Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab/07966bb2-b6f2-324f-bb34-41f04d553785.roa
File:                     07966bb2-b6f2-324f-bb34-41f04d553785.roa (raw, json)
Hash identifier:          TWVWSGYhoyFhE/0R1EzJTr+xwheQrWGNnm7Kolwp7Vs=
Subject key identifier:   E8:39:8A:71:49:C4:1C:4C:71:37:A8:84:04:E4:7A:D4:18:43:B0:58
Certificate issuer:       /CN=13d1e2d5-5089-4514-80fb-652631b3cfab
Certificate serial:       010D0C9F4328584D397B3539C9C2E4F29265F100
Authority key identifier: 03:53:40:F7:C9:7E:C0:C8:FC:BB:2E:B0:A6:53:6F:04:20:D6:E1:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab/07966bb2-b6f2-324f-bb34-41f04d553785.roa
Signing time:             Thu 19 Mar 2026 22:10:54 +0000
ROA not before:           Thu 19 Mar 2026 22:10:54 +0000
ROA not after:            Wed 17 Jun 2026 22:10:54 +0000
asID:                     62917
IP address blocks:        162.249.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab/13d1e2d5-5089-4514-80fb-652631b3cfab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab/13d1e2d5-5089-4514-80fb-652631b3cfab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:39:7b:35:39:c9:c2:e4:f2:92:65:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13d1e2d5-5089-4514-80fb-652631b3cfab
        Validity
            Not Before: Mar 19 22:10:54 2026 GMT
            Not After : Jun 17 22:10:54 2026 GMT
        Subject: CN=67ef67fb-7f83-4bc0-ad5d-c1792824bd98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:26:78:98:83:0c:44:a9:ea:d2:50:fb:6d:1b:
                    5a:8a:de:ae:31:01:4a:1c:40:f2:44:f5:0c:3f:ab:
                    b5:7b:93:61:c8:03:09:34:0c:35:c0:14:e8:69:35:
                    8f:be:0b:d1:93:67:db:99:c7:98:dc:bd:dd:31:ae:
                    8f:50:69:18:09:5d:b2:b2:37:35:5c:67:c9:53:e8:
                    d6:cf:f5:2a:a9:43:f5:b1:71:c6:eb:c3:37:64:6a:
                    9f:3a:2b:aa:1e:13:18:66:81:ad:a1:8b:7e:a8:a8:
                    aa:0c:1a:ff:42:ac:7d:d1:96:d7:aa:54:7b:cd:33:
                    15:4b:0a:d6:2e:47:9a:97:ab:76:7b:9a:9a:32:c2:
                    98:04:29:56:c3:13:7f:cf:88:c8:eb:11:e7:50:7a:
                    09:e2:4e:04:ef:43:f1:09:76:49:40:4a:cf:1c:eb:
                    c3:20:9a:28:2b:45:43:2f:f4:ab:b4:8c:09:1f:bc:
                    13:15:7c:98:c4:22:a3:38:7e:b0:44:48:2a:69:28:
                    53:a9:0e:50:52:e8:8e:9a:c5:70:f1:ff:6e:40:af:
                    a3:6d:fc:4b:69:aa:ce:00:f7:8e:14:a6:f0:6c:66:
                    f9:7f:ea:2d:7f:8d:03:c5:56:bc:f8:d5:19:e1:a3:
                    a4:0e:49:5e:dd:ab:ca:36:07:57:7e:c1:11:49:f9:
                    ce:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:39:8A:71:49:C4:1C:4C:71:37:A8:84:04:E4:7A:D4:18:43:B0:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab/07966bb2-b6f2-324f-bb34-41f04d553785.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab/13d1e2d5-5089-4514-80fb-652631b3cfab.crl

            X509v3 Authority Key Identifier:
                keyid:03:53:40:F7:C9:7E:C0:C8:FC:BB:2E:B0:A6:53:6F:04:20:D6:E1:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.249.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:b3:dd:41:a1:8d:0a:c9:f1:a5:c8:15:59:b8:df:08:89:da:
         0e:83:8a:31:bc:05:51:67:4d:e8:dd:ef:af:7c:30:ce:c7:61:
         dd:2e:8e:5d:d6:39:01:8f:69:14:70:9d:f3:ea:c0:8f:32:ce:
         b1:22:82:51:36:ab:80:af:dd:a2:74:01:bf:69:71:e5:43:73:
         91:7d:60:9d:a3:82:c2:53:a7:23:64:09:67:8f:0c:03:8b:bd:
         6d:60:dc:8d:a5:34:de:a7:04:64:a4:5e:74:20:17:92:71:14:
         b6:5c:f5:8f:3e:1b:07:7d:6c:7a:44:64:7f:e0:27:89:ff:d1:
         a6:75:4b:3f:b3:23:74:77:ff:a6:85:44:ba:9a:ad:5e:02:a7:
         c2:91:04:b2:8a:82:bf:6b:ad:32:1a:04:99:31:92:70:dc:08:
         81:89:80:0d:92:68:3a:e0:f1:f7:08:67:eb:39:d1:42:a6:a8:
         18:63:48:95:35:a9:74:1c:b3:94:01:13:67:96:53:04:47:d6:
         09:a5:70:2f:a9:bf:40:80:16:43:2d:d5:8f:0d:43:cd:d0:f5:
         ea:b7:19:f8:c2:9f:fa:01:84:a0:fd:a6:89:30:30:26:99:7b:
         87:d0:97:d1:e0:32:eb:06:6b:d6:8e:30:69:39:38:1b:67:1a:
         93:ef:b2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:12:46 2026 by rpki-client