Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17/28478ea8-97a9-39be-a056-923c01c65688.roa
File:                     28478ea8-97a9-39be-a056-923c01c65688.roa (raw, json)
Hash identifier:          WPc8WzTNSepvWqHK+bHMZzwmUzwSCREFTwfbz/AZN9E=
Subject key identifier:   68:2B:75:EA:A0:A7:A7:D6:5C:C1:F6:52:1E:8A:65:C9:6A:7D:C2:E9
Certificate issuer:       /CN=e979f6fc-bc29-44d7-bb62-f74ccc584c17
Certificate serial:       010D0C9F4328584E921FA144AFBEA396C49D1840
Authority key identifier: 87:43:29:DF:52:16:E7:B9:FA:C2:B1:BF:40:4B:1A:6C:FC:E8:23:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17/28478ea8-97a9-39be-a056-923c01c65688.roa
Signing time:             Tue 21 Jul 2026 09:00:12 +0000
ROA not before:           Tue 21 Jul 2026 09:00:12 +0000
ROA not after:            Mon 19 Oct 2026 09:00:12 +0000
asID:                     22147
IP address blocks:        162.219.96.0/22 maxlen: 24
                          162.219.98.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17/e979f6fc-bc29-44d7-bb62-f74ccc584c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17/e979f6fc-bc29-44d7-bb62-f74ccc584c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:92:1f:a1:44:af:be:a3:96:c4:9d:18:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e979f6fc-bc29-44d7-bb62-f74ccc584c17
        Validity
            Not Before: Jul 21 09:00:12 2026 GMT
            Not After : Oct 19 09:00:12 2026 GMT
        Subject: CN=1a71d53f-0c7f-4e52-80d3-9570b146cad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:93:b3:bc:d6:3a:a5:9d:30:68:49:45:63:19:
                    03:79:03:6a:1f:e6:b4:d9:24:a5:ea:13:09:63:36:
                    41:1c:61:30:17:17:c1:e0:96:1a:d5:00:5c:9e:d5:
                    ba:e1:c4:3c:40:79:86:74:72:de:3b:e6:a3:e1:ce:
                    7c:26:20:ab:c4:04:bf:5c:13:bc:d3:d6:fb:62:75:
                    2b:48:fe:90:37:f9:df:e2:41:d5:c9:4a:13:e7:99:
                    aa:4e:af:62:8a:00:d4:69:47:d8:9d:31:de:55:39:
                    ff:87:14:fe:75:57:fb:cd:47:29:1f:13:8c:38:c0:
                    35:3e:74:c2:8a:76:6b:54:c0:23:9b:ec:a2:c9:c1:
                    95:3d:2d:ae:81:3a:3a:e8:f0:19:47:53:a6:77:78:
                    8f:5e:72:d4:96:3e:32:79:3b:86:4f:69:3b:78:c8:
                    ab:26:b1:46:dc:16:ad:f6:ba:ca:41:1c:d7:19:f3:
                    bd:29:8d:a3:4d:50:f2:85:60:3e:a3:b5:72:33:07:
                    a3:32:9a:3a:1f:4e:83:67:a2:53:7b:20:d6:f6:c0:
                    4d:3b:11:0d:9e:2d:b1:48:f5:f9:6b:06:ed:c6:82:
                    a1:e7:47:c2:98:52:3e:49:56:4f:32:2e:c7:a4:8a:
                    84:58:e5:8d:69:00:35:40:9b:9a:04:02:ad:b5:02:
                    69:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:2B:75:EA:A0:A7:A7:D6:5C:C1:F6:52:1E:8A:65:C9:6A:7D:C2:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17/28478ea8-97a9-39be-a056-923c01c65688.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17/e979f6fc-bc29-44d7-bb62-f74ccc584c17.crl

