Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/0e1d6a1c-3769-3b4b-ae53-736e82ee5d50.roa
File:                     0e1d6a1c-3769-3b4b-ae53-736e82ee5d50.roa (raw, json)
Hash identifier:          0R/JScAcaokNhVmdv+XKxGovLm5BFaI+tM38Zlnq2Tk=
Subject key identifier:   1A:9B:E0:CB:E0:FF:F6:92:F8:6D:5E:EF:BC:00:C9:A9:B6:98:CB:DB
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584D343A1CE824E0F7718C35A780
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/0e1d6a1c-3769-3b4b-ae53-736e82ee5d50.roa
Signing time:             Wed 18 Mar 2026 01:00:33 +0000
ROA not before:           Wed 18 Mar 2026 01:00:33 +0000
ROA not after:            Tue 16 Jun 2026 01:00:33 +0000
asID:                     55246
IP address blocks:        162.255.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:34:3a:1c:e8:24:e0:f7:71:8c:35:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Mar 18 01:00:33 2026 GMT
            Not After : Jun 16 01:00:33 2026 GMT
        Subject: CN=ec85ad2b-95cc-40d9-99d8-abf961d0b4ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:43:a3:26:61:d7:87:77:2e:9a:26:7f:d7:7a:
                    22:c6:ad:47:fe:af:70:9b:81:cb:5a:4f:ed:79:b4:
                    cb:19:6d:58:bc:54:27:db:11:ae:f9:88:0f:01:af:
                    c1:d6:80:f5:fc:ab:3d:7e:4d:b7:ed:d1:fe:7f:44:
                    c1:78:50:d9:ef:5a:7b:bc:78:06:2e:88:fa:5c:4f:
                    d4:d9:6e:7e:e5:9b:1c:bc:63:6b:f8:99:52:7c:ec:
                    7a:aa:eb:74:7b:22:72:60:10:ad:cf:80:81:4e:11:
                    93:df:6f:4e:7d:ce:97:94:3f:1e:54:1e:b1:53:0e:
                    c8:74:80:44:0a:0d:2a:0b:e6:4f:d2:75:f6:d0:d5:
                    18:d7:e5:50:13:c6:be:cd:34:7f:92:c4:0e:20:f0:
                    09:18:32:e6:fb:2b:7a:a6:87:13:20:8d:72:e6:e8:
                    d7:05:c0:28:29:37:16:d7:fa:2f:08:af:e9:96:ec:
                    23:3c:87:b9:e1:79:e9:04:6a:26:d7:6a:21:5d:43:
                    e1:72:87:be:8b:37:e8:f3:2e:6d:69:19:28:1d:a5:
                    4b:0f:9d:a1:64:c6:b2:f5:d6:48:2a:5d:77:1f:d6:
                    9e:19:bc:56:04:2f:5c:1a:2b:54:aa:62:e6:7e:41:
                    7e:5c:9d:17:fb:0e:99:89:13:7d:83:ef:b8:b0:44:
                    34:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:9B:E0:CB:E0:FF:F6:92:F8:6D:5E:EF:BC:00:C9:A9:B6:98:CB:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/0e1d6a1c-3769-3b4b-ae53-736e82ee5d50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.255.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:c4:07:63:08:ed:5d:ad:78:37:d7:d2:23:3f:95:5e:70:c2:
         c7:6b:c6:da:72:26:09:45:43:2b:c1:f6:0f:ae:33:0c:5d:c3:
         8b:a0:7b:24:77:d3:f8:75:69:4f:db:27:33:d3:30:59:8f:90:
         4d:c5:1d:43:9d:5a:54:be:0f:11:bd:06:82:c7:5e:91:ad:9f:
         c8:21:80:7e:17:9a:ec:b1:72:1d:82:66:68:d0:3e:96:0f:c0:
         b0:a6:34:ee:24:ce:97:47:37:48:f1:dd:6b:9c:1d:89:f2:4c:
         46:0a:5a:88:67:ab:3c:ed:c6:b3:80:df:29:d6:09:c2:cc:7b:
         3c:be:c5:97:fc:76:91:90:38:31:69:18:97:aa:99:1c:7a:37:
         89:a5:87:95:6a:34:aa:30:a9:3e:9f:ca:88:0b:5b:b8:46:50:
         23:ae:dc:92:65:b7:db:82:84:9d:92:eb:7d:57:34:8c:5b:ce:
         60:be:27:09:f9:5c:ee:06:96:18:8f:98:ff:2d:b3:44:12:ae:
         35:ee:c5:74:3c:d2:29:8a:40:34:9d:0d:c2:df:06:96:a4:76:
         ed:ef:bd:3c:a8:85:0e:53:ba:47:71:4a:8b:3d:0b:45:c9:13:
         a2:f4:1d:9a:aa:29:b3:7f:44:19:47:62:34:c0:ff:88:af:a3:
         d5:70:fe:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:55:51 2026 by rpki-client