Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/229e87d4-47a8-3f43-b4ff-059cc7140be1.roa
File:                     229e87d4-47a8-3f43-b4ff-059cc7140be1.roa (raw, json)
Hash identifier:          0fWQPvhgPykxPUSDLcRoFinnYNj3fU4Zg1kq0NTh1x0=
Subject key identifier:   C6:09:A3:68:A8:91:59:66:34:07:2A:78:FF:D4:63:D2:5F:C0:54:C5
Certificate issuer:       /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
Certificate serial:       010D0C9F4328584ED861DDD16E3C4E73D14E05E0
Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/229e87d4-47a8-3f43-b4ff-059cc7140be1.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     13984
IP address blocks:        162.217.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:61:dd:d1:6e:3c:4e:73:d1:4e:05:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=37185f8a-b6f8-40af-8c81-e24f04520d96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:5c:34:c1:b5:09:8b:ec:91:97:82:69:a8:d0:
                    e3:92:45:ff:72:a5:86:71:06:33:d5:56:29:b1:c6:
                    e5:fb:c6:49:5d:73:54:79:39:6b:0e:52:a6:84:08:
                    c1:2c:85:89:b1:38:be:64:92:6f:b1:01:f4:bc:80:
                    7d:77:4b:a1:32:dd:13:a2:8d:5a:47:b4:f7:5c:0b:
                    a9:7a:be:db:54:92:10:f5:ec:74:3c:b9:5a:30:8c:
                    41:bc:19:15:19:dd:a2:be:26:a4:d2:47:a6:69:70:
                    62:1d:f8:66:1a:27:a1:05:0e:2d:6b:8e:1d:d0:e8:
                    82:8e:89:97:9e:89:6e:7d:9f:a7:61:97:40:13:a6:
                    79:bf:3e:a9:ff:bc:a8:d1:6e:17:8a:91:a3:1b:cc:
                    60:f8:90:41:49:6d:c2:fe:de:25:e9:5d:16:64:43:
                    cb:e5:2c:3f:04:2a:11:c1:3c:f9:65:ca:8f:d6:4b:
                    91:d4:9d:08:65:ec:0e:ff:65:ad:82:e0:18:2f:0b:
                    99:f5:ee:38:b5:f4:87:1e:41:57:ce:77:b5:9c:2f:
                    95:f0:fb:b2:a8:6a:d7:85:74:24:dd:c7:62:ff:27:
                    c7:45:ae:d8:d1:c5:1f:5f:38:01:81:01:2f:74:cb:
                    35:1e:f4:69:51:76:6f:f0:69:c5:5a:c4:05:b1:49:
                    be:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:09:A3:68:A8:91:59:66:34:07:2A:78:FF:D4:63:D2:5F:C0:54:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/229e87d4-47a8-3f43-b4ff-059cc7140be1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.217.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:fc:51:0c:66:f4:ab:9a:82:cc:89:ea:64:43:20:87:33:53:
         55:c8:5a:c2:2e:a4:15:83:4b:fe:e2:70:35:e3:ca:3f:07:c6:
         b5:ff:4f:41:5d:ea:d0:cf:a1:61:ed:e4:ec:9b:67:d3:cf:40:
         02:75:29:47:66:2d:58:50:cd:d5:03:69:cf:e7:ff:b0:49:fe:
         c6:b7:f4:08:c6:ae:c7:c7:a7:cf:70:47:21:ad:ce:16:f0:ef:
         c7:85:54:26:30:8d:0e:2f:c1:cb:26:89:48:eb:93:33:cd:5a:
         35:60:be:b5:6d:36:82:d4:ea:23:90:ac:3b:b3:82:0e:a7:0a:
         73:a3:f0:ef:21:78:72:4b:46:9f:d7:aa:6d:d2:67:b2:58:e9:
         01:47:5e:47:88:41:b7:c6:3c:46:03:20:f4:21:f8:6d:bd:0e:
         e5:4d:f8:7b:de:34:2f:7d:40:a1:fe:8d:d4:27:cd:fa:38:dc:
         09:26:9c:20:04:b1:c3:d9:b9:0a:5a:4b:ac:82:0a:ad:39:04:
         de:f7:d2:bf:bc:87:07:5d:34:a4:d1:bf:0a:a8:1a:eb:0e:80:
         0a:3a:a8:52:ef:b6:56:24:e2:a0:74:02:06:a8:07:f6:33:9d:
         85:be:df:8b:46:df:3d:9e:d8:fb:59:71:a1:20:44:40:49:96:
         82:73:ba:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:36:37 2026 by rpki-client