Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49a6f19d-ac8c-31c8-b48e-f818285b1328.roa
File:                     49a6f19d-ac8c-31c8-b48e-f818285b1328.roa (raw, json)
Hash identifier:          lh+hKPvdRG04v6ZEaR2nbCx9Do1DKyCgJzf45sq2Fmo=
Subject key identifier:   BC:B3:2B:B7:CE:DB:56:F9:82:43:FA:D0:02:B9:AA:76:A3:1F:25:34
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE59624EBFA9EF126A2EC180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49a6f19d-ac8c-31c8-b48e-f818285b1328.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33660
IP address blocks:        174.52.48.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:59:62:4e:bf:a9:ef:12:6a:2e:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=34b26b87-f32d-4d19-a399-35d7d0b9cf17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c3:67:90:37:df:20:94:12:ac:d5:22:c0:bd:
                    68:00:82:9f:61:7d:37:98:ca:a2:ab:85:9a:7b:1a:
                    8e:b4:b5:20:60:f4:de:83:66:7a:9c:aa:6d:b4:de:
                    3e:77:1f:06:34:fb:2e:ba:f3:1b:a9:c9:db:2a:a0:
                    ff:62:cb:c9:9e:a3:9f:ac:d0:f5:6d:50:4e:02:d4:
                    e0:cd:70:d7:55:c8:43:69:25:14:af:bc:16:35:88:
                    c1:dd:f8:32:27:b0:a0:be:1e:28:83:76:9e:30:03:
                    8a:be:c2:c5:68:0c:86:8c:bc:64:65:be:33:6d:21:
                    39:17:75:ed:5b:ff:bd:f1:5a:ec:5f:a1:92:c5:fe:
                    43:d0:de:93:db:8c:e3:b1:0c:8a:1b:73:9e:1f:96:
                    ad:6d:83:c3:d9:40:41:fd:a9:71:b1:60:05:5d:6e:
                    1f:d1:7c:4c:c5:8a:df:f1:3b:bb:a5:77:da:fc:be:
                    fc:3f:fe:c6:f4:d9:34:02:b3:2b:3e:0e:f9:42:f1:
                    f1:cd:a3:bd:95:0f:51:84:3b:4e:86:1b:b3:02:6c:
                    fb:1d:e8:de:07:7f:f7:fc:7b:bd:2e:f3:73:57:ab:
                    1f:41:b8:fa:fc:99:62:0f:8d:35:f2:c1:42:03:69:
                    9f:5c:31:2a:33:69:d3:68:8f:d5:16:26:95:a9:9c:
                    45:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B3:2B:B7:CE:DB:56:F9:82:43:FA:D0:02:B9:AA:76:A3:1F:25:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49a6f19d-ac8c-31c8-b48e-f818285b1328.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.52.48.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:09:4c:6c:79:75:a6:f2:47:6d:e5:36:93:82:9a:0e:fb:92:
         a6:15:18:58:05:24:28:c4:93:f3:ea:36:01:64:f9:c6:06:bf:
         a7:72:b2:c4:7d:9b:4d:08:d5:7c:75:e5:79:2f:dc:a8:40:28:
         27:59:ee:33:e1:5b:46:bc:3e:78:70:87:99:1a:12:a3:1e:f5:
         ee:07:42:b5:12:e3:d7:da:63:c8:34:5e:2d:18:98:6b:47:a2:
         fe:54:fa:6b:ea:de:59:02:24:f6:69:54:c7:bd:7a:6f:97:75:
         8e:ed:29:48:d1:ec:0a:02:3d:5c:02:92:e1:fb:45:7f:ba:be:
         44:95:d8:86:37:ec:b1:88:b7:02:95:4c:10:a5:02:52:d7:df:
         8e:78:ae:f6:df:19:64:40:6e:87:de:b0:d0:f2:3f:cc:fc:31:
         f3:5e:5f:1d:f2:b4:fc:18:05:fb:50:2c:41:15:d0:8b:f2:f0:
         e3:c2:95:05:de:4e:5b:d8:4a:df:15:33:8d:bd:30:9c:4b:5e:
         0b:ec:54:4a:6f:d7:61:20:7a:9b:0d:20:f4:02:ad:ed:68:03:
         f8:bc:7a:08:e1:f8:4b:a3:09:0f:4c:54:d1:00:ef:22:21:0d:
         e4:20:94:98:7e:6c:29:86:20:30:39:b7:f5:01:01:0b:3a:e7:
         5a:eb:13:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:11:34 2026 by rpki-client