Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ee67a749-231e-3e89-a610-265ff62e0f05.roa
File:                     ee67a749-231e-3e89-a610-265ff62e0f05.roa (raw, json)
Hash identifier:          hItn5+6GDgFNU2FWUX0yELvEeTybkPEtReFAMm0lqd0=
Subject key identifier:   35:C2:87:9B:B8:DE:1F:0C:73:FB:DF:C2:12:4B:7A:A1:FC:B0:04:E8
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584D5B4FB011B7595E2A7252A0C0
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ee67a749-231e-3e89-a610-265ff62e0f05.roa
Signing time:             Wed 01 Apr 2026 01:00:23 +0000
ROA not before:           Wed 01 Apr 2026 01:00:23 +0000
ROA not after:            Tue 30 Jun 2026 01:00:23 +0000
asID:                     22616
IP address blocks:        170.85.180.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5b:4f:b0:11:b7:59:5e:2a:72:52:a0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Apr  1 01:00:23 2026 GMT
            Not After : Jun 30 01:00:23 2026 GMT
        Subject: CN=e7718b6b-ebb2-4091-b643-cf71d922484a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6a:49:c2:6c:5c:42:95:cd:eb:c8:b5:b0:65:
                    b5:c4:24:92:ae:d0:5f:bd:71:29:84:cd:f0:b0:78:
                    e8:75:65:c3:a2:e1:9a:d7:b3:0e:f7:f7:38:dc:05:
                    a0:8a:04:5f:6d:69:6c:de:d5:70:9d:2c:33:02:bb:
                    17:e9:e1:82:db:4c:7b:ac:a9:40:6b:97:eb:7c:f1:
                    c9:f9:f1:5b:4c:68:f5:15:77:ea:a6:0f:67:7b:57:
                    8a:9a:0a:01:e2:3d:97:fd:07:12:3d:38:d6:cd:b5:
                    11:76:73:5c:43:13:28:19:43:fd:16:a1:92:51:88:
                    41:9c:30:ed:c5:e8:94:94:12:83:0e:56:fe:87:e5:
                    18:e3:a4:ac:d2:5a:80:22:cc:39:ec:bf:48:3c:d8:
                    18:f4:fa:05:9f:02:6e:8a:9e:80:c8:43:04:29:0c:
                    c6:17:6c:b0:c0:29:1c:1d:bd:aa:9c:a9:2d:01:10:
                    d1:5f:7d:28:80:5f:c2:8b:6d:bf:0f:8c:37:da:4c:
                    c2:74:a9:c1:7d:67:56:98:ee:d8:5d:c1:34:ca:5f:
                    9c:8f:65:18:9e:1a:01:5d:c8:04:1b:3f:8c:03:52:
                    29:94:0e:d1:d5:2d:29:e7:da:cf:27:8a:85:35:cd:
                    de:5e:4c:e9:d5:6e:fb:4d:3c:ad:cc:b9:0e:21:26:
                    c2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C2:87:9B:B8:DE:1F:0C:73:FB:DF:C2:12:4B:7A:A1:FC:B0:04:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ee67a749-231e-3e89-a610-265ff62e0f05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.85.180.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:6c:1d:ce:39:77:0d:67:1c:fb:5e:b5:a5:62:8e:f7:f1:f1:
         b7:64:8e:f1:11:20:95:12:05:07:45:3b:05:d1:96:00:12:fa:
         6d:fa:47:99:17:a8:2b:6a:fa:51:9a:74:46:ab:02:c1:e4:a2:
         97:a0:0b:e7:4b:1c:8d:44:68:1d:7d:6d:7e:8a:95:1a:48:e3:
         2e:ae:17:87:05:7e:a7:2c:9c:78:51:c8:5d:e2:46:be:63:cf:
         03:e0:4f:d3:99:c4:ec:dc:71:3d:4f:9b:b2:36:03:61:9c:cb:
         56:da:0e:62:78:22:89:63:96:d7:cc:ab:43:c1:96:27:81:cf:
         6b:0c:b2:84:6d:09:31:49:59:cc:ee:57:aa:e3:82:25:51:0c:
         3b:d8:1d:ea:34:36:ed:92:eb:fb:6b:f5:69:50:12:48:0f:36:
         86:cd:eb:61:e7:5f:39:81:ae:8f:09:e6:0c:28:b2:25:aa:9d:
         a9:45:72:d4:c6:64:c0:4b:6d:b6:10:9c:10:70:f0:07:b1:ce:
         61:1c:14:c0:b6:e4:ef:f7:b4:ff:38:6b:fc:8e:5c:4b:af:20:
         f8:4e:66:86:06:34:10:ea:30:1d:b3:7a:58:12:5a:88:4e:55:
         11:72:11:57:f5:2a:76:9d:19:59:64:47:23:da:71:54:5a:38:
         31:0f:cc:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:41:48 2026 by rpki-client