Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/ed4befef-a1da-33d9-9119-72f257ad0b5c.roa
File:                     ed4befef-a1da-33d9-9119-72f257ad0b5c.roa (raw, json)
Hash identifier:          N8GdMaGqKTlcZd82Ts/rUwg+yK11VMxUc2axy/VpD5Y=
Subject key identifier:   AE:63:74:B4:9E:66:F4:94:23:AC:97:7F:42:F1:32:34:93:F4:A9:7D
Certificate issuer:       /CN=4279ddf8-3e66-45cf-8955-452fbe652c0c
Certificate serial:       010D0C9F4328584E25C10BF6216421C15E4E1C00
Authority key identifier: CA:A2:64:1B:A7:B7:4C:7E:8A:60:83:4F:0E:42:BB:78:A4:50:F0:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/ed4befef-a1da-33d9-9119-72f257ad0b5c.roa
Signing time:             Fri 12 Jun 2026 13:22:23 +0000
ROA not before:           Fri 12 Jun 2026 13:22:23 +0000
ROA not after:            Thu 10 Sep 2026 13:22:23 +0000
asID:                     27425
IP address blocks:        162.250.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/4279ddf8-3e66-45cf-8955-452fbe652c0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/4279ddf8-3e66-45cf-8955-452fbe652c0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:c1:0b:f6:21:64:21:c1:5e:4e:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4279ddf8-3e66-45cf-8955-452fbe652c0c
        Validity
            Not Before: Jun 12 13:22:23 2026 GMT
            Not After : Sep 10 13:22:23 2026 GMT
        Subject: CN=9b96efc7-d976-41e1-9554-f4af33da54e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d9:2b:81:0e:d7:47:9a:e5:9a:99:63:2a:f9:
                    4d:98:c4:1e:13:42:69:d4:ad:96:f8:64:14:67:b1:
                    8b:c1:fa:8e:33:3c:c9:b0:5b:4a:b1:0b:b8:99:38:
                    b8:7a:0e:be:30:f8:9e:a3:0a:80:f5:ca:47:de:05:
                    87:d8:be:b2:05:e5:94:29:a9:79:98:30:48:78:28:
                    7e:c0:ae:60:49:14:cd:3a:0b:70:7e:de:72:74:1d:
                    65:51:6c:48:da:f4:df:fd:60:01:d0:b3:6f:b7:6e:
                    37:72:1e:10:9f:50:fc:96:11:64:13:8a:ba:15:7a:
                    0c:86:f2:ca:a1:fd:c2:f4:c2:40:13:72:6e:e5:42:
                    58:25:75:76:0b:4b:f9:56:14:2b:9f:dc:f3:7f:5c:
                    04:01:c8:53:f6:94:6e:99:b3:b6:10:6d:6f:aa:43:
                    a8:44:b0:91:8a:2a:c4:03:39:0a:bd:23:19:6a:f9:
                    4a:4b:2f:39:c7:08:cf:56:f3:9c:44:16:b9:d1:37:
                    f8:38:c5:0f:cc:06:d5:b4:3b:01:c5:bd:ca:97:3c:
                    5c:48:5d:c4:46:05:58:3d:93:e0:b0:65:a3:7d:11:
                    16:66:32:4b:2b:93:e6:a3:92:24:d4:c4:b6:bd:6d:
                    0d:0a:99:57:4a:8a:d2:cd:71:2e:02:6b:fd:b8:e5:
                    0c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:63:74:B4:9E:66:F4:94:23:AC:97:7F:42:F1:32:34:93:F4:A9:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/ed4befef-a1da-33d9-9119-72f257ad0b5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/4279ddf8-3e66-45cf-8955-452fbe652c0c.crl

            X509v3 Authority Key Identifier:
                keyid:CA:A2:64:1B:A7:B7:4C:7E:8A:60:83:4F:0E:42:BB:78:A4:50:F0:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.250.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:19:98:ff:9a:03:fc:8e:b6:c0:0f:38:aa:fa:fa:9d:af:c2:
         f5:0f:49:7c:a7:ff:6f:37:b4:bf:a8:6a:15:fa:ad:63:56:51:
         3d:31:f6:fa:16:0a:91:f1:43:94:19:57:6a:38:96:d8:89:73:
         5d:d5:1b:dc:75:41:e5:bf:b8:5f:00:5f:fa:78:27:27:56:6e:
         6a:44:30:2c:99:3a:e8:be:71:9c:4c:34:31:2d:6d:0e:29:a1:
         64:11:03:af:cf:2b:9f:1f:40:3a:c2:71:4c:31:72:f0:e8:0d:
         b5:93:69:3d:59:9b:95:a5:6e:5d:bc:d1:ea:61:c1:ef:f1:de:
         f5:49:77:a8:fd:e1:0e:4a:9b:f1:3e:35:6b:dd:b5:13:f8:2a:
         ed:8b:b7:29:27:5b:09:a6:d2:e9:f3:90:be:a0:fd:18:3c:1e:
         00:1e:6f:40:dc:6d:88:21:83:0f:db:e1:1d:2e:a5:65:a5:6b:
         a7:11:57:d3:5e:20:9e:c6:53:25:1d:64:e6:fa:13:e7:5c:ae:
         05:e5:c4:1d:22:c6:98:a9:85:90:80:a1:ac:24:ea:6a:b3:25:
         f5:ed:6a:24:78:30:a6:c5:af:d4:b2:96:5e:a9:bc:f2:a8:2f:
         71:3f:c8:d6:6f:30:bf:fd:78:8f:1b:4e:f9:41:40:c3:f3:8c:
         f3:4c:75:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:56:43 2026 by rpki-client