Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3/d931f223-a5e0-357c-9df4-646112c7d5fd.roa
File:                     d931f223-a5e0-357c-9df4-646112c7d5fd.roa (raw, json)
Hash identifier:          ndHq6qqXZX4fL/jq3v+ZGBGiim5z1t+yrMpVwucyyGQ=
Subject key identifier:   62:7A:EF:DD:67:7C:C5:08:E3:6E:B7:F4:D8:B0:11:01:A0:AE:BD:0E
Certificate issuer:       /CN=ecee568d-eb00-478c-b486-db3f5d62cbf3
Certificate serial:       010D0C9F4328584F4974481232A1B6E449A29600
Authority key identifier: DD:EC:C1:62:6B:16:28:4E:3F:9B:52:C6:83:04:C5:D6:75:80:A5:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3/d931f223-a5e0-357c-9df4-646112c7d5fd.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     26395
IP address blocks:        159.222.160.0/23 maxlen: 23
                          159.222.160.0/24 maxlen: 24
                          159.222.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3/ecee568d-eb00-478c-b486-db3f5d62cbf3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3/ecee568d-eb00-478c-b486-db3f5d62cbf3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:48:12:32:a1:b6:e4:49:a2:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecee568d-eb00-478c-b486-db3f5d62cbf3
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=8199cfa9-0e45-4aa9-9d65-d8e7fc3fac47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b8:68:ef:57:88:9d:90:65:39:30:92:8f:b2:
                    23:43:f6:b9:44:cb:ae:67:a4:c3:99:7f:06:32:ba:
                    0f:eb:77:80:55:49:0a:26:99:8e:c2:d0:82:de:b7:
                    6e:4c:6c:af:ab:d0:8d:31:e1:4d:80:46:ee:44:10:
                    b2:0f:62:e5:91:82:67:6f:4e:90:3d:5d:a7:fa:ff:
                    6e:f2:ab:d0:2e:a4:89:21:88:67:30:1f:b2:d2:25:
                    67:ae:14:40:c6:0d:ce:19:a9:b5:3a:e1:a3:b5:f2:
                    37:89:44:af:fb:5c:55:f6:6e:da:8e:bc:8b:9b:ec:
                    28:35:4f:28:1a:ad:96:bc:9b:3d:4c:17:3c:36:95:
                    ab:14:a3:4a:3d:9a:22:c1:9d:cc:0c:ca:b6:6e:95:
                    31:65:4b:be:d4:18:c4:8a:0e:e4:62:93:3a:65:d7:
                    da:a4:3f:cb:a8:e9:01:06:0c:49:a3:79:74:8a:f9:
                    c9:e6:d8:62:f1:77:83:26:fa:e3:49:b4:48:52:30:
                    65:5c:b2:08:2e:7d:a7:00:60:ae:08:b7:e0:82:7f:
                    af:a2:f0:72:12:2b:11:fb:9f:4e:d6:98:de:11:2f:
                    18:74:8b:82:f4:a8:de:24:cd:4d:f6:39:f4:b1:94:
                    a4:af:60:be:b7:65:62:66:30:3d:2c:38:d5:7e:f6:
                    4a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:7A:EF:DD:67:7C:C5:08:E3:6E:B7:F4:D8:B0:11:01:A0:AE:BD:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3/d931f223-a5e0-357c-9df4-646112c7d5fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3/ecee568d-eb00-478c-b486-db3f5d62cbf3.crl

            X509v3 Authority Key Identifier:
                keyid:DD:EC:C1:62:6B:16:28:4E:3F:9B:52:C6:83:04:C5:D6:75:80:A5:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.222.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:07:06:03:5f:94:ac:f2:35:4d:38:80:57:a1:de:a8:e4:3f:
         fd:c4:fd:2a:54:af:98:09:7b:fc:2f:ce:3a:d4:31:2a:d0:65:
         1b:a9:98:fd:e8:1f:34:71:ee:e5:12:0b:1a:5a:92:37:7c:d8:
         0d:55:51:06:35:4e:fb:6b:cf:3d:dc:65:a2:79:7b:8d:a3:95:
         4d:48:96:bf:5c:77:ad:d5:ab:80:37:b3:18:92:69:5b:ca:d8:
         95:92:c6:57:96:ad:95:3c:fc:bc:9d:37:f9:d3:22:c6:64:bc:
         e7:ed:b0:53:73:ba:54:36:7f:53:ef:63:36:a5:d2:07:fb:b2:
         bc:25:5a:27:64:4b:e2:65:21:43:08:d0:8f:79:39:9e:a0:3f:
         ca:3d:6d:b5:b4:b2:d7:17:c6:ad:42:6a:80:ab:d2:c3:e9:59:
         c0:de:07:24:d6:56:9c:ae:db:f8:b8:61:3d:b9:f5:75:0b:a3:
         a1:5b:43:b6:77:d9:eb:36:c3:f8:2f:3d:79:72:10:07:ce:ba:
         ce:a0:a6:40:16:91:32:17:5c:f7:ca:09:85:db:5c:2c:b4:12:
         46:51:b8:cd:71:b3:fc:c2:4b:d1:1e:c1:4b:4d:59:09:6a:22:
         04:e2:2f:dc:c3:ad:78:e0:02:82:6d:ac:37:1e:e4:aa:10:63:
         0e:58:84:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 17:24:05 2026 by rpki-client