Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7de84-b33a-43c7-acd3-7cd3ffceccb8/7995440f-443c-3d8e-9be1-fb8a6ddcafb7.roa
File:                     7995440f-443c-3d8e-9be1-fb8a6ddcafb7.roa (raw, json)
Hash identifier:          VzePoM6JTg36ISkgudJ6TLhnbTk0I4hNfOovJkdDa6E=
Subject key identifier:   12:62:C6:33:AF:A0:7C:D2:47:4E:3F:80:FC:B6:C7:10:30:EB:B6:ED
Certificate issuer:       /CN=19c7de84-b33a-43c7-acd3-7cd3ffceccb8
Certificate serial:       010D0C9F4328584CBDB1FC102FAA1595AD7F9A00
Authority key identifier: F8:78:C8:3D:4C:89:41:1B:0E:4C:C7:C4:7F:6F:76:DE:3F:7E:0C:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7de84-b33a-43c7-acd3-7cd3ffceccb8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7de84-b33a-43c7-acd3-7cd3ffceccb8/7995440f-443c-3d8e-9be1-fb8a6ddcafb7.roa
Signing time:             Tue 03 Feb 2026 14:00:39 +0000
ROA not before:           Tue 03 Feb 2026 14:00:39 +0000
ROA not after:            Mon 04 May 2026 13:00:39 +0000
asID:                     16509
IP address blocks:        198.62.163.0/24 maxlen: 24
                          2620:79:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7de84-b33a-43c7-acd3-7cd3ffceccb8/19c7de84-b33a-43c7-acd3-7cd3ffceccb8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7de84-b33a-43c7-acd3-7cd3ffceccb8/19c7de84-b33a-43c7-acd3-7cd3ffceccb8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7de84-b33a-43c7-acd3-7cd3ffceccb8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bd:b1:fc:10:2f:aa:15:95:ad:7f:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c7de84-b33a-43c7-acd3-7cd3ffceccb8
        Validity
            Not Before: Feb  3 14:00:39 2026 GMT
            Not After : May  4 13:00:39 2026 GMT
        Subject: CN=c375e521-2c4f-4f81-b2de-f169a10ef610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ab:ec:ea:6a:64:70:94:22:10:dc:cf:ee:a5:
                    ea:57:d9:8e:39:ed:30:87:9a:1b:9a:c1:dd:e7:90:
                    a7:d0:f0:20:57:2c:ec:40:ed:ac:e7:e9:f7:c7:7c:
                    47:72:83:e5:9e:ac:08:43:c3:59:7f:bd:b3:51:bc:
                    5f:0c:ca:7c:d1:54:d8:9f:24:22:bb:9b:e1:e7:a2:
                    55:bb:ba:7d:49:81:c5:ee:77:6a:a8:df:38:d3:55:
                    a8:ae:ed:9e:5d:cd:44:ab:d9:11:1c:fe:67:36:e5:
                    ae:46:45:c0:f6:a7:bf:c7:fd:0d:d5:9b:6d:17:a3:
                    4c:c9:b5:2e:5f:4e:a4:3d:28:47:44:25:d5:8b:17:
                    bf:87:4d:03:f1:76:b6:13:02:bb:06:0f:cf:db:54:
                    f4:4b:df:d6:5b:a1:f2:9a:4f:07:34:37:3f:7a:3a:
                    7b:0e:32:43:09:c3:25:55:51:bf:b8:c1:c0:57:10:
                    d2:41:cb:55:21:42:6e:a1:fa:db:dc:13:4c:e2:08:
                    85:58:fa:d8:65:12:b2:e4:64:a8:21:cb:79:1e:44:
                    36:db:92:33:0f:45:5c:42:01:b4:79:ab:00:f1:8d:
                    86:49:63:0f:cf:f3:b4:7b:f4:87:3a:99:73:7c:1a:
                    32:66:98:6d:66:79:28:fc:a1:c6:95:ef:8d:24:75:
                    08:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:62:C6:33:AF:A0:7C:D2:47:4E:3F:80:FC:B6:C7:10:30:EB:B6:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7de84-b33a-43c7-acd3-7cd3ffceccb8/7995440f-443c-3d8e-9be1-fb8a6ddcafb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7de84-b33a-43c7-acd3-7cd3ffceccb8/19c7de84-b33a-43c7-acd3-7cd3ffceccb8.crl

            X509v3 Authority Key Identifier:
                keyid:F8:78:C8:3D:4C:89:41:1B:0E:4C:C7:C4:7F:6F:76:DE:3F:7E:0C:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7de84-b33a-43c7-acd3-7cd3ffceccb8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.62.163.0/24
                IPv6:
                  2620:79:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:b4:63:60:a9:db:37:3f:17:42:92:6d:c7:2b:84:4d:81:9d:
         1a:2e:11:89:60:77:f3:28:b5:fe:b5:91:60:f6:58:b4:dc:e0:
         4c:b2:5b:3b:4f:e5:65:1c:58:31:80:08:78:89:ed:e1:1e:7b:
         fc:09:bc:a6:fc:4a:cd:21:d1:de:3e:ae:ea:32:cf:4c:c5:99:
         12:66:2d:ee:c4:63:c4:e2:60:a8:a5:3b:e3:5a:fb:cc:1d:25:
         91:87:0c:48:e7:5e:ab:5b:8b:e7:e7:19:75:d2:0e:46:28:34:
         41:f5:ba:3b:02:e5:6e:d8:62:64:cf:00:b2:f6:f1:82:d7:75:
         fd:b9:79:4d:7a:c4:c8:73:6d:38:ef:55:89:fc:72:cd:4f:af:
         b6:46:81:b3:b1:42:ba:bc:df:65:1f:4f:dc:f5:52:ad:87:03:
         8b:83:20:67:69:23:bc:0e:75:36:57:c2:6b:bb:fb:a2:71:0f:
         e1:5a:d3:b8:67:bf:04:bb:6a:8f:b5:db:b5:56:34:b2:24:54:
         79:5f:f5:1f:3b:39:d1:7a:f0:45:ca:eb:06:22:c8:70:cc:57:
         78:c8:6b:77:c5:3c:af:44:5c:a3:da:3d:54:0b:02:a6:4d:80:
         66:de:c9:4a:7c:c3:a0:a4:5d:4f:7c:db:a4:f7:67:10:b0:82:
         75:d5:e4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:14:56 2026 by rpki-client