Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9499abcd-832b-4ba8-80ca-4e0a64b9c987/fd359376-0ea5-306b-9fc2-05828edfc15d.roa
File:                     fd359376-0ea5-306b-9fc2-05828edfc15d.roa (raw, json)
Hash identifier:          rjF1ehWE37IbRJ1VZcp+ECSMLl2V3J4DxqWBw1yDcvQ=
Subject key identifier:   15:97:B3:A3:3A:61:40:17:8E:FF:FA:73:97:4D:D8:F4:08:12:EB:77
Certificate issuer:       /CN=9499abcd-832b-4ba8-80ca-4e0a64b9c987
Certificate serial:       010D0C9F4328584E274EAD30910942A92CE07DC0
Authority key identifier: EA:46:39:64:C9:E9:71:57:C8:FF:5B:E1:7F:61:67:66:71:9F:EA:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9499abcd-832b-4ba8-80ca-4e0a64b9c987.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9499abcd-832b-4ba8-80ca-4e0a64b9c987/fd359376-0ea5-306b-9fc2-05828edfc15d.roa
Signing time:             Sat 13 Jun 2026 02:43:34 +0000
ROA not before:           Sat 13 Jun 2026 02:43:34 +0000
ROA not after:            Fri 11 Sep 2026 02:43:34 +0000
asID:                     13896
IP address blocks:        162.223.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9499abcd-832b-4ba8-80ca-4e0a64b9c987/9499abcd-832b-4ba8-80ca-4e0a64b9c987.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9499abcd-832b-4ba8-80ca-4e0a64b9c987/9499abcd-832b-4ba8-80ca-4e0a64b9c987.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9499abcd-832b-4ba8-80ca-4e0a64b9c987.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:27:4e:ad:30:91:09:42:a9:2c:e0:7d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9499abcd-832b-4ba8-80ca-4e0a64b9c987
        Validity
            Not Before: Jun 13 02:43:34 2026 GMT
            Not After : Sep 11 02:43:34 2026 GMT
        Subject: CN=d9936cf8-ebfd-479b-88d8-5d4f1eda5914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:92:f9:cd:9d:0b:04:29:b8:8f:a6:5c:8b:79:
                    52:a9:43:b9:a2:4f:fa:30:2a:86:0b:e6:e1:ba:ac:
                    60:df:0d:8e:b1:fd:a3:70:97:65:c5:60:5e:f2:04:
                    54:a9:4b:7b:62:6d:5f:ae:43:1d:65:83:ba:e0:2a:
                    94:dd:33:f7:48:34:13:94:a7:61:8f:c0:d3:71:af:
                    36:61:30:10:a4:5d:fc:08:a7:5b:49:61:5d:19:ca:
                    84:03:e6:00:bd:ff:cb:af:26:67:22:71:44:4e:83:
                    27:f0:d0:c3:43:28:60:17:5b:df:9a:da:ec:3e:1d:
                    2d:e5:8d:ac:83:7e:a7:82:ed:3e:93:cb:e9:f4:18:
                    17:fb:69:67:a9:c5:a1:14:0a:cb:6e:2a:cc:e4:ff:
                    d1:4e:d8:f1:e5:0c:55:2b:8f:e5:55:8c:7a:4c:78:
                    4c:30:dd:4d:f4:27:48:0e:02:83:07:a1:28:ba:58:
                    9c:7a:45:7e:37:52:0f:35:45:4e:3d:c2:d9:0c:41:
                    a6:8b:8b:dc:04:7b:7c:0b:cd:bc:8f:2c:a9:89:46:
                    40:fa:30:e2:5a:95:3d:3d:a6:88:c0:ed:4d:64:43:
                    5d:d6:5f:a4:e3:d2:05:79:f2:d9:81:d9:11:8f:68:
                    fe:5a:e1:6a:d6:04:30:fa:1e:14:d9:35:c3:da:9a:
                    d9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:97:B3:A3:3A:61:40:17:8E:FF:FA:73:97:4D:D8:F4:08:12:EB:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9499abcd-832b-4ba8-80ca-4e0a64b9c987/fd359376-0ea5-306b-9fc2-05828edfc15d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9499abcd-832b-4ba8-80ca-4e0a64b9c987/9499abcd-832b-4ba8-80ca-4e0a64b9c987.crl

            X509v3 Authority Key Identifier:
                keyid:EA:46:39:64:C9:E9:71:57:C8:FF:5B:E1:7F:61:67:66:71:9F:EA:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9499abcd-832b-4ba8-80ca-4e0a64b9c987.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.223.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:be:f3:e6:63:7b:5b:88:1a:80:2e:6b:7a:0f:82:6a:63:98:
         5d:ab:33:9b:d0:e8:1e:15:ae:f8:a9:c7:4f:db:f1:05:b1:76:
         cc:e7:e5:f9:27:61:f6:87:f8:9a:02:7b:a4:1f:0c:32:09:17:
         16:32:47:31:3d:53:95:08:81:d2:11:50:43:de:ec:72:c3:be:
         d9:22:f3:6b:62:47:4f:92:03:8a:3c:57:9f:9e:47:f4:d8:a4:
         90:cf:ee:06:6b:2f:d8:24:6a:a0:1c:fe:e1:8d:cb:58:1f:79:
         26:34:20:73:f9:6e:b0:f8:90:ae:bd:05:12:39:a4:65:22:c7:
         a2:aa:b9:5e:77:41:d8:04:74:5a:18:cf:c4:6e:b0:b5:34:34:
         76:11:c6:60:7b:76:58:19:4d:f7:2d:51:78:92:3d:a7:9f:26:
         b1:81:bc:ed:91:85:e9:5e:42:79:88:50:0a:2b:0b:4f:92:0e:
         81:df:87:81:48:35:06:38:75:e0:74:f9:b4:ac:8a:64:5a:75:
         22:e2:1c:e5:2d:05:a4:7e:25:90:a2:5f:4e:66:a8:38:91:d9:
         9d:5b:4b:58:2f:9d:22:f3:d4:14:a3:55:c0:55:cb:b3:d2:61:
         ef:86:80:a9:65:df:f9:63:aa:75:0f:b5:71:ce:88:c7:66:6e:
         c6:f4:18:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:53:42 2026 by rpki-client