Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/eb86de88-6f75-3376-898d-f900ed22d5e4.roa
File:                     eb86de88-6f75-3376-898d-f900ed22d5e4.roa (raw, json)
Hash identifier:          cwpT2jx6kfF3rP8i4AJWHXHBOTgPOzlOzSgh5ZShyDA=
Subject key identifier:   90:28:04:BA:2E:B9:D5:1D:DF:59:B7:85:A2:B6:73:D1:F3:70:17:17
Certificate issuer:       /CN=1f479e13-55a1-4a5d-a002-1170a0ff5fd2
Certificate serial:       010D0C9F4328584F2C225B7905E874B3781B7960
Authority key identifier: A8:B5:D2:3A:B5:4F:B3:40:2F:32:2E:2C:2C:44:78:63:FA:56:58:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/eb86de88-6f75-3376-898d-f900ed22d5e4.roa
Signing time:             Mon 14 Sep 2026 13:00:12 +0000
ROA not before:           Mon 14 Sep 2026 13:00:12 +0000
ROA not after:            Sun 13 Dec 2026 14:00:12 +0000
asID:                     4150
IP address blocks:        162.218.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2c:22:5b:79:05:e8:74:b3:78:1b:79:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f479e13-55a1-4a5d-a002-1170a0ff5fd2
        Validity
            Not Before: Sep 14 13:00:12 2026 GMT
            Not After : Dec 13 14:00:12 2026 GMT
        Subject: CN=fd775532-5a26-41e4-a33e-aba497f353ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:60:c2:2a:36:bf:9e:34:5c:61:97:1e:08:d9:
                    8a:b8:dc:98:ef:f4:7d:3b:d4:2c:4d:07:17:b8:25:
                    85:0e:b1:f9:33:39:67:61:71:1d:30:67:b3:67:10:
                    c3:c1:52:94:6d:d9:33:24:f9:48:ab:9a:2a:36:e1:
                    03:d4:ce:5f:54:d1:81:1b:6e:ae:12:d2:76:61:32:
                    e9:57:a1:54:5e:cc:47:b5:c9:59:5f:1b:2a:eb:f4:
                    74:80:28:d1:f6:20:b1:20:7c:ff:20:94:04:37:4a:
                    48:1d:d2:b4:b7:0a:4b:60:08:fe:00:26:39:2a:9e:
                    8d:e2:a6:97:16:ed:8a:ab:27:9c:91:2e:8a:87:10:
                    8d:fc:50:a3:ba:4f:6e:8b:60:66:5f:4c:2c:06:87:
                    5c:14:02:ee:48:c4:ed:40:ad:a9:32:b3:6c:10:c2:
                    90:bb:96:0c:db:4a:3f:ec:f9:0c:78:fc:41:be:9a:
                    11:c8:9b:ce:17:fe:0e:cb:e4:8d:9d:46:50:50:b2:
                    0a:a0:c2:17:cc:bd:96:7c:bc:4a:9f:93:38:cb:6a:
                    e5:87:14:89:e0:b9:2c:28:aa:0b:14:5e:bb:87:2e:
                    3d:2e:53:00:87:9f:ed:75:74:91:4e:52:3f:32:46:
                    54:50:32:f2:67:74:c4:b6:78:8d:ea:31:75:81:5c:
                    be:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:28:04:BA:2E:B9:D5:1D:DF:59:B7:85:A2:B6:73:D1:F3:70:17:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/eb86de88-6f75-3376-898d-f900ed22d5e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.crl

            X509v3 Authority Key Identifier:
                keyid:A8:B5:D2:3A:B5:4F:B3:40:2F:32:2E:2C:2C:44:78:63:FA:56:58:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.218.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:d8:d6:71:2c:32:64:9c:8a:5d:61:74:4b:4e:97:f9:9f:35:
         a1:20:e5:1f:6f:28:9a:aa:f1:f3:02:db:5d:d6:67:32:b6:ff:
         95:b5:be:01:09:d8:e0:42:81:8c:d4:20:31:c2:86:16:03:34:
         01:e9:21:c3:ac:45:23:a3:43:70:e4:7d:00:85:80:68:dd:5a:
         1a:3d:26:49:db:d8:a1:73:90:c5:51:81:09:92:9b:f0:32:c6:
         1f:f4:13:ab:da:82:b3:8c:2c:70:97:1f:29:71:fc:68:66:65:
         99:3a:2e:44:af:31:8d:0b:19:58:e5:99:e7:ea:53:86:07:b1:
         24:bd:bd:47:1c:15:5c:c3:c1:8a:65:64:88:47:90:2c:2b:ad:
         cf:24:4e:9d:40:ae:e1:65:5d:f4:9f:b4:37:49:e5:70:49:d2:
         17:20:84:a2:c3:02:e0:da:9b:f5:0a:14:99:28:af:61:75:d9:
         5f:3e:1f:56:66:77:2d:1a:e7:c9:f5:42:98:fa:f9:f2:fc:14:
         a5:05:57:72:2a:10:67:41:69:b6:b4:f3:df:c8:7c:46:8b:42:
         7a:ff:ca:e2:89:87:17:3c:5a:10:2c:c9:37:16:36:26:ae:89:
         7a:65:ee:79:68:73:14:cb:03:ee:d4:b2:87:b9:75:dc:78:44:
         cb:f6:d9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 11:46:08 2026 by rpki-client