Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/be5ce567-3052-403a-b81b-6f1137bb499e/d8b653b0-e373-3888-9c40-b63643669956.roa
File:                     d8b653b0-e373-3888-9c40-b63643669956.roa (raw, json)
Hash identifier:          eVnQOdhfeCQdhgtM4OiQrYBgyA4a83lE6XavZLexSdg=
Subject key identifier:   6A:B4:A2:EC:55:3A:FB:4D:83:FB:BC:59:61:63:EE:39:25:49:5E:B7
Certificate issuer:       /CN=be5ce567-3052-403a-b81b-6f1137bb499e
Certificate serial:       010D0C9F4328584DCAFB201468150827022A7880
Authority key identifier: DD:45:01:16:2F:8F:A4:29:D9:45:62:52:6C:DE:62:EA:88:43:D7:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/be5ce567-3052-403a-b81b-6f1137bb499e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/be5ce567-3052-403a-b81b-6f1137bb499e/d8b653b0-e373-3888-9c40-b63643669956.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     36061
IP address blocks:        170.62.164.0/22 maxlen: 24
                          2602:f9c2::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/be5ce567-3052-403a-b81b-6f1137bb499e/be5ce567-3052-403a-b81b-6f1137bb499e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/be5ce567-3052-403a-b81b-6f1137bb499e/be5ce567-3052-403a-b81b-6f1137bb499e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/be5ce567-3052-403a-b81b-6f1137bb499e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fb:20:14:68:15:08:27:02:2a:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be5ce567-3052-403a-b81b-6f1137bb499e
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=27b75302-bf3d-46e0-bcb1-554d53c2d733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cf:b1:23:7f:7a:86:23:16:6b:b9:a6:dc:2d:
                    f4:10:92:79:2c:97:d2:27:49:10:a0:de:60:70:8e:
                    ee:68:a6:7e:90:89:18:37:94:70:aa:f7:93:31:72:
                    d7:65:d2:51:aa:3b:97:8a:a0:30:f2:6f:02:c1:56:
                    dc:12:bc:d0:91:95:3b:d2:50:1e:b7:e1:20:14:5b:
                    dc:fb:5c:e6:97:20:53:0f:fb:ba:23:35:1d:07:8a:
                    a5:c0:77:dd:6a:89:62:7f:e3:80:1f:26:da:c4:e4:
                    bc:fc:12:1c:83:1c:44:1e:04:2d:8e:0a:35:e7:4b:
                    28:b7:e4:ab:3b:40:17:b8:70:da:a4:45:17:df:42:
                    ac:07:73:96:05:98:d4:fa:08:66:bb:4e:8b:19:2d:
                    ed:b1:e2:fa:df:89:90:17:ca:08:ee:dd:fb:5f:1c:
                    c1:51:ae:46:7b:04:d5:9a:9d:e1:3e:ff:32:26:75:
                    7a:52:cd:45:0a:ac:e4:35:41:36:5e:db:c6:fe:9b:
                    d7:c4:f7:1b:dd:c6:af:d1:bf:8c:2f:88:39:44:9e:
                    3f:c4:65:ca:28:77:82:09:4d:ee:63:71:bd:a4:4b:
                    fe:80:c7:0d:d6:20:ed:87:c9:52:92:aa:b2:a2:8f:
                    23:a2:03:e9:c2:fd:ab:83:ef:cf:4c:09:f8:8b:ad:
                    ae:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B4:A2:EC:55:3A:FB:4D:83:FB:BC:59:61:63:EE:39:25:49:5E:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/be5ce567-3052-403a-b81b-6f1137bb499e/d8b653b0-e373-3888-9c40-b63643669956.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/be5ce567-3052-403a-b81b-6f1137bb499e/be5ce567-3052-403a-b81b-6f1137bb499e.crl

            X509v3 Authority Key Identifier:
                keyid:DD:45:01:16:2F:8F:A4:29:D9:45:62:52:6C:DE:62:EA:88:43:D7:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/be5ce567-3052-403a-b81b-6f1137bb499e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.62.164.0/22
                IPv6:
                  2602:f9c2::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:cc:71:24:3b:9f:5c:9f:c7:4d:63:0e:25:7d:7a:50:f4:d3:
         56:1e:5c:00:af:fd:46:a9:14:28:79:1e:e7:55:2d:ae:97:d5:
         32:44:66:c8:83:0a:92:35:fd:e5:f2:ae:b2:0c:50:e1:84:df:
         2a:6d:37:35:39:cf:4e:97:5a:19:e0:cc:e2:88:6f:dc:2c:4d:
         91:79:65:7f:d6:36:08:f7:23:5c:a1:c5:8e:3d:70:35:0e:30:
         0d:e9:87:e2:b5:09:36:ea:48:13:5c:5c:85:1b:4e:21:3e:cb:
         25:7f:7d:ad:3a:d2:0f:10:26:d9:76:49:ae:54:72:01:5d:73:
         d5:e0:bc:31:11:0b:4e:37:e5:38:59:1f:d3:38:54:06:1e:a7:
         15:a3:e4:fc:9d:39:e0:fe:22:e3:d8:6a:fc:cf:ab:51:41:2a:
         34:f1:68:d2:27:48:3a:d7:a1:85:c9:ab:a7:4e:0b:72:de:bd:
         ca:80:d8:86:1b:51:17:3e:01:19:ea:ce:0b:0c:ac:f7:cb:f7:
         97:0c:f7:62:f2:b1:0e:95:c9:74:5f:aa:8d:14:bd:6a:28:f1:
         41:b6:c7:5f:dc:2f:2a:55:88:cc:5d:a2:6d:bd:8e:26:64:4c:
         fa:b0:28:c3:d9:4f:12:87:d5:3b:f4:d1:8a:36:16:5c:20:c6:
         89:ab:ed:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:08:57 2026 by rpki-client