Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/ed91cb22-1490-3426-9685-bf740558dd1f.roa
File:                     ed91cb22-1490-3426-9685-bf740558dd1f.roa (raw, json)
Hash identifier:          TCaXu8TK8ZfYqldULoWfjoFn08ZzoWWMlEW4o3omS6Y=
Subject key identifier:   A4:AE:F4:DF:13:ED:E3:4F:91:BF:91:1B:D3:73:0A:D1:38:12:C1:7D
Certificate issuer:       /CN=62ec8079-292d-409a-a736-bddf9af8d979
Certificate serial:       010D0C9F4328584E6B0A1D02F66AE988717A3780
Authority key identifier: 4F:1D:B2:21:08:86:59:09:1F:12:81:5A:33:08:93:1E:E6:08:97:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/ed91cb22-1490-3426-9685-bf740558dd1f.roa
Signing time:             Tue 07 Jul 2026 09:00:12 +0000
ROA not before:           Tue 07 Jul 2026 09:00:12 +0000
ROA not after:            Mon 05 Oct 2026 09:00:12 +0000
asID:                     46353
IP address blocks:        199.167.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/62ec8079-292d-409a-a736-bddf9af8d979.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/62ec8079-292d-409a-a736-bddf9af8d979.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6b:0a:1d:02:f6:6a:e9:88:71:7a:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62ec8079-292d-409a-a736-bddf9af8d979
        Validity
            Not Before: Jul  7 09:00:12 2026 GMT
            Not After : Oct  5 09:00:12 2026 GMT
        Subject: CN=01052b16-7d80-44a6-bc5d-c875aac9bd09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7c:40:2b:fa:e5:73:b4:0e:8b:a4:f0:33:fd:
                    f5:c9:84:20:e9:d0:61:e2:8f:ff:5f:0e:4e:4b:91:
                    36:81:4d:50:78:3f:ef:2a:1e:c3:05:ba:5f:1a:10:
                    7b:90:d2:84:27:e3:31:94:81:c4:6e:fa:34:8a:9a:
                    b2:d5:d3:4c:08:fc:92:fa:0f:77:e8:9b:d8:ad:e8:
                    88:bd:e2:1a:eb:19:6d:2f:25:1e:92:95:eb:0c:36:
                    2d:e8:e1:f4:50:7c:34:27:c9:8c:3b:c3:2b:28:8c:
                    96:df:a5:15:83:e2:37:9d:9f:a3:c6:89:8c:dc:e9:
                    3a:2f:90:96:46:9a:4b:e6:0f:68:ff:22:53:18:df:
                    af:6b:b4:48:b1:43:fd:58:75:e2:97:cf:5c:40:dc:
                    8e:71:6d:5e:93:8e:15:17:fa:1a:62:33:51:0e:df:
                    1e:e5:92:19:f4:96:b8:4f:d4:c8:de:6c:9a:ad:f3:
                    35:33:ab:21:03:7f:08:9a:e0:b7:78:ba:92:a6:f7:
                    2e:b4:dd:33:64:ed:af:bd:c4:5d:d7:9f:67:c4:11:
                    ad:38:52:08:a2:38:f4:49:bc:f0:d9:6a:4a:0b:d5:
                    5d:19:41:a5:cb:b9:52:f1:b5:53:53:6c:ff:01:01:
                    5c:90:27:cd:dd:a2:6b:99:8d:f9:c9:8f:b8:38:b1:
                    8b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:AE:F4:DF:13:ED:E3:4F:91:BF:91:1B:D3:73:0A:D1:38:12:C1:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/ed91cb22-1490-3426-9685-bf740558dd1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/62ec8079-292d-409a-a736-bddf9af8d979.crl

            X509v3 Authority Key Identifier:
                keyid:4F:1D:B2:21:08:86:59:09:1F:12:81:5A:33:08:93:1E:E6:08:97:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.167.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:ad:1a:b2:4b:e6:90:62:78:e0:f3:6e:0c:be:c2:b9:ce:b3:
         f1:53:84:b3:0e:74:62:e3:0e:1e:6b:a1:5f:8d:97:51:eb:47:
         85:3e:6f:bd:50:4e:55:7b:11:1a:20:d8:16:7f:5b:7d:04:38:
         8b:94:f7:28:34:ac:0c:78:e3:d8:16:3b:a7:dc:4c:44:b7:50:
         d0:a7:92:06:0b:ff:59:28:c4:a5:c4:cd:c1:55:3f:28:a2:cf:
         b7:02:21:38:35:d7:5b:cd:f9:97:c1:4f:18:6e:9a:3e:32:53:
         21:c3:da:dc:ed:2d:f6:30:dc:ff:99:79:61:19:13:56:67:ae:
         18:f9:2b:c1:13:e3:77:e2:d9:2e:6c:3d:c7:19:f5:b5:17:03:
         e8:bc:16:8d:1c:aa:81:30:e4:67:b4:4d:e2:cf:ce:1d:8f:73:
         f5:4a:d2:fd:2b:fa:fb:17:7b:27:95:8d:b8:0e:a9:d8:fa:f4:
         4b:b7:ca:f7:20:26:3a:7b:de:cf:ad:82:56:b0:0f:44:bc:08:
         a7:52:47:8b:6f:de:3a:d5:36:82:e2:9b:64:7e:9e:a2:89:10:
         dc:77:9d:12:41:84:20:a7:ff:93:49:15:e2:f9:e1:18:b5:2f:
         da:21:a7:d0:e1:92:bb:cd:08:09:24:61:52:08:09:4b:3f:ce:
         44:ed:ef:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:13:24 2026 by rpki-client