Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/abc4c03e-a317-34c8-8e56-1c74f9ab5904.roa
File:                     abc4c03e-a317-34c8-8e56-1c74f9ab5904.roa (raw, json)
Hash identifier:          il0Pdl9sfYlw+vQH4C3bXsvjflzAESAT5wfv9qgSvGU=
Subject key identifier:   36:BE:C0:74:99:68:03:B9:31:AB:B4:5A:94:99:BC:88:8D:CE:EB:9E
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584D359FDC3E5F94004ABD1B3300
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/abc4c03e-a317-34c8-8e56-1c74f9ab5904.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     397630
IP address blocks:        158.62.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:9f:dc:3e:5f:94:00:4a:bd:1b:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=30b040fa-ca85-4f60-b456-b7a70b64794c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:57:d5:3f:50:ea:81:ed:e8:6f:c5:54:fb:ed:
                    e0:c5:bc:7e:b7:8f:21:e2:83:f9:4a:6f:8a:fc:97:
                    f0:a7:75:6f:52:80:62:e3:d4:40:38:84:a1:92:42:
                    f0:f6:9f:05:b6:92:d9:c5:56:b7:5a:80:59:a9:2d:
                    28:f2:4e:86:39:3e:cf:78:ba:01:48:50:88:b7:50:
                    2b:e6:ae:68:5c:5d:f4:d8:b1:e1:fb:cc:b1:8c:63:
                    0a:c0:62:ca:73:d7:07:e0:e8:93:41:d2:ce:0f:98:
                    dc:26:c8:ef:e7:84:79:8f:03:fe:d6:f5:d2:55:28:
                    cc:8c:58:bb:23:d9:97:b2:90:b7:40:8a:7c:05:cb:
                    d9:dd:81:ad:6e:9d:c7:1a:58:c7:eb:0d:54:e9:23:
                    fc:93:8f:17:a5:34:16:a1:8a:8e:07:8c:f2:d7:b9:
                    5f:29:dd:25:4e:ce:4c:a1:51:8c:23:1c:88:60:46:
                    98:7e:9a:3c:4d:8f:1a:43:c7:27:e5:00:0e:79:8e:
                    61:e5:3f:0d:ff:8e:7c:3b:2c:5d:4b:c8:1f:39:b2:
                    2d:f5:b8:c5:bc:e0:85:c4:7a:86:9b:bc:77:70:66:
                    aa:5e:7b:bb:0f:f5:07:76:34:13:99:ac:7a:4a:b7:
                    2f:ba:99:71:67:ea:99:2a:f0:2c:8e:b2:20:fd:99:
                    70:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:BE:C0:74:99:68:03:B9:31:AB:B4:5A:94:99:BC:88:8D:CE:EB:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/abc4c03e-a317-34c8-8e56-1c74f9ab5904.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.62.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:8a:ef:43:06:85:f2:61:12:6a:b2:6b:79:32:de:f5:79:91:
         8d:29:13:1f:68:ee:e9:65:5c:3e:94:f2:e2:e2:ce:a2:a5:80:
         7c:cf:98:d1:53:23:9e:c3:10:48:91:9e:f8:bd:82:31:bf:3d:
         60:3e:b5:db:f9:c2:ff:ab:b5:8e:2c:ac:02:d9:5c:40:71:97:
         72:e9:23:42:fe:56:44:1a:e7:44:6b:c5:87:ac:a1:8e:96:f0:
         65:b5:e3:ac:42:fe:84:1a:5f:86:30:10:e9:9b:fb:ab:70:db:
         34:a5:97:d3:0c:37:40:67:dd:84:46:d8:6e:bb:0a:14:43:03:
         e3:47:80:20:4c:da:7c:94:ce:c3:f3:3a:66:11:2d:e8:b6:1a:
         5d:90:d9:03:0f:03:05:ca:10:2e:79:43:d7:cd:2f:ca:2c:6c:
         89:81:8d:3c:65:bd:c7:9f:8c:85:58:91:3a:b9:77:f2:90:69:
         a4:d3:54:b6:df:0f:54:c7:3b:7b:0c:f9:b8:b2:8d:ee:38:56:
         06:ab:eb:e1:77:ad:2f:cd:30:a9:e9:b4:37:e3:41:a3:dd:e2:
         d7:c5:aa:dc:67:ef:9d:3f:f4:e9:3b:68:9b:d3:c3:02:e2:a7:
         de:d4:72:64:3c:69:0a:a3:53:4e:37:38:82:4b:1a:cd:35:cd:
         23:ee:ed:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:39:53 2026 by rpki-client