02:f9:4a:
                    b9:94:4e:fd:d7:cd:f5:9d:c4:c9:9d:c3:42:7c:0f:
                    e7:07:92:05:45:59:e2:71:49:d8:cb:57:21:d0:0a:
                    1b:91:2e:6a:b8:9d:f3:2f:fe:0d:f0:c2:4d:73:0c:
                    01:80:0a:e5:d8:42:87:99:63:f0:48:6a:47:47:9d:
                    7b:43:d8:49:60:e0:c7:b4:19:8e:96:f3:44:14:cd:
                    ed:34:55:1c:b9:b6:1d:d0:3d:a2:d5:71:ad:fc:05:
                    75:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:CD:16:5A:AA:E9:E8:27:C0:B7:83:C4:56:F5:0B:62:C6:C9:FE:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/feab4e24-c427-3262-ae07-c36619833029.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.crl

            X509v3 Authority Key Identifier:
                keyid:38:E6:77:0A:A2:B2:5E:8E:09:E7:DE:3C:D4:26:FA:7C:C2:1B:D5:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.218.240.0/21
                  162.251.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:e1:59:0a:d5:ae:b1:2e:d6:42:9f:9a:68:d2:33:5c:b5:f7:
         cd:b8:5d:87:d7:d4:aa:bf:8f:8d:db:ec:c4:9f:72:7c:27:5f:
         a6:f1:d8:f4:c9:0c:6c:b7:0c:32:83:76:d8:44:c7:ea:57:35:
         94:93:d3:88:06:6a:83:2c:fa:ed:d6:cf:a8:a8:d3:12:3a:ef:
         11:0f:40:f3:4c:5f:f1:8a:d5:5a:3d:2f:4d:2b:9e:7c:5c:76:
         8d:42:ca:0b:c9:b3:a6:cd:10:a9:59:66:0b:2b:a7:db:55:9c:
         d7:53:fc:ea:74:a7:5b:e9:1a:d2:d0:8e:11:72:56:1e:5b:f0:
         6d:8a:8f:f7:79:41:24:87:0f:57:29:87:0a:a4:70:d9:4c:67:
         0e:6f:31:3a:da:84:83:34:98:81:be:76:65:cc:b6:b5:cb:e0:
         0e:10:8e:28:e1:a5:d9:15:9c:44:fe:9f:b9:7c:b0:ff:02:a4:
         c8:af:33:d0:c7:16:d4:09:d9:ff:27:c2:0d:c8:81:95:8e:62:
         b4:a6:e7:d9:f3:57:87:56:38:4e:64:cf:5c:fa:45:c5:be:30:
         eb:f4:1f:af:d7:4d:40:9f:42:f1:13:6c:20:db:19:ef:65:9d:
         fa:5f:45:49:71:b3:bb:df:b1:50:58:9a:8b:3d:1c:05:f3:03:
         6b:cc:3e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:04:15 2026 by rpki-client