Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec62ef22-a391-4252-8d71-15d41c1c5aa8/3f6dac8f-272f-37e8-b38a-cd3178ad3546.roa
File:                     3f6dac8f-272f-37e8-b38a-cd3178ad3546.roa (raw, json)
Hash identifier:          o+rQZfwKn1Fy+rK9ssBlzYIYu8RyN/eg7jzu0MJGjDw=
Subject key identifier:   E3:C7:E9:B9:9A:FF:96:5F:C1:20:81:C9:CD:1D:E7:74:C8:ED:AD:F2
Certificate issuer:       /CN=ec62ef22-a391-4252-8d71-15d41c1c5aa8
Certificate serial:       010D0C9F4328584E86F4EE129947AB1FA6CA6680
Authority key identifier: 8A:80:1E:27:02:12:93:1C:E6:DC:FF:60:B2:DB:F9:5D:38:1F:C3:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec62ef22-a391-4252-8d71-15d41c1c5aa8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec62ef22-a391-4252-8d71-15d41c1c5aa8/3f6dac8f-272f-37e8-b38a-cd3178ad3546.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     3379
IP address blocks:        162.119.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec62ef22-a391-4252-8d71-15d41c1c5aa8/ec62ef22-a391-4252-8d71-15d41c1c5aa8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec62ef22-a391-4252-8d71-15d41c1c5aa8/ec62ef22-a391-4252-8d71-15d41c1c5aa8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec62ef22-a391-4252-8d71-15d41c1c5aa8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f4:ee:12:99:47:ab:1f:a6:ca:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec62ef22-a391-4252-8d71-15d41c1c5aa8
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=bdb0c2a7-ed97-47b1-88d2-3af138accecf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4c:60:82:1d:04:eb:30:b1:ef:e4:da:08:da:
                    d5:ed:80:5f:f7:c3:81:1d:8a:8d:c7:0c:b4:fa:0f:
                    e9:3f:97:9c:f3:be:8e:71:74:14:a8:4b:ca:00:ee:
                    a2:87:b9:e9:50:c7:b8:d1:57:98:5b:ae:f9:c4:09:
                    f9:58:23:08:5d:6b:fe:e1:15:16:96:3d:09:9d:f4:
                    69:41:0d:9d:ec:1b:71:e7:2f:ed:85:f1:dd:1f:28:
                    4f:48:ba:8d:51:4f:8b:8c:2f:b4:f2:13:a4:50:e2:
                    93:7a:50:83:c3:72:25:c6:7a:f9:76:ad:e3:88:fc:
                    92:17:b7:94:b1:4b:d4:7d:6c:90:b4:b4:98:ce:36:
                    fc:12:d5:ee:44:c4:19:c2:16:a1:0b:db:c4:42:ac:
                    82:a6:2d:55:2d:ff:52:11:96:37:cc:bc:7b:00:77:
                    58:d0:34:f2:c0:96:8e:12:b5:bf:13:89:9a:9f:ee:
                    ed:bd:96:10:34:ca:72:7c:be:61:fd:d1:bb:34:89:
                    36:04:e8:b3:1a:1b:38:e7:60:ec:75:26:a8:1c:87:
                    18:4a:86:ee:c2:20:5b:29:c0:73:96:e5:8d:ad:bd:
                    c9:44:f4:9b:02:2a:17:6a:d0:53:5c:ff:97:24:fc:
                    fd:fb:4c:82:d6:dc:a2:ef:ea:75:a5:2a:84:ae:4a:
                    79:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C7:E9:B9:9A:FF:96:5F:C1:20:81:C9:CD:1D:E7:74:C8:ED:AD:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec62ef22-a391-4252-8d71-15d41c1c5aa8/3f6dac8f-272f-37e8-b38a-cd3178ad3546.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec62ef22-a391-4252-8d71-15d41c1c5aa8/ec62ef22-a391-4252-8d71-15d41c1c5aa8.crl

            X509v3 Authority Key Identifier:
                keyid:8A:80:1E:27:02:12:93:1C:E6:DC:FF:60:B2:DB:F9:5D:38:1F:C3:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec62ef22-a391-4252-8d71-15d41c1c5aa8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.119.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:31:e5:34:29:fc:21:c9:a0:1d:2a:bc:ab:76:34:22:97:7b:
         bf:94:0f:76:e6:a6:b8:fe:48:f6:ad:ca:79:bc:c2:76:02:11:
         9c:be:ec:b0:21:ce:71:be:4d:fe:47:a1:c0:2a:6c:1e:f1:92:
         43:d6:23:9c:3e:f3:fe:65:fb:53:36:c0:5b:5c:b4:86:03:2d:
         63:bb:ca:6d:b2:ff:01:4f:22:46:79:7d:79:96:30:9f:2d:e3:
         4f:93:72:22:ac:fd:81:11:84:c3:80:49:47:57:76:70:a5:79:
         f8:64:fd:78:f4:21:78:ef:2a:4e:dc:92:ce:8a:0b:c5:a4:9b:
         a0:7c:8e:6b:dc:07:d9:e7:4f:1f:96:ad:fb:28:be:40:3a:1d:
         48:77:14:e9:ec:5a:b7:44:0e:11:79:d4:4d:40:91:9d:68:95:
         24:a2:b6:e5:e6:d2:f5:a9:7d:b3:ec:a4:33:f1:c6:bf:e5:ef:
         96:46:8b:da:8e:13:28:04:f6:50:b1:6c:34:d5:08:d2:18:51:
         8f:45:03:94:d1:67:3b:09:6e:ba:6e:36:eb:69:90:2a:b5:55:
         e2:eb:c3:ca:fd:db:27:6f:63:93:5b:a0:8e:ad:fa:24:82:82:
         8f:44:ea:3b:79:22:20:24:61:9b:7c:d3:8a:5a:52:fc:0b:9b:
         6b:2c:e2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:07:14 2026 by rpki-client