Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0746bbc4-ef4e-355f-9395-5f865a40637e.roa
File:                     0746bbc4-ef4e-355f-9395-5f865a40637e.roa (raw, json)
Hash identifier:          U0qxz+5mNX0lELibKGrhOs1LM+qVia1mAcsQZQeBwDE=
Subject key identifier:   0C:2D:D5:FA:79:D5:62:5F:4E:52:E6:F5:A8:AB:FC:39:02:C5:17:D7
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584E9A7FDDB601CB7300EF007CA4
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0746bbc4-ef4e-355f-9395-5f865a40637e.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     22516
IP address blocks:        158.62.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:dd:b6:01:cb:73:00:ef:00:7c:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=cf490d47-a634-4f68-8af8-180bc77bf021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:34:4d:9c:33:3d:25:7e:9a:50:16:bd:ee:95:
                    0b:ba:6c:2c:2c:c9:e5:dd:ac:49:73:a7:5b:56:9a:
                    83:68:5b:4f:46:38:5f:b2:07:ad:2b:38:24:1b:18:
                    78:5a:69:90:85:76:99:30:74:b9:40:3d:44:72:4f:
                    5c:ef:78:ff:6e:38:bc:65:82:b2:d3:2f:49:9a:e0:
                    84:53:99:86:38:6f:40:2d:3a:dd:36:e4:47:42:86:
                    ca:ef:91:a4:a7:fe:b5:59:d5:bd:c8:ff:52:0e:57:
                    83:88:2f:14:62:f8:dd:de:08:e3:93:86:01:be:60:
                    f8:10:e8:18:e0:90:5a:3c:54:ff:3d:7b:1e:c2:4e:
                    5c:67:71:49:6c:a5:a6:40:c1:d2:a7:83:76:27:1e:
                    ce:96:fa:26:fc:d1:0a:e7:48:fd:0c:81:f5:bd:86:
                    70:fd:26:78:81:75:93:55:b6:d2:40:71:7b:17:79:
                    ba:a7:bb:f8:2d:6d:94:71:4b:c0:a4:69:80:94:8e:
                    97:fe:ad:a6:94:17:ec:af:74:07:e4:03:e2:d5:b9:
                    2b:45:18:1c:d0:3f:f1:a6:0c:12:9e:f8:09:21:41:
                    4c:08:8e:f5:fd:26:9f:22:4e:fd:2d:7e:04:bf:48:
                    87:3b:6d:a7:7e:ae:3e:35:61:ee:62:30:fe:ed:2a:
                    66:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:2D:D5:FA:79:D5:62:5F:4E:52:E6:F5:A8:AB:FC:39:02:C5:17:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0746bbc4-ef4e-355f-9395-5f865a40637e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.62.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:63:ca:11:6d:84:6b:42:88:6f:23:bf:e6:6b:d5:0f:c4:8b:
         79:25:2c:cf:cb:74:d9:fe:bc:68:84:97:7f:84:df:76:4f:bd:
         3f:70:1e:85:b4:9f:f9:3d:a4:56:32:61:11:a2:e6:a8:b2:48:
         06:13:c8:8f:8d:72:60:de:80:8c:44:16:6b:80:b9:f8:3e:ed:
         6b:0c:17:0b:41:3d:ec:a9:32:f3:f0:4a:9c:23:bb:76:f5:d1:
         45:75:55:6b:5c:a4:26:97:64:8f:87:4d:98:0e:60:58:5a:2b:
         1e:20:43:73:ff:0d:47:a9:91:53:96:ad:93:95:08:64:8f:2f:
         2e:13:2b:3c:af:23:23:d9:59:3a:a0:35:e1:4b:9a:3f:7e:17:
         75:7c:d5:5e:af:f1:38:cc:6d:39:40:9e:52:c5:a3:10:e6:f8:
         fb:c3:32:05:06:18:cc:d4:35:53:36:4e:e9:61:f0:6f:83:43:
         b4:3a:c6:cc:4c:03:65:c3:66:03:a2:89:96:32:f4:8f:07:53:
         c8:9e:02:de:d8:0b:b1:b1:87:63:b3:3a:e1:53:a9:64:d5:ec:
         ae:85:0d:5c:8f:e5:e2:4f:7d:f0:55:72:b5:e6:e1:67:8b:cb:
         46:e6:64:8c:c8:7c:13:93:de:ae:7d:ab:b2:59:ac:28:a3:3b:
         d7:8d:ba:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:20:26 2026 by rpki-client