Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/46c29cbc-23d5-35a9-8cf2-5b2f02553065.roa
File:                     46c29cbc-23d5-35a9-8cf2-5b2f02553065.roa (raw, json)
Hash identifier:          eOwqVfDr4EZVyVahuvmzZV4YLtPOf7m9IjHxyqg49AE=
Subject key identifier:   6A:46:DD:4A:57:06:49:96:40:32:B9:CD:16:61:53:35:F9:FF:AF:11
Certificate issuer:       /CN=5410af3b-1667-4dd4-9260-1835889ae3a3
Certificate serial:       010D0C9F4328584D492A5892BE2C389882E567C0
Authority key identifier: B8:7F:76:B3:F1:DA:95:1F:69:6F:EC:30:F0:FB:FA:25:16:48:C1:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/46c29cbc-23d5-35a9-8cf2-5b2f02553065.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     14618
IP address blocks:        162.247.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/5410af3b-1667-4dd4-9260-1835889ae3a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/5410af3b-1667-4dd4-9260-1835889ae3a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:58:92:be:2c:38:98:82:e5:67:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5410af3b-1667-4dd4-9260-1835889ae3a3
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=249b8a6c-5df1-4d81-8673-99f537f0cb98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:db:7d:c4:cf:3a:97:7d:4a:f6:cb:9a:f6:9b:
                    16:fa:a0:01:cd:4a:93:af:eb:42:ed:b0:90:cb:40:
                    44:a5:e2:08:b9:02:ba:86:98:a4:50:d1:b6:4c:58:
                    92:41:1e:04:46:17:71:9d:48:71:35:c7:84:85:97:
                    e3:0e:8f:b0:92:ba:8d:b2:00:7f:2d:8c:ce:b3:c6:
                    46:fb:ee:fb:64:7e:3d:fa:b1:3e:d3:3b:ee:75:9f:
                    90:24:da:64:a5:09:1c:2c:b6:21:6c:13:2f:3b:c5:
                    a1:32:01:fe:74:78:a8:ae:19:95:dc:6c:f0:6f:61:
                    8a:5c:2e:47:07:58:6c:ac:ae:15:cb:b2:f8:77:0a:
                    93:88:0d:35:0a:20:3b:d2:af:c9:8d:87:8f:62:54:
                    ec:d9:62:d9:f8:77:a3:59:3b:de:ae:bc:e1:69:a8:
                    a4:4e:b8:32:c7:62:09:e7:a2:32:f7:7c:de:9f:c2:
                    e5:c5:ac:cb:c7:0b:02:31:71:e1:03:85:61:74:54:
                    e4:53:46:07:98:7c:f2:50:4e:81:b7:5a:36:4b:ab:
                    e4:81:46:f3:82:9d:ad:60:52:4a:fc:c3:da:26:cd:
                    8e:ac:3e:0a:1b:9d:4f:33:14:b4:17:ad:2e:d9:01:
                    b5:3c:a7:9a:35:da:86:74:88:5c:2d:26:d7:7e:3d:
                    12:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:46:DD:4A:57:06:49:96:40:32:B9:CD:16:61:53:35:F9:FF:AF:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/46c29cbc-23d5-35a9-8cf2-5b2f02553065.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/5410af3b-1667-4dd4-9260-1835889ae3a3.crl

            X509v3 Authority Key Identifier:
                keyid:B8:7F:76:B3:F1:DA:95:1F:69:6F:EC:30:F0:FB:FA:25:16:48:C1:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.247.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:6e:73:3e:83:f9:0e:af:09:a3:25:4e:5d:b7:2d:10:87:c7:
         77:26:c3:f8:36:c8:18:e4:92:80:07:8e:fb:45:ec:5f:fd:78:
         90:b1:3a:7e:48:ab:8e:10:6a:4d:3a:10:b7:70:ec:9c:f1:1c:
         15:05:27:60:3a:38:8b:b0:53:fd:eb:18:15:18:3a:41:de:1f:
         dc:8b:00:7d:b3:8d:40:f3:44:d7:b5:cf:d8:95:47:5a:4f:52:
         45:f6:57:e5:dd:5a:5b:c7:53:75:a4:e1:40:24:20:73:61:ec:
         d3:9d:7e:88:82:58:72:8e:85:83:16:ea:c5:9a:2a:2e:8d:3a:
         fd:df:23:50:56:19:c3:4a:00:65:df:0a:e4:c1:6e:1c:19:56:
         8c:06:7d:03:03:31:09:98:dc:04:ff:18:c2:3c:f0:3c:52:a9:
         8c:84:36:da:3a:37:f9:f3:33:77:0d:64:77:16:92:25:45:0c:
         ae:a6:35:6f:a1:cf:27:99:57:c5:11:16:cf:ae:65:4b:a1:a4:
         80:e6:9b:de:f3:3b:90:d5:4d:cc:76:49:06:b8:af:1d:25:19:
         d9:f5:f7:31:79:06:42:c3:25:a4:64:16:02:c1:ef:ba:40:f5:
         fb:a8:63:35:1e:c8:6c:64:2f:7f:c3:e6:0c:1f:c4:a9:5f:c0:
         b8:25:45:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:12:32 2026 by rpki-client