Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/191e156d-df47-348d-ab69-66285d1ae3de.roa
File:                     191e156d-df47-348d-ab69-66285d1ae3de.roa (raw, json)
Hash identifier:          xvTmBcTUCg+dCLchMg73n6ybF8hqB/fljFpa6hJ+/s8=
Subject key identifier:   E7:C2:B8:7E:58:0B:83:08:D1:D7:83:74:4D:F0:4B:83:BC:D1:94:85
Certificate issuer:       /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
Certificate serial:       010D0C9F4328584EA798E62736FDEB44483E9FC0
Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/191e156d-df47-348d-ab69-66285d1ae3de.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     142617
IP address blocks:        162.250.96.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:e6:27:36:fd:eb:44:48:3e:9f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=83d95b10-7056-44b1-8ec3-921e1a0663b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:16:f7:ac:79:45:25:4e:75:8a:c8:74:d2:45:
                    8b:57:06:f1:5b:60:09:0c:98:62:48:b5:70:7f:68:
                    32:75:6c:8b:06:6f:1d:03:01:9e:8d:18:98:5b:69:
                    f6:47:80:91:3f:2c:9d:37:f1:b8:41:ab:4b:7b:5b:
                    fa:07:66:75:89:cb:90:6b:f5:71:15:e1:1d:c0:4d:
                    69:b7:e0:18:4d:20:66:78:2f:90:0e:7b:f2:59:b1:
                    53:c6:81:a3:d4:35:ad:4c:92:28:96:3d:e7:41:2f:
                    c1:08:19:54:4c:66:68:9d:c2:22:94:ee:68:3a:f6:
                    72:65:b6:be:5f:db:bf:43:00:e2:92:d8:ab:96:2a:
                    52:0d:47:e6:c8:85:44:40:45:f5:9a:2c:04:45:56:
                    29:1c:d6:eb:ab:7f:e9:97:33:28:18:fe:9f:d9:9e:
                    5a:35:26:b0:f5:9b:25:74:5f:aa:1f:a3:ed:a7:dc:
                    55:ff:cb:9b:52:06:65:4b:42:d2:8e:a1:30:9a:f0:
                    4f:76:44:cc:6c:55:07:cf:b7:22:8b:ac:23:21:08:
                    af:cc:72:ef:45:09:3c:49:9f:66:95:f1:d3:dd:25:
                    be:dd:1c:5f:48:74:7b:e0:b6:a6:c6:15:18:77:97:
                    46:b1:49:a2:d9:31:4e:5c:6c:9b:6b:0d:b3:a1:fc:
                    ce:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C2:B8:7E:58:0B:83:08:D1:D7:83:74:4D:F0:4B:83:BC:D1:94:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/191e156d-df47-348d-ab69-66285d1ae3de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl

            X509v3 Authority Key Identifier:
                keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.250.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:46:20:5f:3c:f8:8c:d1:99:c9:92:be:6a:2d:79:1a:e5:dd:
         3d:0b:0f:f0:7d:c0:83:fd:ea:81:f7:5b:11:0b:db:50:bc:26:
         09:6a:db:d8:cd:81:9d:e0:b1:a9:21:d7:ba:c7:99:e2:0a:61:
         97:91:46:54:00:b6:67:86:51:f7:f8:62:1d:25:eb:67:c7:0d:
         ca:12:90:18:85:3a:d3:ea:66:b4:f6:50:00:11:e4:34:86:3e:
         8b:e4:16:b0:33:77:eb:a5:bf:8a:d6:0e:36:24:42:6a:55:f5:
         24:5a:7e:ea:fc:f9:45:49:1c:10:d7:4b:69:1d:fb:d9:77:82:
         51:6f:3e:58:8d:81:d8:ee:70:c4:8f:73:de:1c:73:1e:d0:ce:
         d0:ab:8f:61:1c:6f:af:19:40:01:fb:2c:b5:9f:3b:9e:15:c3:
         ce:0a:bc:b6:c8:ef:c4:7d:15:dd:e7:d4:5e:20:8d:c0:3d:16:
         ae:6c:f0:0a:8d:cb:fc:7a:32:14:91:6e:ff:c1:3f:c6:3b:a0:
         3d:13:f7:f3:08:a5:1a:a3:ba:08:2d:bf:fe:76:b8:91:67:02:
         6d:ea:c3:a1:e3:f0:61:d9:9f:df:b8:39:73:32:94:83:5b:b4:
         72:c3:49:63:08:4e:f6:32:ca:d2:f0:03:62:c4:ff:f4:f2:45:
         6e:ff:f8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:36:48 2026 by rpki-client