Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/84a0a74c-cc53-3066-8960-1cddc270afad.roa
File:                     84a0a74c-cc53-3066-8960-1cddc270afad.roa (raw, json)
Hash identifier:          mVPgX6hcNu3OplBDGSRl5eKQLsLHjPnrwJ11lpo43Dg=
Subject key identifier:   8A:08:D3:7D:F9:00:D5:49:63:11:CC:78:50:6C:CA:60:F1:3F:87:51
Certificate issuer:       /CN=3779ad5d-5ca7-4c23-928f-091e0e1a3f93
Certificate serial:       010D0C9F4328584EA788D931333A5B0B8ECCD800
Authority key identifier: DD:40:58:A3:BD:22:13:B4:A1:67:C5:07:2E:03:D5:40:0B:92:1C:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/84a0a74c-cc53-3066-8960-1cddc270afad.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     62739
IP address blocks:        162.220.116.0/24 maxlen: 24
                          162.220.117.0/24 maxlen: 24
                          162.220.118.0/24 maxlen: 24
                          162.220.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/3779ad5d-5ca7-4c23-928f-091e0e1a3f93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/3779ad5d-5ca7-4c23-928f-091e0e1a3f93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:d9:31:33:3a:5b:0b:8e:cc:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3779ad5d-5ca7-4c23-928f-091e0e1a3f93
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=460401cf-4de4-4103-8535-df1550580ad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b0:47:0a:09:c2:64:c9:6d:36:79:dd:a6:ed:
                    b6:6d:a8:05:d4:bb:82:f6:0d:be:af:c6:85:c6:20:
                    4e:fd:46:da:1f:3b:5c:31:39:36:ef:09:c4:da:5e:
                    98:5b:71:8f:d2:2e:1f:e2:0d:73:e5:6d:9b:3e:ec:
                    ba:7c:4d:ee:32:36:04:08:6c:28:f6:8a:31:01:94:
                    94:e6:ae:04:b7:95:c4:73:35:01:a2:75:f2:b2:6e:
                    d4:bf:28:bf:ae:bb:6e:3f:7f:8f:ed:35:21:45:a4:
                    95:3f:11:fe:df:7d:f9:8e:a7:92:94:0c:19:09:b4:
                    f6:4c:0f:ae:4a:63:8e:48:87:0a:10:11:f0:77:ff:
                    14:0f:ad:47:24:84:73:cb:6b:df:6f:19:eb:23:48:
                    1f:0f:f9:97:71:69:6c:fa:e0:b0:f1:e5:36:90:c5:
                    ee:d0:f5:e3:e7:86:42:17:26:a7:93:4d:58:8a:a3:
                    ca:2a:36:c8:81:df:36:bf:de:0e:be:c3:e8:30:ba:
                    8f:03:0a:45:e2:be:3d:b1:68:fa:03:4e:d0:77:81:
                    c5:ff:ef:5e:69:b3:36:c7:7c:31:db:df:1b:a4:f5:
                    46:02:8c:ec:78:94:9b:94:24:76:e0:8b:85:b3:80:
                    6c:87:a9:25:a9:7b:c3:c8:2d:4c:c2:2e:3f:46:d6:
                    4c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:08:D3:7D:F9:00:D5:49:63:11:CC:78:50:6C:CA:60:F1:3F:87:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/84a0a74c-cc53-3066-8960-1cddc270afad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/3779ad5d-5ca7-4c23-928f-091e0e1a3f93.crl

            X509v3 Authority Key Identifier:
                keyid:DD:40:58:A3:BD:22:13:B4:A1:67:C5:07:2E:03:D5:40:0B:92:1C:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.220.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:ef:4b:8d:c9:91:5d:53:02:ac:9a:aa:16:fd:7f:5f:64:38:
         c4:51:e9:2b:48:21:7a:9f:69:de:04:69:bd:1b:72:e1:65:f4:
         c2:1b:1e:a7:57:42:68:43:b3:3e:37:e8:f9:c8:1b:3b:4d:fb:
         45:46:22:a4:ff:4d:38:96:2a:a0:85:24:fc:dc:09:c4:ad:f4:
         a9:89:71:23:2c:d4:d6:1f:5c:a2:0e:81:47:ce:12:19:de:71:
         71:76:85:32:4b:15:17:79:8a:24:a6:89:06:ba:cf:3d:88:cd:
         88:6f:30:a0:fe:fb:ac:3e:65:07:cb:5c:1e:07:01:99:98:50:
         4e:db:67:71:2e:7e:5e:96:22:b6:50:c9:80:47:bf:c2:1e:34:
         d2:db:19:a1:9d:15:15:6e:2e:87:fa:dd:3f:95:9d:c8:0d:9b:
         fc:3b:08:ee:1e:50:1b:ef:61:10:95:80:7a:93:aa:32:71:67:
         0f:15:48:f2:62:21:89:7c:e2:42:44:2e:ab:42:e6:90:4c:a9:
         68:e3:11:62:7b:4c:7d:ce:16:46:14:2d:50:12:26:11:e7:98:
         52:ce:5b:48:54:a5:24:d8:bb:07:8f:dd:a3:5f:d3:10:a2:15:
         bb:01:b8:c2:b5:04:18:14:b9:1d:1f:0a:18:90:ab:1e:d5:d9:
         7d:5c:6d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 00:35:19 2026 by rpki-client