Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/47d28a1a-7dc9-3182-bb34-879c1e464268.roa
File:                     47d28a1a-7dc9-3182-bb34-879c1e464268.roa (raw, json)
Hash identifier:          I3rmTsl8my1pH8IEPDTtLkeh8Tdr49jhcnx8agDvgyo=
Subject key identifier:   1F:8C:13:4A:0D:B6:FA:5C:A9:05:5A:77:89:31:A5:DF:9A:00:7D:15
Certificate issuer:       /CN=66094ef6-a967-4978-81e1-d66227a478fd
Certificate serial:       010D0C9F4328584D981FE4B776B4852C7D1EA380
Authority key identifier: DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/47d28a1a-7dc9-3182-bb34-879c1e464268.roa
Signing time:             Wed 22 Apr 2026 19:48:42 +0000
ROA not before:           Wed 22 Apr 2026 19:48:42 +0000
ROA not after:            Tue 21 Jul 2026 19:48:42 +0000
asID:                     14477
IP address blocks:        162.223.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:98:1f:e4:b7:76:b4:85:2c:7d:1e:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66094ef6-a967-4978-81e1-d66227a478fd
        Validity
            Not Before: Apr 22 19:48:42 2026 GMT
            Not After : Jul 21 19:48:42 2026 GMT
        Subject: CN=6107ce54-3bf8-4135-8d94-35b1fdbe897e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:bc:ab:b7:8a:e5:d6:59:1b:81:c8:c9:68:ec:
                    d4:4b:81:f0:18:5c:8f:04:2c:2f:56:4b:a4:6b:99:
                    c7:51:5c:af:40:e2:c4:03:0b:88:54:cd:4c:6f:a0:
                    3a:23:1a:19:d6:6f:dd:b8:92:7e:70:9d:40:4b:ad:
                    35:72:b9:61:ef:e2:26:6a:64:cd:e2:a7:a4:9a:8a:
                    1f:33:c3:f8:58:b0:51:3a:73:64:16:d5:56:95:c7:
                    03:fb:0b:75:4b:dc:ce:57:c1:23:fe:a1:26:6d:3a:
                    dd:bc:50:63:ab:7d:5e:ed:22:a6:6d:6a:ef:bf:92:
                    6e:5f:81:1c:86:82:a1:52:e1:d4:34:3d:12:90:1d:
                    d6:b0:c0:33:bf:27:7c:87:8c:08:0f:3f:57:30:28:
                    e7:d3:f8:90:37:14:66:4c:fa:d9:fe:5f:94:2b:fa:
                    20:f6:11:1d:94:b7:4a:00:d3:11:89:f9:55:f9:31:
                    d1:1e:3a:bc:3a:d1:a8:c7:d0:0c:ad:25:16:a6:00:
                    cc:23:58:31:7d:09:7f:9d:64:8f:e2:65:25:54:75:
                    0e:a8:ef:c8:69:2d:4f:ca:9c:8d:cc:29:c9:36:2f:
                    8b:1d:df:17:e5:2e:2d:cc:fc:ca:7e:a1:d7:ff:4d:
                    03:8a:c5:c3:54:32:0b:b1:47:32:ae:8d:7a:88:ae:
                    b5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:8C:13:4A:0D:B6:FA:5C:A9:05:5A:77:89:31:A5:DF:9A:00:7D:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/47d28a1a-7dc9-3182-bb34-879c1e464268.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl

            X509v3 Authority Key Identifier:
                keyid:DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.223.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:e5:4c:59:60:b1:22:20:1a:bf:89:33:19:e4:6c:28:4b:25:
         22:6c:26:8a:db:22:a4:a2:e0:06:d9:da:74:04:84:9b:ea:eb:
         e9:41:9f:c8:32:23:27:88:c0:e1:17:8e:e6:e7:0a:7b:62:50:
         17:7d:ab:7c:23:88:42:ba:bd:5b:43:60:b3:4c:db:25:93:9e:
         cf:86:ee:0c:57:e0:0d:f9:46:87:10:31:ae:80:bd:8d:13:6d:
         34:35:d4:5e:c5:4e:37:71:a3:27:f7:38:73:4c:3f:b9:61:c9:
         cf:2e:a8:a5:c0:c0:d8:e7:f2:fa:4b:b3:09:2d:21:2e:de:60:
         48:bd:38:ea:a3:6d:7e:83:8a:f4:d6:cf:38:ad:33:48:f0:d2:
         8f:de:f4:bc:8c:1b:11:eb:8d:1a:55:62:6e:05:6a:54:f4:5e:
         d9:9d:93:1d:13:cd:6e:4d:59:82:e5:ac:c9:a9:6c:f0:a1:32:
         dc:cb:75:99:54:60:a2:64:9b:88:d3:63:ba:84:e1:6b:6b:b9:
         87:99:73:12:2f:d1:86:2f:ec:af:ae:72:70:0e:d9:ce:e3:f6:
         62:7a:fc:3b:36:3d:c1:f3:97:c4:8c:35:cc:f7:c5:36:0f:a2:
         9e:58:3f:05:7b:37:56:d4:51:d1:0d:1a:e1:26:91:97:fd:da:
         5b:57:d4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:44:32 2026 by rpki-client