Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/582ea809-ce36-3215-be87-d35103b9b9a7.roa
File:                     582ea809-ce36-3215-be87-d35103b9b9a7.roa (raw, json)
Hash identifier:          OhknE2Rxcs08bFKlSSEz3WwZ83RChVOgy/y00vCyhR4=
Subject key identifier:   04:75:7B:B5:9F:01:15:BE:D2:8E:E2:17:A3:7B:22:C0:CD:1F:B9:D0
Certificate issuer:       /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
Certificate serial:       010D0C9F4328584E7634CA67B3812AD654EC28C0
Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/582ea809-ce36-3215-be87-d35103b9b9a7.roa
Signing time:             Sat 11 Jul 2026 09:00:12 +0000
ROA not before:           Sat 11 Jul 2026 09:00:12 +0000
ROA not after:            Fri 09 Oct 2026 09:00:12 +0000
asID:                     59865
IP address blocks:        199.62.146.0/23 maxlen: 23
                          199.62.148.0/22 maxlen: 22
                          199.64.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:76:34:ca:67:b3:81:2a:d6:54:ec:28:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
        Validity
            Not Before: Jul 11 09:00:12 2026 GMT
            Not After : Oct  9 09:00:12 2026 GMT
        Subject: CN=720b5e85-e57c-459f-9928-6f2f5c0e94fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:10:6c:1b:c2:e1:b4:65:1d:ec:69:06:58:c0:
                    4e:85:a9:f3:50:6d:30:0f:6f:98:f1:77:38:7b:65:
                    db:99:c5:22:e0:bf:4f:6c:2f:ab:50:37:69:b2:5c:
                    77:b4:e9:88:77:9f:3d:df:e5:57:8d:a6:04:1e:c2:
                    e6:d5:26:28:59:ec:59:dc:35:74:65:6d:b9:99:41:
                    8d:6c:d4:e3:94:c9:ee:fb:06:f1:4a:19:a8:97:c7:
                    aa:fa:62:51:c0:e2:1e:99:8d:62:7d:a3:78:45:66:
                    f7:d8:df:dc:16:dd:dc:61:6d:98:41:c4:ca:fc:a8:
                    69:6d:b0:28:95:a8:91:40:a4:a7:5e:c2:da:ee:d5:
                    b2:dc:db:52:50:1e:9f:54:09:2b:7d:35:38:c4:3f:
                    24:1e:35:56:7d:3e:8e:d7:36:69:17:36:a9:c8:51:
                    f9:e3:de:d5:fa:08:37:83:ee:cd:d5:ea:f2:08:1d:
                    de:c0:44:19:0f:14:df:a1:48:04:63:8c:4e:61:cc:
                    a5:f6:ab:52:3e:b3:24:e1:c3:82:cf:30:88:6f:34:
                    88:02:e0:a5:d6:aa:41:5e:09:f4:ff:89:33:82:f7:
                    5c:6f:81:bf:d1:26:df:ec:f8:fe:a7:03:a8:39:8b:
                    12:e1:c3:1d:e4:47:c4:ef:24:48:c6:02:e9:2e:0b:
                    50:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:75:7B:B5:9F:01:15:BE:D2:8E:E2:17:A3:7B:22:C0:CD:1F:B9:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/582ea809-ce36-3215-be87-d35103b9b9a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl

            X509v3 Authority Key Identifier:
                keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.62.146.0-199.62.151.255
                  199.64.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:61:c2:70:cf:2c:2f:82:f4:67:17:8a:a8:75:b9:f5:fc:4e:
         79:a7:69:55:a3:36:c6:14:21:db:4c:e9:df:e5:03:11:64:eb:
         01:32:f7:99:33:3b:e0:b2:80:04:cc:49:59:81:8a:8e:2c:f4:
         15:1e:34:ac:01:58:94:22:92:14:26:63:b0:b6:9e:38:a1:f8:
         a0:56:c6:70:d7:8e:47:e4:02:0f:6c:20:a2:f4:0e:81:63:75:
         44:a7:99:ff:f5:37:27:e3:c4:46:b8:a0:85:a9:17:b0:6b:4f:
         f5:bd:fb:f7:9c:5d:7b:28:79:9f:34:2d:ea:6c:07:dc:7f:0e:
         e0:15:fc:50:11:8f:0c:8a:95:d2:aa:c4:29:94:ca:bf:20:7e:
         5e:d7:6c:ed:73:e5:45:f1:b7:ed:8f:fc:47:26:4d:93:48:48:
         62:bf:ab:f6:f9:83:b8:c9:27:15:79:7c:47:a6:68:2b:34:2c:
         3b:ee:64:5e:8c:ef:3e:13:a8:a2:57:4a:a3:c2:9a:13:87:bb:
         ad:7f:a5:18:64:82:7f:82:c2:ef:00:b0:4b:87:5d:fd:c1:4f:
         b4:12:4d:14:f1:0c:03:0e:fe:27:6f:9c:8f:5b:34:4d:91:8b:
         98:0b:54:70:02:15:46:a3:22:a8:2a:25:be:99:81:38:9d:e2:
         69:40:cc:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:10:18 2026 by rpki-client