Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/25b57fbd-9358-3be7-a98f-a532b62c0739.roa
File:                     25b57fbd-9358-3be7-a98f-a532b62c0739.roa (raw, json)
Hash identifier:          RUan6LF9LPuqA6yFp4X/cPz0sSd/7LOqE/DS38SVimI=
Subject key identifier:   BF:C6:8E:BB:96:DB:BD:00:E7:9B:DE:26:A3:1B:86:CB:EE:AD:69:25
Certificate issuer:       /CN=6b4ca847-900e-44ba-84e4-460bf2f5df18
Certificate serial:       010D0C9F4328584DADAAE397D9F263DD429DEA00
Authority key identifier: C5:58:A6:7F:C0:61:C2:EA:CD:31:69:1D:3A:8D:5B:3F:26:74:E1:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/25b57fbd-9358-3be7-a98f-a532b62c0739.roa
Signing time:             Thu 30 Apr 2026 13:00:31 +0000
ROA not before:           Thu 30 Apr 2026 13:00:31 +0000
ROA not after:            Wed 29 Jul 2026 13:00:31 +0000
asID:                     11766
IP address blocks:        162.211.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/6b4ca847-900e-44ba-84e4-460bf2f5df18.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/6b4ca847-900e-44ba-84e4-460bf2f5df18.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:aa:e3:97:d9:f2:63:dd:42:9d:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b4ca847-900e-44ba-84e4-460bf2f5df18
        Validity
            Not Before: Apr 30 13:00:31 2026 GMT
            Not After : Jul 29 13:00:31 2026 GMT
        Subject: CN=0676c871-b0dc-47a3-87d6-f4ab0155210c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c8:37:f2:60:0c:40:2a:d7:a1:1c:fe:82:99:
                    c7:20:80:90:79:ba:25:62:8f:ab:22:b7:af:65:2a:
                    4c:42:57:43:af:e0:94:68:37:77:72:d8:c8:35:81:
                    61:7d:1a:26:25:5e:e5:14:99:bc:99:1c:2a:b0:32:
                    f4:bc:0c:4e:60:47:5b:ef:f7:80:c6:c5:88:ef:0a:
                    4d:4f:73:de:95:50:1b:8c:fd:46:54:80:0d:0e:35:
                    86:b3:46:42:2a:55:32:7d:f3:1e:a4:30:6e:db:f7:
                    0f:5a:a0:1e:19:c4:d0:c9:41:4c:44:26:ec:18:4c:
                    ab:01:a2:ab:4f:13:bd:8d:92:c2:95:b6:9d:9a:f1:
                    5a:b0:bc:f3:bb:9c:e9:c8:54:8a:0e:d7:f0:68:e6:
                    ea:9b:5e:be:6d:e1:5f:9d:c9:90:d3:db:2e:99:52:
                    c1:0b:2e:19:09:b9:92:84:66:3a:da:fd:4e:ee:2b:
                    3a:bf:f0:62:0e:64:49:f8:4d:a6:02:42:7b:20:cc:
                    9a:b3:56:fa:27:c5:97:e0:6d:8f:70:32:71:5b:47:
                    da:8f:55:71:17:ef:44:55:aa:26:28:61:aa:94:c2:
                    e0:7a:19:7f:87:f6:ce:ed:35:d5:e4:13:fd:0c:94:
                    2d:ce:f1:b4:e6:b0:91:41:62:55:df:7a:98:aa:d9:
                    f5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:C6:8E:BB:96:DB:BD:00:E7:9B:DE:26:A3:1B:86:CB:EE:AD:69:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/25b57fbd-9358-3be7-a98f-a532b62c0739.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/6b4ca847-900e-44ba-84e4-460bf2f5df18.crl

            X509v3 Authority Key Identifier:
                keyid:C5:58:A6:7F:C0:61:C2:EA:CD:31:69:1D:3A:8D:5B:3F:26:74:E1:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.211.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:2f:94:0f:67:ad:af:92:c0:66:0d:2c:34:56:7d:07:e6:e1:
         b9:d7:67:e3:7c:4c:b5:0e:35:4a:ec:f4:03:67:f4:c0:fc:b6:
         57:5b:2f:d5:75:ce:3a:cb:d3:09:bd:a0:04:e6:e0:bf:11:75:
         98:bc:59:9b:25:12:38:5a:5b:4d:45:d1:dd:31:f5:57:d6:78:
         8e:68:e5:41:4a:2e:6d:3d:42:2a:e7:86:46:29:4c:18:ba:41:
         0d:f8:62:ad:d7:58:bc:6d:42:9a:2e:08:00:38:8e:53:c8:fc:
         b1:a0:5a:10:f1:33:41:04:b3:f7:7a:73:e4:15:be:db:77:ec:
         60:b1:61:f1:d8:aa:fd:fe:44:a2:e3:ce:f2:6e:c0:7e:55:96:
         ae:d3:62:d5:52:72:d6:b6:39:64:7a:5f:19:d1:d1:58:79:bd:
         56:11:ab:d2:ee:ad:9b:ab:92:c5:da:0f:ad:a2:5c:12:b2:78:
         1d:24:af:d1:aa:91:de:7d:a1:42:2a:d7:6e:49:69:8d:44:54:
         ee:83:e7:8b:47:ef:a9:c9:ea:a7:17:83:a8:84:60:8e:aa:9c:
         15:37:d4:e8:a2:50:f9:a5:fb:10:45:fc:7a:fc:26:11:40:8f:
         98:47:fc:9f:f9:c1:73:45:42:6d:a2:3b:a4:45:8e:47:8d:40:
         43:83:ab:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:31:35 2026 by rpki-client