Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/61ae1195-4b8c-307c-a787-334864a9e04b.roa
File:                     61ae1195-4b8c-307c-a787-334864a9e04b.roa (raw, json)
Hash identifier:          7wuy+VLTJQerdn7AcyXJeU2A4b2TNmpZfrNast2+Vdo=
Subject key identifier:   07:DC:C6:C0:84:58:50:39:A8:88:2A:2A:3B:DC:B5:11:42:EF:54:60
Certificate issuer:       /CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
Certificate serial:       010D0C9F4328584D9A201729EFBB2E603D6BFDC0
Authority key identifier: DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/61ae1195-4b8c-307c-a787-334864a9e04b.roa
Signing time:             Thu 23 Apr 2026 13:00:32 +0000
ROA not before:           Thu 23 Apr 2026 13:00:32 +0000
ROA not after:            Wed 22 Jul 2026 13:00:32 +0000
asID:                     6079
IP address blocks:        163.123.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:20:17:29:ef:bb:2e:60:3d:6b:fd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
        Validity
            Not Before: Apr 23 13:00:32 2026 GMT
            Not After : Jul 22 13:00:32 2026 GMT
        Subject: CN=d15dd52c-cd73-4cd9-9bb4-35e72d71d435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cb:7e:26:89:b8:92:85:f4:9e:a9:09:39:6e:
                    52:c8:0f:31:5c:d3:04:e8:e9:20:a9:f5:1d:14:68:
                    b3:ff:71:99:b2:6d:be:fb:8c:58:25:88:73:61:ff:
                    8e:2d:c5:46:db:93:a2:05:ce:9b:9f:a1:f5:18:a6:
                    e1:16:2f:48:36:b7:c0:3c:2c:93:45:c0:1d:b3:be:
                    53:7d:0e:29:9f:60:30:32:66:2f:3a:5f:fe:5c:53:
                    50:2d:4f:33:f4:a3:a0:59:ad:7e:d3:c6:0d:0e:71:
                    de:36:c1:85:d4:19:aa:8d:1f:90:0e:14:fd:2f:7f:
                    b6:49:19:e3:9e:07:cb:2e:77:12:a6:c0:d0:7f:63:
                    de:cb:15:16:ab:b3:b5:17:a7:43:c2:8b:df:f7:d7:
                    9e:0c:a8:ee:3c:c2:a8:66:ba:7f:db:1a:e9:b7:9e:
                    61:52:e6:49:cd:b3:74:e8:9d:d0:5b:d6:6f:75:6d:
                    13:cd:3a:41:ac:e7:e3:ba:e1:1c:33:2d:68:0e:f7:
                    b8:9e:96:e7:92:86:7d:c3:9e:a7:dd:8e:91:b9:cb:
                    a0:57:0d:0e:4d:6e:ca:8f:f2:4b:d2:32:49:8a:74:
                    5e:3b:81:35:99:d6:fe:a3:6f:f4:d3:d6:3c:36:ca:
                    b9:a1:42:80:78:eb:26:bb:db:8e:78:fe:c6:47:4a:
                    95:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:DC:C6:C0:84:58:50:39:A8:88:2A:2A:3B:DC:B5:11:42:EF:54:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/61ae1195-4b8c-307c-a787-334864a9e04b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl

            X509v3 Authority Key Identifier:
                keyid:DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.123.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:f5:52:15:28:3e:81:6a:fa:c8:dc:bc:bc:63:ce:41:26:cf:
         76:bc:ea:b5:cf:a3:17:4b:c8:6c:d0:68:9e:5e:14:15:2e:17:
         f8:99:47:86:3d:c0:19:f5:6b:c7:de:92:09:1f:85:eb:df:24:
         cc:61:d0:9e:88:43:fb:d4:db:8d:34:c9:d6:4b:f0:41:76:3e:
         0d:c6:2e:f9:62:91:1e:2e:a1:c4:62:f5:b0:c9:f2:43:a7:ba:
         27:c0:75:6a:fb:57:01:31:e1:14:57:10:17:04:b3:d2:05:12:
         f0:0f:91:21:ad:4a:52:fa:74:88:0b:eb:26:76:86:1c:24:49:
         1c:53:3b:b2:d1:ec:04:97:e3:32:0c:10:73:ef:63:c4:d2:cc:
         34:af:78:c7:27:0a:fc:49:69:58:f6:1b:f1:7f:18:3f:db:3a:
         4f:e9:f8:05:dd:73:57:fa:8e:48:43:57:e3:70:4a:51:ac:77:
         74:7a:6e:b5:12:76:63:d0:03:d7:21:c6:44:f6:39:86:fe:d3:
         3a:b0:e7:02:fe:16:cb:b0:b2:81:fd:9d:2a:b5:7d:15:1a:b1:
         47:a5:3f:a2:fd:b1:f6:8b:d4:44:71:71:ad:5a:ac:9d:8c:c6:
         bd:a8:8e:0e:65:4d:29:fa:73:41:70:9c:c8:e4:f1:bc:f2:04:
         2f:25:88:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:28:25 2026 by rpki-client