Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f6c1245f-5982-39bb-95b9-e7fdb4133151.roa
File:                     f6c1245f-5982-39bb-95b9-e7fdb4133151.roa (raw, json)
Hash identifier:          /8R7qNp+VecGkqI6apWT1aiP7zElQuu0UAGvGvnqoGw=
Subject key identifier:   DC:87:00:8B:7B:82:E4:DD:FE:2E:20:AA:A5:55:84:9E:7D:14:16:E9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BA7D566007D09E5DD3C520
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f6c1245f-5982-39bb-95b9-e7fdb4133151.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     7015
IP address blocks:        174.168.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:7d:56:60:07:d0:9e:5d:d3:c5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=a9d0dafe-3cff-4c50-ba32-c88b7394158f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f0:3d:fe:c7:63:a1:00:31:5f:4b:0a:5d:60:
                    db:f7:a9:57:51:56:5c:5f:99:72:1c:15:0f:12:9f:
                    1e:d8:ab:1a:29:d3:77:28:27:13:66:0f:33:4e:84:
                    26:84:37:0b:1f:1c:aa:7a:74:7e:71:99:e2:f9:de:
                    62:41:62:ff:d5:6b:23:c0:0f:ab:27:cb:3b:be:3b:
                    3b:ad:12:df:d2:bf:b8:35:90:fa:d0:c3:33:06:f7:
                    e0:db:20:67:34:c0:1b:d6:78:df:4e:a0:7d:86:10:
                    72:6c:d1:87:91:86:a6:31:aa:4b:6d:4e:59:e4:46:
                    5f:90:ac:c0:fe:8c:30:97:fc:8f:c2:a1:0a:b8:26:
                    75:e3:6d:56:7a:af:fc:2c:51:20:87:28:eb:dc:b1:
                    09:fa:f5:c1:01:ef:96:3f:1f:bf:a0:bf:05:28:f4:
                    e0:a1:0c:9d:07:ba:70:f9:67:a9:82:a1:a4:53:42:
                    3f:00:62:0c:cc:5a:bf:c0:11:62:36:d6:aa:b3:84:
                    c5:78:74:51:65:6c:9a:3c:c0:de:4c:30:11:17:44:
                    1c:60:9c:50:63:57:df:cb:24:a0:e7:9e:c3:06:db:
                    d6:00:80:7d:fb:52:21:93:13:02:98:76:66:97:5e:
                    cf:da:67:b7:6d:5d:0b:f0:78:52:ad:30:5a:f3:49:
                    9c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:87:00:8B:7B:82:E4:DD:FE:2E:20:AA:A5:55:84:9E:7D:14:16:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f6c1245f-5982-39bb-95b9-e7fdb4133151.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.168.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:af:97:1f:e9:bc:ca:5c:dc:aa:31:b1:8f:06:d6:54:db:c2:
         23:55:e9:c7:88:7d:45:0d:6c:0f:fb:c6:17:d4:45:9a:d8:b0:
         45:d8:18:32:8d:bd:a1:a5:bc:50:d1:3e:bd:3f:71:a9:d4:c8:
         db:7a:d5:38:26:c5:28:ac:8b:ed:51:e3:e6:c1:60:d4:6c:5b:
         03:43:c8:44:4f:ea:1c:2f:af:aa:fb:cd:55:0a:97:1d:ca:dc:
         17:d4:e7:9e:d7:ba:9e:2c:c3:82:09:77:90:cc:74:69:3d:c2:
         39:d8:fa:84:a3:df:8a:c6:44:31:54:c1:11:30:17:6c:4b:99:
         f5:47:9c:25:d8:1a:c2:6d:08:a1:38:88:9f:06:1c:96:40:a4:
         1a:e9:de:69:51:f9:79:5a:ba:0d:3b:d1:30:2e:cf:72:06:8b:
         8e:79:d8:0c:52:6b:45:5f:7f:c4:69:33:b2:65:4b:e1:93:0e:
         af:8a:6b:76:64:08:f1:e3:5f:7c:d9:d8:3c:2f:50:8f:43:23:
         84:c8:54:97:ab:55:d3:dc:51:35:fb:2b:3b:d8:b2:82:d1:bb:
         21:26:b1:78:4c:08:43:6b:ab:e7:ac:29:41:e4:5c:2a:c0:ab:
         1c:5e:7c:4b:96:1d:dc:ed:67:91:c5:2c:b7:f9:1f:e8:c1:1c:
         cc:23:25:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:32:07 2026 by rpki-client