Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/a6cea53f-e3ba-3661-9612-bf10c5e29067.roa
File:                     a6cea53f-e3ba-3661-9612-bf10c5e29067.roa (raw, json)
Hash identifier:          wyOVxLaO5jck/Pnyv396oY1X+nlCe1PwfwoW5qeXc9U=
Subject key identifier:   C4:70:BA:AA:E2:2D:55:1E:4B:3E:87:0D:9C:EB:7B:F5:D4:80:A6:6E
Certificate issuer:       /CN=22d0e02a-e4f0-4960-ad79-68f3b53a3861
Certificate serial:       010D0C9F4328584EA7974D7A056267B4CCE28248
Authority key identifier: 7B:AD:C0:FB:0B:DF:43:6A:C8:C8:A5:9E:5B:3D:44:12:94:A3:5C:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/a6cea53f-e3ba-3661-9612-bf10c5e29067.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     63201
IP address blocks:        148.59.214.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:4d:7a:05:62:67:b4:cc:e2:82:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d0e02a-e4f0-4960-ad79-68f3b53a3861
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=37416651-16f5-438e-8d0a-9512e0d68d5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6e:fc:7f:50:67:c1:95:cb:f8:0e:23:40:eb:
                    50:1f:85:1f:72:7d:c9:4d:e0:37:04:db:bb:9e:0b:
                    ae:da:d3:87:db:d6:28:ca:2e:c3:20:a0:62:c2:f0:
                    26:81:7b:96:d2:c6:b5:57:0f:43:7d:2f:0f:4c:88:
                    f6:11:ae:82:9c:40:09:d2:e5:ab:71:7f:e9:25:55:
                    53:e6:8f:de:b2:14:ce:99:92:ba:17:1f:09:da:d1:
                    d5:61:9d:d0:bf:cf:cb:b7:14:07:e4:03:a7:b7:e3:
                    15:0d:5d:45:04:6d:e0:1b:aa:49:36:4d:9f:73:21:
                    bd:b3:db:d2:bb:1c:05:08:4b:83:99:4d:a5:d5:ed:
                    c0:8b:e6:a5:88:f3:27:a2:2b:13:c7:6b:64:58:e8:
                    57:c8:c6:87:52:07:5f:65:85:49:59:14:4e:ca:26:
                    72:59:0f:7c:50:b3:45:59:9d:ad:4c:c3:51:c1:9e:
                    24:dc:58:1f:78:fe:df:1f:f7:88:bc:92:ab:e9:ba:
                    c4:21:46:33:57:f4:c9:d5:f8:33:26:08:6a:99:b4:
                    39:dc:63:52:bf:97:34:ed:21:cb:ef:ac:d1:71:e1:
                    29:81:d4:1b:b0:bb:03:ec:08:e3:9b:ea:b2:0e:7c:
                    24:5b:fa:6e:c0:dd:dc:61:a5:d5:d3:52:76:7f:06:
                    98:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:70:BA:AA:E2:2D:55:1E:4B:3E:87:0D:9C:EB:7B:F5:D4:80:A6:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/a6cea53f-e3ba-3661-9612-bf10c5e29067.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.crl

            X509v3 Authority Key Identifier:
                keyid:7B:AD:C0:FB:0B:DF:43:6A:C8:C8:A5:9E:5B:3D:44:12:94:A3:5C:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.214.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:75:c9:9d:80:79:c0:55:11:a8:5a:72:9f:83:88:b6:34:36:
         c5:97:0c:de:63:f5:2e:7b:ea:de:57:e8:67:d2:18:b8:bb:56:
         4a:89:17:5d:95:e6:d9:0a:5b:60:13:e5:91:a9:95:fc:40:dd:
         39:bf:aa:a7:85:41:41:69:9a:97:69:0c:b0:fd:6d:3a:f3:07:
         7f:86:4f:bc:f4:77:3c:13:86:d8:a4:80:7b:64:5c:4f:24:bf:
         de:88:8c:0f:ee:15:d0:39:cf:c0:6d:0c:9a:e6:9d:3c:da:27:
         7c:8c:d7:d0:ac:4a:17:37:4f:06:b4:12:83:bc:9b:28:83:b1:
         7a:21:7d:3b:09:0d:1c:72:2b:16:39:34:b4:ce:05:d6:f8:f9:
         9b:3f:d2:59:e6:81:c8:87:d9:1a:21:47:49:05:d4:df:81:31:
         d8:41:7a:dc:4f:a0:da:8b:de:ca:69:6d:3c:df:9c:19:50:07:
         db:85:66:4e:cd:db:2c:d8:f7:7d:7c:e7:c7:3a:22:d8:f5:f6:
         e0:0b:6a:46:75:d1:2b:e8:68:43:29:66:c2:53:42:c3:04:b4:
         2b:aa:f1:ac:3d:02:c4:53:50:79:76:fa:f7:d7:b5:35:00:13:
         49:99:27:2e:d6:45:fa:97:3c:1b:69:87:2c:e5:68:7c:ec:81:
         c5:c8:70:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:11:47 2026 by rpki-client