Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3/f73023ac-2cc0-37d9-9161-8ffac01ff8de.roa
File:                     f73023ac-2cc0-37d9-9161-8ffac01ff8de.roa (raw, json)
Hash identifier:          1HHL2UdqE8syh1/+qL6JxhSBVWDlf9osCKQjK8eQz6Y=
Subject key identifier:   4F:4F:10:DC:EF:2F:80:2B:BD:E0:1B:13:8C:34:6B:25:1F:8A:D9:04
Certificate issuer:       /CN=93486113-52ec-4d22-9c7f-d493f8e27cb3
Certificate serial:       010D0C9F4328584D6C0FB1DCA377EFAFE2646080
Authority key identifier: 3C:A2:CB:86:C0:C6:7E:F3:71:43:38:DD:49:7C:F4:23:D6:A5:F4:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3/f73023ac-2cc0-37d9-9161-8ffac01ff8de.roa
Signing time:             Tue 07 Apr 2026 01:00:23 +0000
ROA not before:           Tue 07 Apr 2026 01:00:23 +0000
ROA not after:            Mon 06 Jul 2026 01:00:23 +0000
asID:                     40328
IP address blocks:        162.249.96.0/21 maxlen: 21
                          162.249.98.0/23 maxlen: 23
                          162.249.100.0/23 maxlen: 23
                          162.249.102.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3/93486113-52ec-4d22-9c7f-d493f8e27cb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3/93486113-52ec-4d22-9c7f-d493f8e27cb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6c:0f:b1:dc:a3:77:ef:af:e2:64:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93486113-52ec-4d22-9c7f-d493f8e27cb3
        Validity
            Not Before: Apr  7 01:00:23 2026 GMT
            Not After : Jul  6 01:00:23 2026 GMT
        Subject: CN=01961b98-7613-48d5-be11-bb496cf242b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0c:24:c5:34:a4:d7:f8:6d:04:73:88:a6:b8:
                    2f:e3:49:8c:05:9c:fa:ee:11:fe:a4:fb:01:1f:5f:
                    7a:f1:ee:10:58:03:75:6b:91:26:8e:d4:42:77:68:
                    ba:d2:14:e2:4c:a0:66:d9:39:1e:4f:64:93:28:3c:
                    26:28:97:d6:a4:b8:8f:a7:d2:fa:c5:12:4f:a0:75:
                    7c:ea:d9:a8:62:b8:fb:e1:1c:4a:df:07:c3:45:5e:
                    2b:d3:67:1c:a8:af:6e:43:29:76:ef:1e:86:9b:0c:
                    31:18:d1:6e:e9:b7:f5:84:43:c0:67:2a:a0:18:a8:
                    d3:30:ea:e5:5c:77:f1:1c:8b:fc:fd:4e:1e:2e:2b:
                    55:a6:0c:bf:4c:43:3c:4d:e4:c7:dc:19:c7:48:4c:
                    b1:2f:1c:34:f4:36:1e:2c:e8:c2:51:4b:37:01:56:
                    fa:3c:46:d4:9c:9c:c9:b7:78:6b:d4:56:ca:6f:e6:
                    f8:38:3e:0d:f1:ea:90:98:e5:60:a7:ad:8a:f6:9e:
                    c6:91:38:65:06:64:12:09:cd:33:a6:91:28:a8:df:
                    1f:2f:a4:86:cf:99:2c:56:96:a3:3c:04:f8:15:e8:
                    bd:a1:0c:e8:d1:e3:39:21:fd:cb:c6:0e:b9:76:4f:
                    1e:84:a1:2e:97:25:c1:a3:82:d1:23:1b:64:18:0b:
                    02:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:4F:10:DC:EF:2F:80:2B:BD:E0:1B:13:8C:34:6B:25:1F:8A:D9:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3/f73023ac-2cc0-37d9-9161-8ffac01ff8de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3/93486113-52ec-4d22-9c7f-d493f8e27cb3.crl

            X509v3 Authority Key Identifier:
                keyid:3C:A2:CB:86:C0:C6:7E:F3:71:43:38:DD:49:7C:F4:23:D6:A5:F4:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.249.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:97:55:3b:75:53:e3:88:3c:97:f2:44:f5:7f:27:bf:db:6d:
         b2:0e:87:42:12:80:fb:1b:7d:8d:fa:de:e7:5e:7c:c0:e6:e5:
         24:60:b3:e4:5a:f0:1e:9c:6d:48:cd:bf:be:1e:9e:a5:72:b4:
         5d:0c:a1:72:09:e7:40:f8:1c:a1:c0:0c:f9:4a:f6:28:66:45:
         e7:a9:2e:f0:fe:e7:41:30:ba:f9:fd:04:0e:e1:2a:66:7b:b2:
         69:f5:d6:ff:7b:26:9a:e1:3c:2a:c5:ed:63:02:bd:fa:e2:68:
         60:55:a1:07:fa:53:eb:b7:9d:57:42:42:9c:c0:70:70:bc:ef:
         27:4a:81:e9:93:3c:34:99:28:d7:c5:2e:c0:53:bf:3a:5a:9b:
         9f:8a:f8:9e:e0:b5:2e:bd:91:ec:98:52:92:7d:40:e1:26:bc:
         c2:47:0c:e3:a6:27:1f:79:bf:d2:61:81:c0:5b:7a:e3:97:cf:
         61:b4:9b:e3:73:cf:43:ce:cd:a1:a3:ed:f5:7d:92:e4:f0:87:
         64:49:c8:29:b2:fe:56:34:1b:71:77:1f:ff:1d:57:32:78:2d:
         88:bf:fc:d9:36:ca:35:78:0b:ed:91:9e:1e:ce:d6:ed:80:22:
         f0:ca:66:c6:c3:34:5d:bf:d9:9f:9e:25:76:1a:cd:54:cb:7c:
         60:4d:ba:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:38:29 2026 by rpki-client