Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2d058dde-c74c-32d0-b305-5c96d40e13cd.roa
File:                     2d058dde-c74c-32d0-b305-5c96d40e13cd.roa (raw, json)
Hash identifier:          LNVIO6YU6HkRwr++WViX4pxuiosum60amKpKsWSC37Q=
Subject key identifier:   26:BF:61:55:3C:95:7F:14:60:87:23:8C:D3:06:FE:14:A4:18:5A:C8
Certificate issuer:       /CN=2ac961ff-f406-4f80-b06d-e1284358815a
Certificate serial:       010D0C9F4328584F49892C04E5CDA7C83095C300
Authority key identifier: F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2d058dde-c74c-32d0-b305-5c96d40e13cd.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     22472
IP address blocks:        162.248.64.128/30 maxlen: 30
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:2c:04:e5:cd:a7:c8:30:95:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac961ff-f406-4f80-b06d-e1284358815a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=42f91ff7-c2f8-47bd-8b52-e9763f127eb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:50:06:4a:71:2b:81:1a:c9:49:76:0a:f1:5f:
                    c3:78:94:61:02:0e:05:36:e4:d5:df:11:73:e3:98:
                    97:73:70:b2:cb:27:93:4b:c8:3d:2a:83:52:a4:81:
                    4f:91:8c:6a:2e:2b:f2:0a:8e:0a:70:47:d9:cc:b5:
                    aa:e3:7b:7a:ba:95:bf:7a:ff:56:58:ac:3a:ca:47:
                    73:f9:b5:28:e7:00:fa:07:cc:c4:67:2a:0d:26:c0:
                    ca:05:ff:aa:59:68:d7:88:9e:70:3d:2d:04:b4:e9:
                    f1:e8:c2:f0:1b:aa:ef:94:21:49:96:6a:80:5d:fd:
                    10:20:2b:48:20:6f:54:7b:66:44:58:c6:6a:d4:17:
                    02:f9:e5:98:d1:b7:9c:7f:ad:de:aa:17:01:f7:e5:
                    ef:80:0d:b2:b7:0c:5d:46:29:a7:9e:f9:d7:2c:44:
                    ee:2a:27:32:c7:ea:da:66:46:4a:23:5d:29:ce:a6:
                    d8:c2:03:e6:69:5c:7a:cb:b9:48:29:ac:c8:62:f6:
                    6f:cb:34:81:3c:05:46:93:6a:20:ab:97:bc:e5:20:
                    f3:53:15:91:a2:ce:70:6c:c2:fe:7b:00:cc:a5:e4:
                    01:ab:d4:e1:37:81:58:c7:1c:19:af:e2:ca:0f:00:
                    0b:b2:b1:5c:ac:fa:1f:9b:0e:aa:0d:b8:63:ac:63:
                    a3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:BF:61:55:3C:95:7F:14:60:87:23:8C:D3:06:FE:14:A4:18:5A:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2d058dde-c74c-32d0-b305-5c96d40e13cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl

            X509v3 Authority Key Identifier:
                keyid:F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.248.64.128/30

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:ca:7f:62:11:41:2d:ac:97:da:50:74:ca:ce:11:50:89:2c:
         17:95:49:25:6b:98:1e:fa:96:08:08:e7:b5:2c:c0:0d:4b:31:
         37:6d:d6:77:0e:bf:8c:73:34:1e:a2:78:8c:78:b6:ba:88:b8:
         f4:cb:93:db:0d:7c:88:06:a5:55:b3:62:a5:58:46:09:8d:de:
         8d:6e:b6:13:36:b0:8e:58:22:a5:e0:c2:67:0b:41:c4:a0:99:
         04:c2:18:fb:24:9d:b3:58:09:8e:dd:7d:a9:5f:10:d2:29:59:
         87:2d:a2:81:b3:40:6d:4e:38:a8:01:39:f3:04:0f:56:c6:82:
         8e:74:26:31:5e:45:bd:13:5d:89:ea:76:20:23:0d:14:ae:54:
         59:bb:06:6e:46:cb:36:b5:3e:e8:a4:b5:98:5c:ca:2e:30:36:
         7e:76:6e:4e:f1:56:59:ab:9d:5a:bc:d7:d9:d1:1c:41:98:b7:
         b6:e4:d5:dc:c9:ef:f4:5d:1b:19:01:80:45:95:b6:a6:35:dc:
         51:35:d4:05:29:50:e3:e3:ea:d5:8d:06:2d:c0:31:f2:a0:c5:
         5e:d8:7d:4d:59:13:ba:62:a5:88:2b:4a:a9:b9:33:c9:19:e3:
         f8:67:c7:ea:40:4b:ce:c4:95:4d:fc:37:ac:1a:2f:60:58:74:
         9a:2e:a4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 14:37:16 2026 by rpki-client