Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/a2e7e277-d2c4-3201-b501-0a1f9a8b848e.roa
File:                     a2e7e277-d2c4-3201-b501-0a1f9a8b848e.roa (raw, json)
Hash identifier:          2S18tyTlci85Jcwyh4UKmrJD/MAgzob0omSzNFlF3LM=
Subject key identifier:   F3:6C:8B:3E:E4:05:8D:9D:67:D4:FB:C8:A5:A0:8E:C1:0F:15:6E:2D
Certificate issuer:       /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Certificate serial:       010D0C9F4328584CB287345328B483EAE413D440
Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/a2e7e277-d2c4-3201-b501-0a1f9a8b848e.roa
Signing time:             Fri 30 Jan 2026 14:00:40 +0000
ROA not before:           Fri 30 Jan 2026 14:00:40 +0000
ROA not after:            Thu 30 Apr 2026 13:00:40 +0000
asID:                     9009
IP address blocks:        172.84.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b2:87:34:53:28:b4:83:ea:e4:13:d4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
        Validity
            Not Before: Jan 30 14:00:40 2026 GMT
            Not After : Apr 30 13:00:40 2026 GMT
        Subject: CN=e61bf41a-697e-4387-8751-ab105610c771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:de:b5:46:4b:10:9e:d5:4c:64:60:61:2d:8e:
                    8a:f7:99:a1:07:0a:4f:5a:00:97:de:71:c4:f3:2a:
                    4c:a7:fc:fb:ca:44:35:96:86:9a:20:c6:c9:b8:b5:
                    34:dd:0a:b1:c2:b8:4d:0b:c7:d8:a4:ed:de:69:75:
                    71:ee:b7:36:cc:12:f1:54:b5:62:91:3a:ff:97:20:
                    fd:8f:bb:d0:c2:cf:66:6d:0c:46:c6:5e:ce:5e:5c:
                    ef:96:0e:22:3e:2e:cb:cd:fc:e4:bd:66:13:74:26:
                    8e:2d:ae:00:14:f8:36:72:05:42:02:4b:ef:b4:36:
                    3d:1e:81:32:bc:2a:72:dd:4b:3e:89:03:75:03:c2:
                    e3:f9:30:68:8f:9c:0a:1c:73:14:2f:86:15:25:8f:
                    74:12:6c:2c:af:97:11:d7:8e:27:b4:1b:44:50:79:
                    fa:b6:47:c2:41:56:38:6c:35:26:2d:7c:34:19:a9:
                    6e:03:c5:6d:ad:0b:1d:f3:4c:ca:21:8f:3e:d7:0d:
                    69:ed:f9:c5:64:16:d9:b8:a3:01:7f:64:3b:24:43:
                    06:bc:40:eb:51:d8:74:64:8c:82:62:ba:13:37:83:
                    30:31:11:2f:89:0e:8e:7c:22:87:20:95:50:50:eb:
                    cb:5a:20:a9:97:5e:5f:ad:52:9d:c3:fe:78:95:cc:
                    49:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:6C:8B:3E:E4:05:8D:9D:67:D4:FB:C8:A5:A0:8E:C1:0F:15:6E:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/a2e7e277-d2c4-3201-b501-0a1f9a8b848e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl

            X509v3 Authority Key Identifier:
                keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.84.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:8d:fd:d2:5c:1a:a4:b3:5c:09:5f:f0:5d:d6:3d:35:c1:fa:
         2f:da:8b:a0:02:84:ab:21:77:7c:74:cf:58:ac:ab:3f:50:9f:
         4f:28:78:6c:2b:e4:99:d3:61:c8:6d:5f:cb:73:1e:25:35:fa:
         3d:1c:52:7f:2d:01:8d:fe:30:09:d7:1d:4f:10:83:40:18:05:
         92:d9:86:47:a4:f1:a2:8e:d5:95:14:6b:f8:47:41:e5:47:d2:
         6e:97:85:9c:03:7a:06:78:b5:e0:a3:ac:06:25:43:da:54:19:
         19:e2:62:67:ee:6e:91:83:a0:e4:27:c7:08:7a:45:e7:80:62:
         b5:f0:3a:3e:4f:10:4b:58:15:07:22:ee:0b:cf:ee:e8:ff:4c:
         14:4e:b7:24:fa:0a:26:99:18:c7:b0:fa:09:9f:08:a4:26:31:
         42:8f:6f:1c:78:b5:ab:a3:dd:33:fa:19:ce:53:da:f8:c8:31:
         c9:d4:5c:40:6c:86:8e:50:72:8f:be:73:a0:0b:74:02:f0:41:
         1a:3c:3d:98:36:15:ef:a7:51:16:b1:25:7b:b6:a8:ad:47:cf:
         6c:26:61:5a:15:36:f6:81:bd:f8:b2:8d:4f:9a:5d:2c:37:95:
         b3:e3:b7:3a:3f:26:62:8c:1e:3e:bf:ee:a7:21:fb:ed:e3:45:
         5f:d2:87:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:44:11 2026 by rpki-client