Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8b4085c3-80bf-3d18-b6e4-65193bd79dae.roa
File:                     8b4085c3-80bf-3d18-b6e4-65193bd79dae.roa (raw, json)
Hash identifier:          Ndn7Uh4FplGImcQdO7cY0RDESLEgSTGjbDBg6UH/a78=
Subject key identifier:   2D:E0:D2:C4:89:BC:92:D0:03:32:40:7A:DD:F1:D3:8B:78:0A:85:2B
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584E15E46EA8039501EC4F0B5800
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8b4085c3-80bf-3d18-b6e4-65193bd79dae.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     397630
IP address blocks:        158.62.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:6e:a8:03:95:01:ec:4f:0b:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=44e5ffd5-6f90-4760-bfa9-7eecb07c856b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:04:c8:f9:4e:29:8b:d1:38:36:c6:8c:84:61:
                    d2:39:f8:0c:e5:f5:24:ea:7a:b3:1a:b5:29:5b:a5:
                    f8:de:e0:72:e0:c5:db:22:43:5f:e7:45:ac:23:8a:
                    3f:7f:23:ec:da:81:ae:a2:39:0a:b4:9e:e7:f1:f4:
                    8c:74:b9:c6:14:1e:4a:a3:23:af:f4:0c:f5:6c:29:
                    06:ad:8b:4a:56:e4:77:a8:df:46:17:4b:35:38:b3:
                    07:4f:7f:6b:59:57:ed:4f:eb:a1:e9:7c:b3:9b:75:
                    df:bb:84:1d:df:af:db:69:c0:b4:4d:19:97:c2:0a:
                    ac:ca:89:7e:9d:62:87:dd:e0:ce:3c:2b:57:90:d1:
                    6a:ad:47:04:ea:5e:25:c5:e2:ac:6f:e0:4f:6b:94:
                    e1:27:b0:83:91:10:ec:ec:0f:02:fe:0a:9a:24:ff:
                    dd:d5:eb:ad:10:fb:15:6f:3a:e2:db:8c:28:0d:69:
                    87:84:b3:7a:85:ae:65:40:fc:78:e9:f3:de:f5:0f:
                    37:36:da:dc:ab:88:43:8b:a5:56:56:e0:94:af:db:
                    23:4b:d1:2f:1d:2f:14:3c:c4:a1:51:04:60:19:a5:
                    12:e7:dc:7f:f2:13:d7:81:39:70:7f:8e:05:91:24:
                    25:e0:95:28:f2:c9:38:b6:ba:0d:bd:28:89:4e:0d:
                    1e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E0:D2:C4:89:BC:92:D0:03:32:40:7A:DD:F1:D3:8B:78:0A:85:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8b4085c3-80bf-3d18-b6e4-65193bd79dae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.62.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:31:3d:79:72:57:6a:28:f2:57:fd:e6:ee:82:12:1b:b4:e9:
         6e:87:cb:3b:89:81:81:65:2e:80:e8:35:45:5b:54:5d:cd:8c:
         89:cd:66:8c:b4:4b:ad:7e:fb:3b:6d:1b:e0:c1:0c:08:62:a1:
         9d:d5:ad:13:78:df:51:b1:fc:16:be:3d:99:6d:98:9c:57:37:
         e7:fd:a5:65:c3:84:95:0e:1f:ac:74:87:0c:c1:c0:14:94:19:
         fc:48:ec:69:88:77:8c:1a:db:e4:0c:ff:fa:d1:d9:08:59:9a:
         c9:4b:89:57:e3:2f:ea:21:3c:86:73:12:84:e4:4e:a5:68:0e:
         8d:fb:74:c9:5c:2e:0b:79:cc:94:40:99:9d:a4:d2:88:f2:8a:
         fe:bc:6a:c3:dd:eb:73:ad:27:ed:9f:9f:b3:57:ad:3e:af:7b:
         cd:67:bb:5e:58:a4:b9:bc:2b:b2:af:d1:d5:ed:9c:8d:aa:cf:
         93:4a:f9:2f:5e:0a:d1:56:94:da:a1:26:0e:a1:d8:ae:d4:1f:
         76:36:6e:4b:28:72:25:20:35:09:a1:2b:93:b1:4a:1d:91:3c:
         95:de:d9:b5:b2:a3:f4:3a:b1:1e:2d:58:ab:6c:7c:e2:b8:b1:
         81:4b:2d:d3:f8:d3:7d:14:45:33:81:ac:d1:b9:61:65:38:24:
         8a:1e:e8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:08:09 2026 by rpki-client