Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ceb51b92-f7a1-3375-acfb-5827bfd7821d.roa
File:                     ceb51b92-f7a1-3375-acfb-5827bfd7821d.roa (raw, json)
Hash identifier:          SiLyW0Sa+14gvu8XF0+J+4QFPwITmRxzmlHdfWQ0bL4=
Subject key identifier:   4A:88:E2:52:AC:37:80:62:B0:95:F7:DA:AF:30:E2:28:0E:23:A4:58
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F497839AAAA1657685FC1D600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ceb51b92-f7a1-3375-acfb-5827bfd7821d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7725
IP address blocks:        162.148.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:78:39:aa:aa:16:57:68:5f:c1:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=931117d7-6043-4b04-be0d-74a35e828a43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8c:c0:54:66:6a:fe:36:9a:d8:d5:73:16:55:
                    d2:d9:8a:9d:bc:dc:81:e8:32:9f:53:ab:6e:7c:c6:
                    81:c9:ed:d8:0c:10:75:90:cf:fc:a4:db:b9:ae:6f:
                    67:f5:05:7e:5f:b5:e0:7e:76:01:4b:a7:f8:12:87:
                    b9:8a:7a:e6:b2:ef:ec:0f:09:e9:5a:4d:dc:f0:10:
                    b4:c3:d2:0d:30:79:ab:33:1f:01:43:4d:1b:86:cb:
                    c2:f6:3a:ed:ea:ad:14:70:eb:6f:9c:e3:8e:d8:d7:
                    66:eb:7f:fa:ac:e0:0b:b1:76:97:86:9f:be:ab:57:
                    c8:49:24:31:6e:08:db:15:b8:46:33:4e:6f:7c:b2:
                    e0:12:fc:ec:62:46:7d:e5:cf:3c:ca:db:6c:df:30:
                    ce:4c:fb:29:f2:a9:06:38:ce:2e:aa:e9:16:66:ea:
                    aa:25:8b:83:6f:f1:30:d6:52:f2:37:60:08:f4:e0:
                    56:ad:57:96:84:0c:e7:9f:e1:18:d3:1a:0c:ab:01:
                    9b:a4:1d:3a:3d:70:22:90:70:90:08:6f:c5:f7:a8:
                    a4:0e:9e:cb:f7:e8:5d:9e:f4:27:46:48:2f:d2:8f:
                    b1:78:1e:4f:39:dc:f1:0b:d0:99:05:ac:97:13:5b:
                    6e:1b:fc:77:1f:84:7f:cf:15:1f:ed:9b:17:35:4f:
                    92:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:88:E2:52:AC:37:80:62:B0:95:F7:DA:AF:30:E2:28:0E:23:A4:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ceb51b92-f7a1-3375-acfb-5827bfd7821d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.148.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:e4:42:f5:78:14:0b:a1:48:a1:ff:90:0c:b4:59:f4:a7:41:
         bd:89:66:ef:39:19:76:77:3a:cd:5c:06:c8:ea:b5:82:a7:02:
         de:c3:12:f9:09:5d:11:94:67:47:ef:e1:e2:6a:52:9b:0e:01:
         f8:0d:be:56:7b:81:e1:4b:97:28:c6:f7:38:b6:81:d2:7d:a5:
         2b:e7:59:f3:b6:b6:df:d6:c4:8d:5e:a5:6d:3d:ae:e5:6b:40:
         e3:f1:3d:00:fd:8e:30:e1:dc:24:d1:ec:5f:20:ee:fd:15:63:
         de:61:b1:07:f2:07:3e:68:7a:fc:92:d3:1f:66:ec:30:0f:97:
         57:28:1a:2d:73:ee:5d:77:8a:f2:6a:99:53:ff:35:d4:b6:ec:
         48:b9:1d:00:e5:a2:4f:69:60:eb:8a:96:67:29:a0:ac:11:5d:
         4a:f5:89:ae:a4:8b:33:70:27:12:a7:fb:29:6d:d2:db:88:80:
         f8:09:3f:64:98:86:3d:03:c3:40:9d:63:ce:01:49:6a:19:40:
         2a:92:9b:fa:d2:65:4d:01:de:c9:fe:60:01:e1:4e:9a:95:6a:
         e1:d4:69:fd:c0:e9:0b:6d:45:b0:53:ec:cb:d0:cf:5a:c4:28:
         5b:40:2e:f7:0a:6b:1f:5e:53:67:3e:6e:05:43:27:42:86:b1:
         a0:4a:87:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:32:19 2026 by rpki-client