Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ccaaed96-e776-3952-a0c3-f2428603c17c.roa
File:                     ccaaed96-e776-3952-a0c3-f2428603c17c.roa (raw, json)
Hash identifier:          CUDD8ZFqy1pUmT1fFGz8eG6yuUTrgnfffFtmRSKIFiw=
Subject key identifier:   87:C7:7E:FD:60:15:11:5A:45:E0:8A:C5:7A:90:72:81:E3:AB:81:8D
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584E9A7FAC97796D9958F6AF9280
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ccaaed96-e776-3952-a0c3-f2428603c17c.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     22516
IP address blocks:        158.62.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:ac:97:79:6d:99:58:f6:af:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=bb575c7f-135f-40ba-9764-2ea185bd1003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a6:9c:e2:e0:8d:42:f5:c0:d9:4b:63:44:40:
                    d9:ab:8c:dc:77:9c:22:50:86:c9:73:e5:ca:03:17:
                    64:fd:b6:ac:29:a7:12:c3:e6:be:4e:b5:ed:e3:fc:
                    28:f8:1d:65:5a:f9:0d:e3:f6:dc:44:0d:29:7f:55:
                    9a:fc:f1:9b:1c:4e:6d:7d:ed:ce:9e:a6:be:6c:42:
                    2a:43:dc:9d:cf:50:88:0e:6e:f8:13:e9:f6:b9:dd:
                    f9:43:de:7b:e2:7b:34:56:de:93:83:ae:75:c5:88:
                    cf:33:43:9c:28:6d:9b:41:1d:f8:25:db:32:5c:4c:
                    e1:3d:4f:49:70:4e:6b:80:7a:47:ab:3b:05:a2:8c:
                    a4:f3:b1:7e:75:fd:4f:cd:1f:12:fd:0d:8a:82:41:
                    d9:21:2d:5b:c9:40:2a:87:cb:59:ef:e3:2b:d4:f7:
                    30:da:82:81:7f:41:b0:10:a0:6e:96:42:5c:dd:65:
                    4f:e4:11:b9:12:10:3b:43:af:9a:83:2d:10:f0:8c:
                    e4:a3:fa:ff:9f:14:d8:d9:67:26:f9:31:82:e4:b4:
                    75:a7:42:a6:85:14:ab:ea:ab:8e:68:73:a8:db:12:
                    ec:e2:57:b5:4b:35:6a:22:c0:b2:1b:68:bd:cb:b3:
                    e5:73:12:00:f0:69:76:f1:29:24:19:46:14:8c:ed:
                    5c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C7:7E:FD:60:15:11:5A:45:E0:8A:C5:7A:90:72:81:E3:AB:81:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ccaaed96-e776-3952-a0c3-f2428603c17c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.62.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:f9:a3:24:ee:43:f4:80:79:1d:84:22:9f:aa:80:8c:ec:8c:
         c3:40:ac:09:3e:71:24:00:4f:58:7f:73:c8:aa:34:d7:c8:34:
         55:89:b1:b0:5b:cc:10:7a:3f:8e:a2:71:2e:45:26:2a:25:b0:
         c6:d5:da:2f:8d:0c:fe:a2:6a:92:11:9f:54:f2:ea:f2:1c:84:
         6c:ba:99:5f:0d:26:64:c0:3a:6f:73:75:69:ce:c6:f7:8e:c9:
         db:5b:59:a7:61:74:5c:b3:a2:81:df:fe:f6:7c:0d:4e:33:1b:
         8e:8c:e6:68:0c:3d:7e:a7:28:2f:30:08:fd:32:be:da:74:4e:
         1d:ed:34:6c:32:df:96:23:4c:37:1a:70:e0:9c:71:d7:50:e4:
         1a:fb:b8:a5:c0:b6:35:5d:9a:a5:14:72:2e:6b:31:e9:00:cb:
         4a:e4:c4:48:ca:44:ff:f5:48:16:f1:11:4d:7b:02:01:17:0a:
         81:bb:4f:5c:c9:f2:a0:65:c0:14:cc:b3:6c:1c:58:75:91:ce:
         d6:ed:3a:c9:e1:02:da:81:7b:03:16:58:c8:d3:ff:28:12:55:
         49:03:39:ab:89:2f:5c:4e:55:33:11:05:b6:b0:3a:3b:11:42:
         25:4c:19:d5:55:91:f4:21:9c:c9:4e:a0:44:83:91:2a:1e:a7:
         fa:39:c8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:23:09 2026 by rpki-client