Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cae112c4-38cb-44c3-a8df-43152814a899/7a05c7f2-76ed-395d-942c-e90fa3848060.roa
File:                     7a05c7f2-76ed-395d-942c-e90fa3848060.roa (raw, json)
Hash identifier:          xiiySsLv5872sWgM2qz6m4gQkw/sztR/YJPvjghZlp4=
Subject key identifier:   4E:45:EF:62:64:D6:62:AE:35:BD:3B:00:68:86:6F:FC:FD:D5:F0:ED
Certificate issuer:       /CN=cae112c4-38cb-44c3-a8df-43152814a899
Certificate serial:       010D0C9F4328584E23D99855FBFB563D78870E40
Authority key identifier: 8D:FB:2B:76:55:E7:4F:03:1A:41:E5:F6:06:91:57:0A:CC:A4:F2:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cae112c4-38cb-44c3-a8df-43152814a899.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cae112c4-38cb-44c3-a8df-43152814a899/7a05c7f2-76ed-395d-942c-e90fa3848060.roa
Signing time:             Thu 11 Jun 2026 21:00:11 +0000
ROA not before:           Thu 11 Jun 2026 21:00:11 +0000
ROA not after:            Wed 09 Sep 2026 21:00:11 +0000
asID:                     63019
IP address blocks:        162.251.192.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cae112c4-38cb-44c3-a8df-43152814a899/cae112c4-38cb-44c3-a8df-43152814a899.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cae112c4-38cb-44c3-a8df-43152814a899/cae112c4-38cb-44c3-a8df-43152814a899.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cae112c4-38cb-44c3-a8df-43152814a899.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:23:d9:98:55:fb:fb:56:3d:78:87:0e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cae112c4-38cb-44c3-a8df-43152814a899
        Validity
            Not Before: Jun 11 21:00:11 2026 GMT
            Not After : Sep  9 21:00:11 2026 GMT
        Subject: CN=04a9e890-a7fd-4af3-8221-ae2df54165a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7b:fe:4f:e8:7e:d9:f1:42:7b:b1:5b:94:75:
                    73:a9:0a:65:81:85:96:09:0a:ac:28:cd:39:cd:b2:
                    63:ab:2a:42:b4:44:c7:87:7c:5b:60:de:f2:15:bc:
                    ba:6d:b1:27:ff:eb:02:5c:2f:cc:a2:25:59:22:c9:
                    66:82:a0:92:f2:3e:ca:ca:69:de:0a:7c:c0:95:91:
                    db:5f:6f:05:91:a4:e0:fd:70:3f:48:ea:2a:3c:0b:
                    47:dc:02:78:ab:6f:bc:35:b6:d0:b1:87:81:39:7b:
                    42:7e:c1:7b:70:01:60:c7:29:5d:30:46:09:7b:83:
                    0b:a2:9b:f3:b9:1d:0f:66:70:1d:76:72:de:e8:4a:
                    51:f8:47:11:bc:12:c7:57:ac:22:ca:c6:f2:17:2c:
                    1a:47:ca:b6:de:3d:de:c7:a2:9b:f2:58:45:88:0b:
                    23:bc:10:10:2e:87:8d:c4:f6:0a:30:ca:27:18:9e:
                    c5:82:b9:31:0b:8e:81:74:a3:4a:03:21:b3:02:0a:
                    a2:7f:b4:52:c4:57:54:95:da:7a:98:9f:c7:32:01:
                    27:67:4a:4c:84:a3:96:51:db:cc:bd:fc:88:76:eb:
                    52:1f:38:2a:6f:d4:a9:7e:d7:ab:b3:e6:42:c5:3e:
                    ec:62:7f:b4:66:a7:26:73:47:93:34:49:10:29:00:
                    6a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:45:EF:62:64:D6:62:AE:35:BD:3B:00:68:86:6F:FC:FD:D5:F0:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cae112c4-38cb-44c3-a8df-43152814a899/7a05c7f2-76ed-395d-942c-e90fa3848060.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cae112c4-38cb-44c3-a8df-43152814a899/cae112c4-38cb-44c3-a8df-43152814a899.crl

            X509v3 Authority Key Identifier:
                keyid:8D:FB:2B:76:55:E7:4F:03:1A:41:E5:F6:06:91:57:0A:CC:A4:F2:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cae112c4-38cb-44c3-a8df-43152814a899.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.251.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:30:84:de:b1:eb:a7:22:98:a6:70:4f:c6:27:ef:5e:39:2b:
         41:d1:ce:9a:06:50:51:70:a0:d8:33:c7:26:7a:8b:45:b2:bf:
         9d:1a:7a:71:43:89:82:90:5f:e3:7a:db:3f:4d:45:5a:a6:e9:
         75:e9:ab:06:79:0b:4d:9b:95:a9:ec:71:33:ed:e8:dc:00:3f:
         4a:6e:85:ad:9b:d5:ad:89:22:71:e3:7b:a1:3d:ea:1f:24:3c:
         2c:4c:e5:76:2b:fc:02:a4:33:bb:84:d2:26:1a:98:41:5b:23:
         2f:32:4b:e9:32:40:6d:5c:14:00:68:df:0b:d4:b4:9e:ea:0e:
         89:51:91:b4:2d:77:e5:12:a5:4a:5b:3c:dc:4e:c8:5a:5e:b1:
         2e:35:ab:c6:d4:a2:43:5b:9c:d6:22:92:b0:23:e9:64:02:a2:
         bf:4f:9c:ec:33:c2:af:ae:1b:bc:4c:ef:31:d8:f8:59:a2:eb:
         b3:77:f8:0d:9b:c7:f2:72:bd:09:24:74:00:7e:d7:18:13:c4:
         b8:8e:8c:b3:36:c1:be:bc:21:e6:17:7c:db:12:bc:ba:90:03:
         72:f7:7f:6a:47:29:77:39:99:01:14:91:d0:5e:7b:10:62:ff:
         e1:41:49:4b:51:36:44:b5:f4:ea:2d:bf:b9:3d:14:ae:d1:92:
         dc:49:3a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:21:33 2026 by rpki-client