Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/2711e0c1-727f-3a04-a9a4-c0585c3f98a2.roa
File:                     2711e0c1-727f-3a04-a9a4-c0585c3f98a2.roa (raw, json)
Hash identifier:          qF/PZlvabLM/q0jb2cvaFrSwUe/unI4VHf8VuWF5dqc=
Subject key identifier:   DB:38:68:D4:70:26:B0:DE:6D:23:33:C3:8F:84:4B:3A:F6:21:9B:0F
Certificate issuer:       /CN=0699cec8-3851-41f8-aee8-2e225865699c
Certificate serial:       010D0C9F4328584D2981E8F4320CC2504015B700
Authority key identifier: 04:3A:13:A4:9A:F1:19:6C:60:B7:74:79:3E:AA:82:F6:12:4B:E6:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/2711e0c1-727f-3a04-a9a4-c0585c3f98a2.roa
Signing time:             Sat 14 Mar 2026 04:51:28 +0000
ROA not before:           Sat 14 Mar 2026 04:51:28 +0000
ROA not after:            Fri 12 Jun 2026 04:51:28 +0000
asID:                     22260
IP address blocks:        167.222.182.0/24 maxlen: 24
                          170.61.140.0/24 maxlen: 24
                          170.61.141.0/24 maxlen: 24
                          170.61.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/0699cec8-3851-41f8-aee8-2e225865699c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/0699cec8-3851-41f8-aee8-2e225865699c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:29:81:e8:f4:32:0c:c2:50:40:15:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0699cec8-3851-41f8-aee8-2e225865699c
        Validity
            Not Before: Mar 14 04:51:28 2026 GMT
            Not After : Jun 12 04:51:28 2026 GMT
        Subject: CN=28c1c845-43cb-4304-b1a7-db078b3b13f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:dc:2d:55:2f:b1:04:d3:52:fe:38:d8:22:54:
                    3d:4b:31:cc:d0:a3:43:f8:78:94:9b:22:73:8f:4b:
                    2d:76:4f:68:b0:36:73:df:35:ea:01:bc:09:00:1a:
                    90:36:9d:46:05:79:b3:63:7d:3f:06:21:fa:10:91:
                    6b:cc:02:cc:32:ba:78:12:62:1d:9c:3f:83:e5:9f:
                    f1:7c:fd:c0:5d:d2:de:47:c3:20:af:20:7a:0f:b5:
                    18:7d:d2:59:2d:21:66:02:27:1b:5d:b4:5e:7e:96:
                    69:b7:80:b1:ef:0f:d0:0c:91:37:f1:3b:54:f9:ee:
                    34:26:e1:11:ee:9c:ca:f3:eb:73:8f:b8:89:13:f1:
                    70:d8:53:1b:16:93:8a:f4:b1:13:3a:7f:32:eb:af:
                    8e:1b:a7:00:22:8b:e1:f2:5b:f1:0c:e1:02:33:c6:
                    39:0e:ff:6e:00:94:31:18:27:9e:c3:81:ef:09:84:
                    bc:3f:8e:d1:48:36:84:c5:e1:4f:d0:0d:7a:89:07:
                    8d:65:a8:d7:bb:d9:22:53:2c:70:32:13:0f:9f:56:
                    04:18:29:84:d1:ae:7b:9b:ba:c8:c4:90:e6:b7:4a:
                    49:57:fc:ca:43:4a:25:7b:49:d8:13:2e:5a:3e:bf:
                    36:71:49:6b:9e:b8:42:86:7f:ad:03:34:8b:45:cd:
                    8a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:38:68:D4:70:26:B0:DE:6D:23:33:C3:8F:84:4B:3A:F6:21:9B:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/2711e0c1-727f-3a04-a9a4-c0585c3f98a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/0699cec8-3851-41f8-aee8-2e225865699c.crl

            X509v3 Authority Key Identifier:
                keyid:04:3A:13:A4:9A:F1:19:6C:60:B7:74:79:3E:AA:82:F6:12:4B:E6:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.222.182.0/24
                  170.61.140.0-170.61.142.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:b2:9b:4a:ac:88:04:4c:62:f6:76:f2:87:ba:6b:40:ce:06:
         ba:31:67:1d:6e:6d:88:53:65:a6:6b:e1:c6:58:9d:58:4d:4f:
         42:66:1c:59:e4:cd:63:35:54:03:e5:57:27:16:32:3e:ac:76:
         e3:18:8b:ff:aa:74:3c:3c:0f:e4:ec:fb:86:de:81:b4:44:36:
         67:c6:f7:ce:88:05:65:a7:96:38:e7:b1:3c:ad:c1:1b:34:a3:
         54:f6:b5:d3:47:97:c4:7b:a6:f0:66:7a:96:76:06:6b:f0:34:
         18:96:c4:c2:43:9e:65:e5:1b:67:7a:bf:1a:38:d0:d0:74:46:
         a0:15:39:67:db:5b:b8:da:55:94:67:37:a0:21:ee:5e:e9:03:
         5a:07:76:54:cc:08:77:a2:b0:40:e1:8e:7b:10:e0:97:4c:73:
         83:b7:49:a2:33:24:f9:bc:6e:f4:92:e0:a2:2d:07:58:55:ce:
         a5:2c:98:2a:4f:bf:21:20:44:a3:3b:0b:47:6e:09:b1:45:f1:
         05:02:cc:dd:35:c8:4b:b8:c1:73:94:31:53:4c:b2:0b:ca:1f:
         84:11:16:aa:12:ad:06:e3:79:ba:e4:9f:43:7a:ca:a9:f3:1e:
         e0:f0:3f:cd:d0:cf:3c:f8:9f:d3:5f:5a:46:7a:fc:ce:bd:bd:
         91:39:8a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:03:22 2026 by rpki-client