Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5ac062b2-a6b0-33eb-afd6-4bb37fcad826.roa
File:                     5ac062b2-a6b0-33eb-afd6-4bb37fcad826.roa (raw, json)
Hash identifier:          E82Mpp2SrkuAqVU3qt6HnMZo2xAtz+yBDwAu7l0OsKo=
Subject key identifier:   96:7B:D6:16:86:5B:EB:6F:A0:47:C5:BC:D3:6E:BC:0E:F8:1D:4A:68
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584D83CA8AB4FADB5A5F0C4D7380
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5ac062b2-a6b0-33eb-afd6-4bb37fcad826.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     577
IP address blocks:        70.55.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:8a:b4:fa:db:5a:5f:0c:4d:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=4acbaf01-31df-4777-a732-42b9bf1ee581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7d:46:fd:a0:e4:f3:8c:a5:0e:e6:67:47:5b:
                    92:84:1f:46:7e:6f:40:57:87:37:e9:a3:11:1e:08:
                    bb:33:80:1b:6a:53:28:dc:87:be:a4:d5:28:7f:b6:
                    0e:fd:3b:64:a5:76:07:38:fa:88:30:57:87:76:9b:
                    3b:24:78:01:b9:44:ab:2b:da:32:10:38:47:b8:b9:
                    23:33:c4:36:82:7f:8f:9d:15:34:08:fe:4c:f4:d6:
                    25:b9:37:2d:0e:9a:a9:d6:72:c1:c3:5c:31:0b:2a:
                    58:e4:f0:74:87:c2:f0:8f:9e:a0:7f:c0:a3:44:5a:
                    e5:89:62:a9:ba:d0:64:83:4e:7c:7a:87:77:26:8e:
                    4b:79:22:8f:9c:bf:b6:6b:b3:3b:86:4f:b1:d5:fc:
                    1f:ff:3e:84:59:85:98:24:22:69:8f:46:ff:5e:1d:
                    e4:10:5d:95:e4:7c:53:31:dd:73:48:20:fe:40:0d:
                    5f:93:ff:79:74:f1:ec:10:8e:ee:53:6f:d1:a5:ee:
                    73:b4:d4:a2:2f:72:6d:18:c8:17:6d:b4:c7:63:d7:
                    b4:df:c9:9e:40:2b:22:8e:b5:b9:b6:5b:d3:5f:8d:
                    91:1b:52:b8:67:a2:fb:3a:d5:9c:81:20:97:d5:c7:
                    4c:55:11:a6:fb:ca:0e:82:10:c4:f8:26:33:81:c9:
                    a3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:7B:D6:16:86:5B:EB:6F:A0:47:C5:BC:D3:6E:BC:0E:F8:1D:4A:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5ac062b2-a6b0-33eb-afd6-4bb37fcad826.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.55.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:4d:46:dc:90:11:7d:70:e0:16:61:c7:bb:ec:1a:13:96:12:
         3f:1c:d6:cd:6e:c1:15:d5:3a:c1:6c:89:10:11:11:30:c9:41:
         15:92:c4:a3:3e:4c:bd:32:39:06:11:ba:ac:16:db:c9:9a:2d:
         d6:20:d8:47:c8:53:b9:1f:36:32:11:cf:ea:38:8c:1c:76:e1:
         72:30:69:04:c7:03:bf:1d:48:2d:39:fd:b5:57:dc:ef:d0:63:
         19:92:d9:40:4c:a5:a0:8a:6c:6f:3a:82:22:07:ad:7c:7c:5b:
         64:01:c8:5c:0e:9c:17:46:98:fa:62:cf:c1:4f:b1:7e:dd:3c:
         c1:8e:49:c4:c5:3e:92:e6:e6:85:c4:83:30:c3:81:e1:74:30:
         11:28:89:75:2c:da:e2:6d:ed:43:d3:f1:7d:5b:c2:01:63:a5:
         e5:81:30:e0:5f:8a:0f:36:52:18:23:8c:6e:e5:90:15:4e:97:
         6b:da:4e:00:31:37:1b:24:2c:3f:cf:91:1b:a7:6f:a3:d7:d1:
         90:6a:ab:21:31:eb:19:10:9b:9a:9b:74:1b:69:b9:d7:2e:5f:
         0a:f6:e3:1b:70:3c:ab:21:89:9b:07:cb:f8:8e:f0:ac:df:3d:
         98:dc:44:7e:6c:a4:ee:e0:d7:e7:31:cf:0b:b8:1a:e9:21:d6:
         5c:7a:9a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:29:10 2026 by rpki-client