Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/5576bbfe-1d66-3d23-b25e-56e5d337d3aa.roa
File:                     5576bbfe-1d66-3d23-b25e-56e5d337d3aa.roa (raw, json)
Hash identifier:          6uPQMMikEayRkWmeDbQbdjgYuzfEZON5ZzzfFGB6UUk=
Subject key identifier:   C8:E3:93:E2:AD:F1:2E:FF:C4:8B:15:AF:69:D6:0D:ED:9D:7B:66:81
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F4328584D1F4A120B5826CD4606182F80
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/5576bbfe-1d66-3d23-b25e-56e5d337d3aa.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     396982
IP address blocks:        162.240.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:12:0b:58:26:cd:46:06:18:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=46d87d62-34c4-43db-9727-6dfe35776ed1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6c:9f:12:b2:1c:b0:4e:63:5a:50:62:e4:70:
                    9d:53:35:d1:6a:27:56:c8:46:1a:f9:0f:ea:ec:26:
                    9e:09:a7:bc:20:6d:fe:0c:7f:42:2b:cd:dd:99:13:
                    02:56:77:b9:a9:73:fb:dc:fc:50:75:6c:2d:c3:5b:
                    db:c3:d5:4e:f1:3f:89:ac:ed:2d:53:08:82:a3:20:
                    a7:81:2e:e0:cd:27:21:bf:ec:6c:8a:1e:58:09:34:
                    f7:43:86:29:42:59:4a:89:6e:92:dd:3e:be:4a:93:
                    bc:0b:b6:c5:ea:50:16:cd:01:ce:f8:ab:6b:da:f2:
                    5e:6e:19:11:ed:8f:b1:72:dd:ca:dd:0d:49:fc:fd:
                    f6:68:68:9e:38:e7:86:45:e0:53:51:92:77:0d:a1:
                    ed:14:46:d4:41:fd:cf:6e:ab:99:35:86:25:cf:04:
                    51:df:f2:3e:71:b9:65:97:56:64:ff:97:fa:b1:7a:
                    fc:ef:8f:f5:4f:bb:b9:5e:34:fd:c8:57:5f:2c:fe:
                    65:ce:5c:e3:a1:15:c9:f2:8a:46:fc:c6:89:d7:8a:
                    a6:fb:7d:97:fa:5f:93:11:37:81:c6:10:b0:88:9a:
                    5b:18:1e:20:7f:96:ba:fe:50:cb:20:cc:9b:38:eb:
                    83:73:98:8c:48:c8:ec:61:4d:33:63:af:9d:b4:ce:
                    54:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E3:93:E2:AD:F1:2E:FF:C4:8B:15:AF:69:D6:0D:ED:9D:7B:66:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/5576bbfe-1d66-3d23-b25e-56e5d337d3aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.240.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:bc:96:f4:c8:c0:8b:31:ac:03:a9:8b:fb:23:17:64:65:8d:
         26:26:9a:d0:f5:13:96:00:57:1e:ac:b7:8c:ed:ef:79:61:dc:
         34:ea:43:67:21:01:86:de:4e:a9:2f:bd:f4:ec:7e:21:c3:b2:
         59:cb:80:bf:b1:0a:0b:a5:07:f6:3b:91:a1:39:ae:8f:1d:b9:
         b9:5d:1e:ca:b5:5c:09:82:2a:fb:7f:66:a2:00:5b:41:4b:51:
         b8:d2:25:c5:23:39:c5:80:63:78:76:5f:55:1b:bb:e3:f5:7d:
         83:e1:9c:01:3d:6f:9b:07:c9:8d:f1:e8:83:11:06:86:6a:93:
         7f:5b:eb:9b:34:ab:d2:f2:89:c3:21:ce:c4:2a:ea:73:69:40:
         b8:50:db:b0:46:2b:6f:5a:5f:3a:a7:8b:7b:0f:ef:19:b3:35:
         e4:3e:a1:15:08:4f:80:8b:49:97:9a:ae:6a:52:bd:16:4c:58:
         ee:03:2d:4a:de:2f:0a:65:2b:60:55:e7:6b:49:c4:7c:fd:a9:
         ad:f5:8d:f1:aa:03:9f:2c:34:41:b0:15:62:5b:9c:48:b9:c8:
         a7:3e:e6:c2:fe:21:7d:82:c2:bb:01:bc:1e:c5:5e:75:3e:b5:
         2b:e3:a6:50:0e:55:23:bd:4c:c6:70:58:f9:38:3a:97:10:4a:
         86:8c:39:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:58:46 2026 by rpki-client