            X509v3 Authority Key Identifier:
                keyid:87:43:29:DF:52:16:E7:B9:FA:C2:B1:BF:40:4B:1A:6C:FC:E8:23:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.219.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:50:82:84:90:07:77:d4:dc:52:e7:05:80:0f:5c:6a:13:8f:
         fc:fe:74:60:b3:e0:c1:eb:7b:18:aa:37:b9:a6:fa:de:c2:6e:
         64:97:61:7a:9b:6f:c2:c2:fd:82:60:6f:63:ae:a7:17:07:bc:
         82:aa:aa:3d:43:88:b7:92:47:da:72:42:d0:13:40:c1:ee:1d:
         2b:c1:8e:27:f9:c6:18:5b:ea:1e:5e:a3:e7:64:67:00:c8:fa:
         0f:6e:18:43:34:ef:27:39:94:bb:76:b8:0e:6b:43:fd:ff:fa:
         74:e7:8a:09:23:49:1f:bf:30:21:1b:e8:73:ca:3f:3a:80:60:
         72:60:37:dd:01:90:4e:af:5a:0e:42:b4:74:f3:03:d4:57:bd:
         55:b8:40:4b:7e:e3:60:9e:76:99:66:a7:c1:48:dc:83:82:53:
         9c:ab:30:32:e2:56:79:51:18:a7:4a:e9:d6:4a:fe:70:40:d2:
         09:32:09:1d:72:54:94:3c:5d:fa:43:4a:df:e4:ec:49:56:e6:
         7b:cb:1e:43:95:51:c8:32:c2:52:0b:cd:69:1d:2a:12:00:2a:
         73:f5:a2:9f:d0:da:24:bc:aa:1f:d7:6e:13:80:f8:cd:72:d7:
         96:63:e0:7f:ba:ff:5b:e2:9b:4c:67:a0:90:d7:dc:16:f1:6a:
         41:17:19:e8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6SH6FEr76jlsSdGEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk3OWY2ZmMtYmMyOS00NGQ3LWJiNjItZjc0Y2NjNTg0
YzE3MB4XDTI2MDcyMTA5MDAxMloXDTI2MTAxOTA5MDAxMlowLzEtMCsGA1UEAxMk
MWE3MWQ1M2YtMGM3Zi00ZTUyLTgwZDMtOTU3MGIxNDZjYWQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpOzvNY6pZ0waElFYxkDeQNqH+a02SSl6hMJ
YzZBHGEwFxfB4JYa1QBcntW64cQ8QHmGdHLeO+aj4c58JiCrxAS/XBO809b7YnUr
SP6QN/nf4kHVyUoT55mqTq9iigDUaUfYnTHeVTn/hxT+dVf7zUcpHxOMOMA1PnTC
inZrVMAjm+yiycGVPS2ugTo66PAZR1Omd3iPXnLUlj4yeTuGT2k7eMirJrFG3Bat
9rrKQRzXGfO9KY2jTVDyhWA+o7VyMwejMpo6H06DZ6JTeyDW9sBNOxENni2xSPX5
awbtxoKh50fCmFI+SVZPMi7HpIqEWOWNaQA1QJuaBAKttQJpnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGgrdeqgp6fWXMH2Uh6KZclqfcLpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOTc5
ZjZmYy1iYzI5LTQ0ZDctYmI2Mi1mNzRjY2M1ODRjMTcvMjg0NzhlYTgtOTdhOS0z
OWJlLWEwNTYtOTIzYzAxYzY1Njg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk3OWY2ZmMtYmMyOS00NGQ3LWJi
NjItZjc0Y2NjNTg0YzE3L2U5NzlmNmZjLWJjMjktNDRkNy1iYjYyLWY3NGNjYzU4
NGMxNy5jcmwwHwYDVR0jBBgwFoAUh0Mp31IW57n6wrG/QEsabPzoI6swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lOTc5ZjZmYy1iYzI5LTQ0ZDctYmI2Mi1mNzRj
Y2M1ODRjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCottgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF9QgoSQB3fU3FLnBYAPXGoTj/z+dGCz4MHrexiqN7mm+t7CbmSXYXqb
b8LC/YJgb2OupxcHvIKqqj1DiLeSR9pyQtATQMHuHSvBjif5xhhb6h5eo+dkZwDI
+g9uGEM07yc5lLt2uA5rQ/3/+nTnigkjSR+/MCEb6HPKPzqAYHJgN90BkE6vWg5C
tHTzA9RXvVW4QEt+42Cedplmp8FI3IOCU5yrMDLiVnlRGKdK6dZK/nBA0gkyCR1y
VJQ8XfpDSt/k7ElW5nvLHkOVUcgywlILzWkdKhIAKnP1op/Q2iS8qh/XbhOA+M1y
15Zj4H+6/1vim0xnoJDX3BbxakEXGeg=
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:21:19 2026 by rpki-client