Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/22b4377d-f762-33b6-a5f1-c7c3f92831e5.roa
File:                     22b4377d-f762-33b6-a5f1-c7c3f92831e5.roa (raw, json)
Hash identifier:          Nau2AhexDf0pdSsZiaKhSAMmPnQWQQFUU7x8jyjmsUo=
Subject key identifier:   1E:DA:3E:20:35:DE:35:07:E0:2D:49:E9:D1:B4:60:2B:FE:C0:F8:CD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DBD05CD4F7B5A76B5A2ED1C40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/22b4377d-f762-33b6-a5f1-c7c3f92831e5.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     701
IP address blocks:        162.84.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:cd:4f:7b:5a:76:b5:a2:ed:1c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=20d71e7f-8db9-4e8f-a79f-c6cf412f0fbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7c:54:ad:c0:99:4b:c5:25:e8:97:59:4f:3b:
                    11:0d:3d:da:a8:b5:1e:40:fd:b9:b2:cb:97:f2:fd:
                    0f:c1:06:76:d6:79:1e:0f:47:b3:b1:00:15:a8:47:
                    75:44:7a:be:0d:88:e8:46:ee:2b:2e:15:0a:64:e0:
                    59:83:65:10:28:49:41:22:6f:3d:b0:e6:18:3c:90:
                    8a:64:c8:4d:47:52:be:93:c1:96:35:1b:cb:5c:4f:
                    8b:17:64:14:12:f2:60:ac:69:29:f8:82:56:cd:a7:
                    5d:4d:5e:3c:16:a0:6e:bb:6b:e1:72:16:fe:58:2b:
                    72:58:ac:13:23:d8:26:d4:ab:65:8c:27:fd:bc:bc:
                    85:2a:cd:85:dd:27:ff:ec:e5:05:28:31:a3:40:e0:
                    90:31:b8:6d:d3:ff:37:17:dc:88:e6:ba:4d:8d:a8:
                    56:17:df:d6:f1:27:cb:74:fe:37:d8:9c:b4:9b:1e:
                    c5:11:5a:3f:8f:4e:be:3d:c5:dc:d1:55:90:be:48:
                    5d:d4:c8:ff:4e:ae:50:76:3d:6a:0e:cd:0b:16:66:
                    cd:0d:05:0c:f5:95:18:70:3c:95:29:18:df:9a:ca:
                    8b:9e:5c:0a:32:02:af:30:2d:ad:a5:52:17:f6:a3:
                    84:b4:d3:17:99:32:96:d4:6b:c3:c3:93:c2:b3:2b:
                    d5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:DA:3E:20:35:DE:35:07:E0:2D:49:E9:D1:B4:60:2B:FE:C0:F8:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/22b4377d-f762-33b6-a5f1-c7c3f92831e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.84.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:c4:60:d4:ec:e4:fa:75:9b:1b:b5:b6:41:2d:9f:44:3b:9c:
         a5:e9:cf:06:b2:ef:54:06:b5:9d:8e:78:b4:28:07:d4:22:1c:
         a2:bb:5e:54:6b:29:2f:02:ab:1c:ae:70:02:43:f6:c5:0c:1f:
         81:b4:5a:9a:3f:1e:35:36:60:6d:1e:fe:a6:94:24:1e:e7:94:
         9c:c0:8a:cc:dd:f4:53:25:de:d4:ae:f7:1d:86:fe:31:b7:5e:
         d6:e7:84:19:81:bb:60:23:c3:1f:54:e2:1b:64:cc:7b:96:91:
         35:12:b0:a4:e6:3a:6a:38:e0:1f:f3:80:14:f0:d7:2c:73:e1:
         b9:3c:4f:a9:fd:c7:5a:d3:5d:6e:3f:59:25:8f:07:fd:56:9f:
         2b:e0:35:a0:59:e3:99:e5:43:8d:df:dc:d8:e5:61:1c:49:65:
         5f:e9:ad:1d:57:d4:de:61:d2:47:77:92:4a:91:e8:8b:99:6f:
         0d:68:1f:ed:53:04:ee:1f:9c:79:55:2f:10:8d:f1:95:5c:5b:
         04:81:22:a3:2c:08:bf:34:c8:32:a7:8f:f2:5c:83:60:2c:4a:
         62:30:f7:0c:13:35:14:7d:88:a4:83:26:69:4e:b9:29:d0:bf:
         37:57:0b:e6:1b:d9:0c:c6:f9:05:11:34:f6:73:75:8e:5b:c1:
         aa:cb:1a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:35:13 2026 by rpki-client