Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec62ef22-a391-4252-8d71-15d41c1c5aa8/3f6dac8f-272f-37e8-b38a-cd3178ad3546.roa
File:                     3f6dac8f-272f-37e8-b38a-cd3178ad3546.roa (raw, json)
Hash identifier:          4fjCLm1Qp/yzZjZ9oJXJ38Onw1r3epe9y5i6+z07jS4=
Subject key identifier:   CA:FD:D0:EE:BF:BC:D9:60:C3:91:1F:13:CC:1A:87:37:6D:F1:92:94
Certificate issuer:       /CN=ec62ef22-a391-4252-8d71-15d41c1c5aa8
Certificate serial:       010D0C9F4328584F2957B20BCECBD58575683000
Authority key identifier: 8A:80:1E:27:02:12:93:1C:E6:DC:FF:60:B2:DB:F9:5D:38:1F:C3:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec62ef22-a391-4252-8d71-15d41c1c5aa8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec62ef22-a391-4252-8d71-15d41c1c5aa8/3f6dac8f-272f-37e8-b38a-cd3178ad3546.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     3379
IP address blocks:        162.119.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec62ef22-a391-4252-8d71-15d41c1c5aa8/ec62ef22-a391-4252-8d71-15d41c1c5aa8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec62ef22-a391-4252-8d71-15d41c1c5aa8/ec62ef22-a391-4252-8d71-15d41c1c5aa8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec62ef22-a391-4252-8d71-15d41c1c5aa8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:b2:0b:ce:cb:d5:85:75:68:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec62ef22-a391-4252-8d71-15d41c1c5aa8
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=8c2e38c1-7886-4c11-8f76-66eaca8e9210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:23:81:62:c8:7f:39:3d:aa:d3:f8:3a:ef:60:
                    ac:9f:3a:e1:b6:91:1a:20:58:bb:67:26:64:21:6b:
                    32:f2:14:79:a6:a2:65:74:49:ed:a9:c3:18:fe:8b:
                    9d:70:ad:e2:f0:5d:27:4c:27:1c:b2:4c:95:f5:cb:
                    3f:7e:b1:91:4f:ac:fb:e9:1c:52:7e:18:53:a5:c5:
                    77:e8:5e:79:c6:31:b0:11:93:a5:47:46:20:b6:57:
                    0a:73:b6:64:26:b6:89:2e:e3:62:62:16:39:42:d8:
                    27:4d:fb:c2:bd:fd:d3:a7:2f:bd:e5:c6:38:49:ba:
                    86:13:7d:49:25:2a:3c:34:3f:4c:2d:f0:6c:f4:68:
                    f2:a3:7f:7a:49:13:9a:5b:bf:c1:55:80:a8:6d:77:
                    4a:01:43:e7:de:f4:94:3a:37:30:f4:b1:c9:51:9d:
                    0f:88:05:a3:45:0c:bc:98:23:f0:1b:93:d6:71:fc:
                    42:41:5b:43:c1:fe:20:bf:19:8a:48:97:67:80:71:
                    e6:da:65:57:c8:b5:00:7f:4e:12:79:bb:28:10:4f:
                    d9:85:c8:28:08:ab:fd:a4:ed:61:9f:9d:1a:4c:77:
                    4d:1c:41:d9:86:d5:b1:50:7c:6f:9a:86:d0:9d:2d:
                    ca:4a:b4:dc:64:3d:65:af:4a:f1:b5:33:6c:c2:bb:
                    e7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:FD:D0:EE:BF:BC:D9:60:C3:91:1F:13:CC:1A:87:37:6D:F1:92:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec62ef22-a391-4252-8d71-15d41c1c5aa8/3f6dac8f-272f-37e8-b38a-cd3178ad3546.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec62ef22-a391-4252-8d71-15d41c1c5aa8/ec62ef22-a391-4252-8d71-15d41c1c5aa8.crl

            X509v3 Authority Key Identifier:
                keyid:8A:80:1E:27:02:12:93:1C:E6:DC:FF:60:B2:DB:F9:5D:38:1F:C3:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec62ef22-a391-4252-8d71-15d41c1c5aa8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.119.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:84:52:53:8f:f8:6f:af:b2:c6:c4:c8:cd:9d:80:67:2f:4a:
         30:2f:e3:45:8d:0e:51:4d:21:15:b1:8f:eb:9f:99:22:a7:cc:
         ab:19:0d:e9:0e:c4:fa:93:f6:66:64:25:ad:a7:74:b9:72:f0:
         98:7e:3d:39:43:67:4d:28:95:c9:fd:8d:be:16:b3:6c:ce:cd:
         d1:6a:8b:a6:d4:e4:9c:47:42:32:e5:dd:55:aa:cc:d2:a8:e5:
         98:5c:d8:ec:24:10:12:3f:57:89:d9:14:ba:44:2b:54:57:9e:
         6d:64:29:c9:73:63:9f:d5:3f:05:80:65:df:0f:8b:d7:cc:f0:
         bf:15:c4:d1:34:e3:ce:93:26:bd:62:79:e0:84:01:63:63:60:
         38:6c:f9:69:75:65:eb:53:7a:08:4e:80:4a:cf:69:8e:b7:23:
         7a:f9:b9:86:96:a0:86:2a:96:cf:97:76:0f:5b:33:c6:3f:7f:
         c3:6c:1f:00:f2:99:cf:da:88:33:e9:24:83:95:0e:ce:c4:9f:
         4d:75:d2:a4:5b:40:eb:8c:b3:3c:9b:8d:42:b5:9c:18:cf:c5:
         e6:2c:e6:f4:28:f4:dd:2f:b2:0b:38:97:98:6e:2d:2e:76:0c:
         5e:2a:a4:ff:7c:37:f6:b9:7c:7d:e5:6c:80:b0:62:b1:55:10:
         c2:01:76:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 01:42:08 2026 by rpki-client