Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169/94af5670-3961-37dd-950d-c6902120df40.roa
File:                     94af5670-3961-37dd-950d-c6902120df40.roa (raw, json)
Hash identifier:          hnc0DFOf3gmzwQTZMrRJuOun0TQR9PlWq1/MqXfuWCQ=
Subject key identifier:   32:16:61:91:A4:07:4B:D9:92:59:A3:19:42:01:80:DA:E6:DC:1A:56
Certificate issuer:       /CN=e4877b41-a7e3-491a-a87e-56a8cf46d169
Certificate serial:       010D0C9F4328584F7782E8273A8A5D72FBAB7B40
Authority key identifier: 79:4F:EC:F4:5F:EC:2D:CF:3D:FC:8E:E4:60:BF:D0:94:46:D5:26:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169/94af5670-3961-37dd-950d-c6902120df40.roa
Signing time:             Sun 11 Oct 2026 13:00:12 +0000
ROA not before:           Sun 11 Oct 2026 13:00:12 +0000
ROA not after:            Sat 09 Jan 2027 14:00:12 +0000
asID:                     26269
IP address blocks:        162.216.232.0/22 maxlen: 24
                          173.45.176.0/20 maxlen: 24
                          198.135.144.0/21 maxlen: 24
                          199.58.144.0/22 maxlen: 24
                          199.241.220.0/22 maxlen: 24
                          2602:ff89::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169/e4877b41-a7e3-491a-a87e-56a8cf46d169.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169/e4877b41-a7e3-491a-a87e-56a8cf46d169.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:77:82:e8:27:3a:8a:5d:72:fb:ab:7b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4877b41-a7e3-491a-a87e-56a8cf46d169
        Validity
            Not Before: Oct 11 13:00:12 2026 GMT
            Not After : Jan  9 14:00:12 2027 GMT
        Subject: CN=3fd51cde-8c38-4431-8cfa-b93a040d7920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:af:ae:ce:54:a1:e4:dd:38:9e:2b:ae:51:71:
                    a4:ee:1f:8e:78:6f:cc:0e:3a:0c:ca:32:c2:89:78:
                    36:ed:fb:b3:21:b4:59:ef:a8:aa:1e:01:d0:b7:1a:
                    35:2e:ee:c8:b8:81:91:21:d6:ab:bf:43:4f:08:ea:
                    59:44:ce:42:56:8c:3a:70:64:47:4c:b4:b0:d2:b8:
                    c3:eb:9a:e4:4e:6e:97:05:f4:d7:d0:82:bc:b9:16:
                    80:af:ef:0a:91:c0:65:fe:80:e5:0b:3b:00:9a:25:
                    63:71:07:6c:99:ea:a1:a1:90:e7:eb:5b:6f:23:b4:
                    c2:de:c4:a8:09:25:90:44:1d:d3:d9:2b:98:c6:81:
                    cd:8c:85:0f:2b:ed:48:bd:d7:42:db:14:a4:84:45:
                    07:04:4a:3e:05:42:b0:4d:74:fe:a4:6d:9c:62:f5:
                    2c:25:21:db:37:f4:1b:04:fa:47:70:64:fd:83:7e:
                    f9:a6:48:ca:e2:b6:43:96:77:eb:5b:75:45:66:c6:
                    b8:18:7e:a4:0a:5d:3f:22:f1:9d:02:5a:19:43:12:
                    b8:c5:51:6a:41:50:ba:32:d3:fd:87:71:a3:76:96:
                    52:52:87:ac:0c:0e:43:f3:5a:cb:29:e0:1c:76:b1:
                    3a:d4:6e:43:b2:3e:1d:57:3e:1e:8f:bd:3f:ac:e7:
                    0f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:16:61:91:A4:07:4B:D9:92:59:A3:19:42:01:80:DA:E6:DC:1A:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169/94af5670-3961-37dd-950d-c6902120df40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169/e4877b41-a7e3-491a-a87e-56a8cf46d169.crl

            X509v3 Authority Key Identifier:
                keyid:79:4F:EC:F4:5F:EC:2D:CF:3D:FC:8E:E4:60:BF:D0:94:46:D5:26:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.216.232.0/22
                  173.45.176.0/20
                  198.135.144.0/21
                  199.58.144.0/22
                  199.241.220.0/22
                IPv6:
                  2602:ff89::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:06:ef:ce:5d:6b:b6:d1:23:44:5b:38:86:50:cf:f6:30:ef:
         76:df:d0:00:cd:3e:16:b1:35:f2:c7:15:35:8b:9c:cf:ce:24:
         12:c4:f1:b9:25:21:ca:80:37:84:fe:4f:cb:83:2e:43:b4:6e:
         5c:bf:14:1c:bb:10:e2:86:fe:ac:18:be:ba:aa:a4:7b:67:46:
         d6:97:84:d6:54:80:71:26:c9:9d:0c:4a:29:25:12:11:dd:82:
         41:48:b8:fb:5c:66:93:d2:c7:8b:30:3e:2b:1c:b8:46:c0:22:
         d1:b3:08:1d:2a:41:fb:b8:bd:c6:c9:c4:f6:54:01:25:fd:8d:
         61:26:cc:e1:2e:2d:5e:ca:78:b7:db:58:36:74:38:bb:eb:46:
         80:93:ac:86:28:e2:18:1d:85:d4:ce:93:ad:82:8c:d6:06:a6:
         c8:c9:fa:39:d4:46:c8:9b:16:b4:b7:fb:8d:98:ed:f4:e3:b4:
         9d:93:0d:3a:f1:a1:69:cc:c7:1e:67:ce:b8:67:1b:9d:ff:b0:
         bc:35:74:d7:ff:5c:a1:20:64:e9:e1:f4:c8:cb:86:fb:bd:7c:
         d0:b8:79:1e:db:c8:42:d3:f0:58:88:77:2e:e1:64:8e:97:65:
         e0:72:74:29:99:56:7d:7a:1c:a0:27:08:99:bd:24:92:f0:0a:
         d6:ce:83:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 18:01:14 2026 by rpki-client