Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/d2a9c5c6-cc0e-3a2d-8039-f197749b2bae.roa
File:                     d2a9c5c6-cc0e-3a2d-8039-f197749b2bae.roa (raw, json)
Hash identifier:          1t5sHqWeCERZ5sSXAMfK0QjfVGenR8ideC/zL+rHYWg=
Subject key identifier:   47:0F:A7:86:AE:05:A8:85:A1:F3:7B:E0:F9:2D:42:3D:BE:20:13:0E
Certificate issuer:       /CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf
Certificate serial:       010D0C9F4328584CB2871AAFF30975DA139B6F00
Authority key identifier: 72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/d2a9c5c6-cc0e-3a2d-8039-f197749b2bae.roa
Signing time:             Fri 30 Jan 2026 14:00:40 +0000
ROA not before:           Fri 30 Jan 2026 14:00:40 +0000
ROA not after:            Thu 30 Apr 2026 13:00:40 +0000
asID:                     11426
IP address blocks:        64.84.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b2:87:1a:af:f3:09:75:da:13:9b:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf
        Validity
            Not Before: Jan 30 14:00:40 2026 GMT
            Not After : Apr 30 13:00:40 2026 GMT
        Subject: CN=0f070d39-2444-4659-bc84-0d254f19c01a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:48:18:bb:8a:2c:b5:68:99:15:7e:71:e4:46:
                    a5:44:d5:56:61:95:f2:ae:ad:fe:65:3e:8d:23:09:
                    73:18:9e:74:52:b3:01:1e:05:93:87:9e:cc:f9:d9:
                    ef:ee:42:4b:04:10:1e:fe:7f:99:5a:34:5d:13:35:
                    84:2b:92:b7:9b:0f:c8:67:1a:df:d0:ff:6f:38:af:
                    07:d6:a0:ac:72:a4:f9:56:f7:ce:28:3a:66:97:43:
                    6b:0f:da:89:e0:27:32:c6:c6:4e:79:a0:d0:ab:63:
                    2d:b4:93:04:99:14:aa:14:1c:83:05:11:49:74:85:
                    c5:c2:e8:06:09:d9:43:95:35:85:48:24:5f:80:19:
                    09:8f:ed:a7:cb:17:30:b4:87:c5:7c:bb:fc:cd:8a:
                    d8:a3:ec:47:a8:ae:f3:31:a6:87:52:5b:b2:f1:14:
                    08:9a:e5:4d:34:10:c4:c2:75:86:27:cc:47:ad:6b:
                    73:05:a6:61:e7:79:f9:09:cc:0e:0d:2f:5c:b6:39:
                    d5:47:e4:e9:aa:20:e5:02:da:59:1c:bb:63:b7:e5:
                    60:26:9b:0d:4b:ff:e1:91:29:01:f6:01:8f:45:ca:
                    61:d8:1f:59:d5:d3:6f:3a:a1:d5:c7:49:01:14:68:
                    97:7f:08:33:15:75:12:ab:1e:60:ad:bd:7f:51:71:
                    0c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:0F:A7:86:AE:05:A8:85:A1:F3:7B:E0:F9:2D:42:3D:BE:20:13:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/d2a9c5c6-cc0e-3a2d-8039-f197749b2bae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl

            X509v3 Authority Key Identifier:
                keyid:72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.84.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:b3:c4:e5:d3:7d:9e:ae:3d:4f:8f:8e:c9:0a:d0:62:9c:27:
         c3:c7:b3:4d:19:a8:d1:b6:66:15:dc:4b:0d:6a:c0:6b:6a:32:
         32:fd:e5:85:22:9e:58:01:17:10:5c:cd:5c:4b:b8:33:72:f6:
         00:ca:fa:92:f0:eb:57:c8:f1:25:d3:3f:37:be:ea:dc:f6:eb:
         51:47:5b:f3:0b:3a:71:74:fe:c1:3a:aa:ed:dd:31:a3:ee:07:
         4a:b8:f5:1d:52:1d:20:17:a1:d8:07:92:91:af:85:c5:45:a0:
         66:08:56:70:4f:5c:39:b1:3c:c7:34:48:d2:22:94:bd:2a:51:
         13:95:24:0e:56:7f:10:df:b6:52:4e:d3:4b:cf:a5:bb:ce:e5:
         13:b7:e4:42:4f:1c:f7:64:a7:ba:1b:78:a2:5e:9a:ba:00:5f:
         a6:c8:cf:a8:17:d3:56:ab:3c:7b:b9:e7:c1:22:91:4e:55:4c:
         1e:6a:a0:d3:4d:40:36:30:24:14:85:ed:05:7e:c4:42:7a:27:
         a9:ee:8a:a9:7d:a9:28:14:b4:d6:b4:db:97:1e:b3:c2:04:75:
         4b:4e:c7:b5:5c:26:c7:8a:a2:c1:93:c2:b0:57:3b:8e:b4:f0:
         35:01:60:6c:40:f4:04:16:c0:3b:7b:f6:62:95:06:8f:4b:48:
         23:18:66:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:24:52 2026 by rpki-client