Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/582ea809-ce36-3215-be87-d35103b9b9a7.roa
File:                     582ea809-ce36-3215-be87-d35103b9b9a7.roa (raw, json)
Hash identifier:          m0b7YqcXUJGGLAB2c5NL1MWnDkSvrI3iQAYk/Gi2lZ8=
Subject key identifier:   05:6A:C9:02:9F:FC:D9:68:4D:45:3B:07:FA:65:EF:68:B7:23:A0:3B
Certificate issuer:       /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
Certificate serial:       010D0C9F4328584F189793CFF38994433D1BCC00
Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/582ea809-ce36-3215-be87-d35103b9b9a7.roa
Signing time:             Mon 07 Sep 2026 13:00:12 +0000
ROA not before:           Mon 07 Sep 2026 13:00:12 +0000
ROA not after:            Sun 06 Dec 2026 14:00:12 +0000
asID:                     59865
IP address blocks:        199.62.146.0/23 maxlen: 23
                          199.62.148.0/22 maxlen: 22
                          199.64.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:97:93:cf:f3:89:94:43:3d:1b:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
        Validity
            Not Before: Sep  7 13:00:12 2026 GMT
            Not After : Dec  6 14:00:12 2026 GMT
        Subject: CN=5b8dfd28-0ecb-4624-a626-ea89f18f1d78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6a:67:54:43:04:13:20:13:f5:6e:1e:ac:7b:
                    da:1d:65:92:bc:c3:80:9d:f5:9e:fb:cd:60:91:b7:
                    05:9e:b2:2c:cd:2d:1c:86:35:f7:c1:f9:5f:1c:c1:
                    69:4f:fd:ea:e6:7e:9f:77:4f:51:73:59:a2:b5:7d:
                    b4:24:7d:ca:5e:e9:27:2a:ca:61:5f:34:f0:d3:a7:
                    5c:0c:8d:0f:21:66:63:3f:78:6f:23:10:e1:13:69:
                    6f:1c:23:d0:7f:0a:81:8a:ae:46:e6:75:08:6d:42:
                    74:55:e4:34:9d:6f:99:f8:68:06:40:1e:f7:2b:12:
                    66:c7:60:bd:79:f6:0d:9a:5d:50:73:d7:af:10:25:
                    bc:db:f8:ba:30:06:b8:e7:ae:0b:cb:bc:93:e3:80:
                    b6:98:84:8a:d8:32:b3:6c:a5:b0:65:e6:04:7a:a4:
                    dd:1e:2b:38:05:d0:06:2d:2e:7f:b8:3c:e6:25:bc:
                    9b:94:b3:0d:4e:a5:67:75:13:de:3f:49:a8:01:7e:
                    3b:b6:34:74:af:d0:dc:6b:28:b8:a1:39:16:ae:e7:
                    54:7c:f6:6d:16:81:cf:89:f0:c1:e7:63:f4:d2:c4:
                    2e:43:6b:a8:b5:f4:0e:b2:c3:e7:0e:4f:83:24:5e:
                    d6:8a:64:75:82:ad:bd:70:1a:0c:77:71:62:c5:b3:
                    8e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:6A:C9:02:9F:FC:D9:68:4D:45:3B:07:FA:65:EF:68:B7:23:A0:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/582ea809-ce36-3215-be87-d35103b9b9a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl

            X509v3 Authority Key Identifier:
                keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.62.146.0-199.62.151.255
                  199.64.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:ca:02:a4:6a:f6:c0:2c:95:fb:1d:47:66:e2:29:0e:b8:54:
         13:6f:da:36:19:f6:f5:ce:8e:76:9f:0e:36:8b:c7:78:3c:06:
         93:d8:2b:de:9a:ce:c9:db:3b:c0:7f:1d:76:71:d7:a5:86:a4:
         f2:7f:50:74:00:e6:94:38:e5:d2:43:e8:92:6e:79:80:d2:57:
         d5:1a:d1:a7:07:e6:02:de:a7:38:9c:d9:65:19:7d:bd:cf:1f:
         bc:f6:4f:56:aa:f8:d1:c6:c2:63:b3:03:4e:b2:a6:90:1d:17:
         cd:f3:76:31:fe:51:45:82:44:1c:58:95:f1:7e:5e:b2:d3:cd:
         6f:09:ba:32:ea:33:1b:08:a2:08:de:7a:99:81:c2:c1:e0:e3:
         65:07:e2:d1:08:5b:8f:7e:8b:02:ca:40:8e:37:37:e0:bd:6f:
         57:dd:2a:98:48:07:f3:58:94:b5:07:bc:fc:2d:a2:13:67:e8:
         12:0a:0b:8d:a3:6f:6d:58:cb:cc:cd:84:bd:61:7a:59:e9:ef:
         db:33:7a:b9:7e:33:32:66:17:0d:0d:36:3e:08:72:55:98:29:
         31:ff:59:f9:d4:d1:92:3e:35:8f:6b:d6:a3:fe:e2:d6:44:a6:
         08:25:ee:28:1d:f4:07:f2:a1:16:b6:7c:5f:26:32:7e:59:d6:
         52:27:24:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:07:31 2026 by rpki-client