Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/426993f6-a616-4de1-b0a2-1d93fc1b96f6/9537834e-076a-30ef-b929-954f1f593c2b.roa
File:                     9537834e-076a-30ef-b929-954f1f593c2b.roa (raw, json)
Hash identifier:          5W0czsDC2PQTW2HmhrAt9S6VGwC8fbOKivolTs7sA9U=
Subject key identifier:   A4:0B:CA:D3:27:4B:D7:1A:D3:1E:28:15:D0:27:9D:06:C6:A8:63:E7
Certificate issuer:       /CN=426993f6-a616-4de1-b0a2-1d93fc1b96f6
Certificate serial:       010D0C9F4328584F5E62E081CC464D995DCED000
Authority key identifier: 89:25:50:D1:19:5A:3B:AB:4A:5E:E1:C7:22:B0:6C:AB:47:68:E2:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/426993f6-a616-4de1-b0a2-1d93fc1b96f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/426993f6-a616-4de1-b0a2-1d93fc1b96f6/9537834e-076a-30ef-b929-954f1f593c2b.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     10753
IP address blocks:        162.251.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/426993f6-a616-4de1-b0a2-1d93fc1b96f6/426993f6-a616-4de1-b0a2-1d93fc1b96f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/426993f6-a616-4de1-b0a2-1d93fc1b96f6/426993f6-a616-4de1-b0a2-1d93fc1b96f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/426993f6-a616-4de1-b0a2-1d93fc1b96f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:e0:81:cc:46:4d:99:5d:ce:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=426993f6-a616-4de1-b0a2-1d93fc1b96f6
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=d679f6ff-c5ba-40ba-9d50-223e1ae64cc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:67:1c:69:ff:a5:d6:b8:2a:f4:5c:6e:fc:8f:
                    bd:eb:87:8b:4d:c5:61:82:6e:d4:ca:2a:08:b2:55:
                    f0:c0:57:e1:77:a3:53:b4:67:e1:18:7d:af:ba:11:
                    60:3e:42:a9:5a:8f:a8:75:67:7c:eb:a4:d6:fa:04:
                    6b:4b:32:65:80:16:ff:41:1e:ff:27:7c:d1:3d:29:
                    9b:53:08:ee:90:6f:3e:ec:29:9c:33:17:8b:44:42:
                    28:24:db:04:3f:75:b5:1d:f9:81:45:39:8d:98:79:
                    05:46:6a:a2:72:74:64:90:8d:ef:ab:3a:b5:4a:2e:
                    2b:b4:55:93:ca:71:7d:38:ad:71:ac:65:cf:5b:5a:
                    1b:6d:2c:f0:3b:f3:1f:96:3b:40:77:ae:56:19:f4:
                    27:c3:08:7a:a7:45:eb:2c:c6:85:a3:0b:f9:61:63:
                    48:f7:6a:5f:8f:49:41:40:a3:42:1e:93:e8:42:5e:
                    2d:a7:9c:c1:d5:b3:4a:ce:64:5b:2b:7d:33:40:68:
                    fe:05:fd:19:55:6d:8f:59:8d:e3:c5:2a:9d:f8:89:
                    2c:57:c1:7a:5f:f2:53:32:8b:81:4a:38:0b:16:2c:
                    32:e9:bc:b0:13:c8:69:af:33:80:f6:fa:ff:8a:6d:
                    d0:f5:43:f9:dd:c7:4c:24:0a:2b:e5:4c:ca:99:be:
                    23:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:0B:CA:D3:27:4B:D7:1A:D3:1E:28:15:D0:27:9D:06:C6:A8:63:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/426993f6-a616-4de1-b0a2-1d93fc1b96f6/9537834e-076a-30ef-b929-954f1f593c2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/426993f6-a616-4de1-b0a2-1d93fc1b96f6/426993f6-a616-4de1-b0a2-1d93fc1b96f6.crl

            X509v3 Authority Key Identifier:
                keyid:89:25:50:D1:19:5A:3B:AB:4A:5E:E1:C7:22:B0:6C:AB:47:68:E2:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/426993f6-a616-4de1-b0a2-1d93fc1b96f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.251.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:5e:61:31:36:61:a9:46:93:23:c1:25:c0:ce:c8:1c:79:5d:
         bb:07:6a:b0:04:3f:a2:83:7a:32:9c:1a:6e:52:6e:31:ec:68:
         52:79:4e:fd:64:7d:52:4e:a1:27:17:2e:da:01:80:07:ba:18:
         dc:fd:7a:a8:07:11:1b:b5:26:7c:4e:bc:d2:11:ce:49:0b:05:
         26:f6:e4:91:a1:c4:21:d1:7a:80:d8:ac:39:30:56:ba:ff:93:
         4f:f5:49:62:5d:fa:b4:96:ba:57:f7:8d:62:d4:16:eb:93:79:
         6e:de:a2:9b:f7:04:cd:db:44:d0:90:71:94:50:74:35:b2:40:
         14:c3:26:0c:e5:ec:c6:0e:62:b5:55:8a:64:8c:61:f9:c6:66:
         9d:52:05:29:2b:a4:a1:8f:12:36:99:9d:43:e8:a6:1c:2f:f4:
         92:4c:ab:b9:9b:87:a2:a2:7d:01:46:35:2f:01:30:b7:13:51:
         c6:49:ed:94:c9:1b:25:fb:4b:73:a9:34:2f:7d:51:31:da:07:
         90:b4:18:15:77:5e:b1:71:42:69:3d:1a:4f:d8:f2:f8:b4:4d:
         b7:40:56:1f:1c:da:58:60:da:34:ad:53:e3:1b:b2:44:c6:2a:
         40:18:ad:2f:34:92:85:0b:40:fa:a8:10:58:13:44:e6:0d:97:
         79:fb:a5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:23:28 2026 by rpki-client