Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/16252bc1-c218-3a65-a252-c9e9887f55f9.roa
File:                     16252bc1-c218-3a65-a252-c9e9887f55f9.roa (raw, json)
Hash identifier:          agxhIPNp/ZLeavjMuplBrQ6hSyu6pkyfdaJPGSqo05c=
Subject key identifier:   14:DB:A4:E8:20:BC:97:92:F1:2F:28:D0:42:03:32:12:A1:60:E3:3A
Certificate issuer:       /CN=f7e210a1-7b8a-4256-a4d2-c01234095c68
Certificate serial:       010D0C9F4328584EA7889213471C76F34B80C500
Authority key identifier: 70:64:A6:51:04:91:5D:5C:1A:88:70:D7:6F:6C:54:2D:27:AB:63:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/16252bc1-c218-3a65-a252-c9e9887f55f9.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14450
IP address blocks:        162.217.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/f7e210a1-7b8a-4256-a4d2-c01234095c68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/f7e210a1-7b8a-4256-a4d2-c01234095c68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:92:13:47:1c:76:f3:4b:80:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7e210a1-7b8a-4256-a4d2-c01234095c68
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=387b2d2f-5dbd-479e-877b-bdf967f045f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d2:10:c1:61:c4:5e:da:5e:4d:3c:f3:52:1e:
                    76:98:cf:69:47:0e:df:e0:49:b8:1b:4b:07:df:ed:
                    88:01:a4:4c:45:0e:fe:8a:06:b9:48:37:ab:ef:80:
                    19:c7:e6:9a:af:cf:da:23:77:ae:a6:a9:fa:24:28:
                    eb:2f:d6:31:28:1a:3b:e0:86:90:d5:a5:91:8f:4d:
                    a2:a6:0b:79:d6:36:f4:4b:b4:06:b9:40:9b:86:df:
                    c2:7b:3e:7a:58:47:a5:11:27:1f:ef:7a:53:6f:5a:
                    04:27:4b:86:be:5b:50:0c:1b:49:56:5b:f6:4b:7a:
                    f1:2b:86:68:f0:11:26:d8:54:b9:cd:55:37:df:40:
                    fd:9d:da:8a:d6:6f:ce:b1:76:b7:ce:72:0b:3b:97:
                    45:54:2c:a4:43:9a:4b:36:ab:0a:25:21:1a:8e:24:
                    2d:58:c5:38:ad:20:8a:4c:27:d5:ee:86:e8:59:95:
                    60:8b:1d:bf:c4:f1:21:54:e8:3a:49:74:0a:74:ae:
                    db:56:2e:40:bc:01:4d:ed:32:52:a7:98:2b:ba:69:
                    23:2d:ab:44:15:2e:90:ea:4b:0b:3c:13:92:51:05:
                    b8:78:2e:10:ab:6e:e0:bf:cf:55:ab:89:73:ff:a2:
                    c0:34:69:4c:38:db:3d:4b:72:64:10:2d:47:77:19:
                    1a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:DB:A4:E8:20:BC:97:92:F1:2F:28:D0:42:03:32:12:A1:60:E3:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/16252bc1-c218-3a65-a252-c9e9887f55f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/f7e210a1-7b8a-4256-a4d2-c01234095c68.crl

            X509v3 Authority Key Identifier:
                keyid:70:64:A6:51:04:91:5D:5C:1A:88:70:D7:6F:6C:54:2D:27:AB:63:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.217.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:57:6e:40:3e:8a:34:9a:1a:4f:98:0a:bf:fa:a0:63:88:b2:
         02:97:c0:f5:e4:0c:e1:31:19:05:e1:e9:e5:b1:7f:75:e7:03:
         01:ac:2f:1b:41:99:e2:96:6d:1b:7f:81:20:14:95:4c:5f:12:
         fd:0f:2d:c4:30:f5:fc:00:30:44:a1:6e:e6:aa:ac:23:0f:c6:
         45:11:3c:26:28:53:80:38:4b:b4:ad:55:15:1c:84:9e:7d:fb:
         eb:e6:30:87:17:12:2e:84:42:c4:68:53:e1:ff:ee:7d:97:d9:
         d2:95:08:98:bb:62:d5:08:16:1f:10:ca:0d:e6:98:a6:e8:06:
         20:a1:71:1b:ad:a9:38:b8:22:ef:98:48:fa:fe:53:81:82:2d:
         16:80:63:22:f4:9e:29:ab:a3:8d:8f:37:08:00:4b:e4:9f:65:
         d5:e4:e8:80:f2:ef:97:69:6f:4f:9e:8e:93:6c:05:96:27:6d:
         b9:ca:5c:1c:03:da:56:8c:33:d1:a2:20:90:96:2b:0b:e1:77:
         89:f7:c0:62:d8:dc:88:03:0a:82:0f:c8:95:6b:5c:4d:7a:79:
         0d:d4:23:fb:76:8a:f3:c7:8e:45:86:10:04:b4:57:da:bf:d7:
         32:71:f6:35:05:43:30:bc:27:d3:45:3c:e8:b3:3f:ec:68:55:
         47:ae:e7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:58:56 2026 by rpki-client