Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/376815db-2a35-3f76-bafa-0b1653000f0b.roa
File:                     376815db-2a35-3f76-bafa-0b1653000f0b.roa (raw, json)
Hash identifier:          5SiNKDxM7Ey2JOBb7as4s6TDTvjLprEhO+Kt0rkACx0=
Subject key identifier:   72:33:34:AE:35:BE:90:C4:79:EF:3F:78:DE:58:C2:81:A7:49:0C:E8
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F4328584E1E4450DF8497F19EA469B800
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/376815db-2a35-3f76-bafa-0b1653000f0b.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     50304
IP address blocks:        172.102.222.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:50:df:84:97:f1:9e:a4:69:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=989866c6-5407-430d-b8b7-b53d11f522d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:39:d6:5f:4d:17:94:c0:80:9f:2f:22:05:ae:
                    45:e6:24:dc:c2:67:0e:dc:bb:6c:db:0c:52:87:06:
                    0a:b6:85:c2:59:89:93:53:3d:56:01:29:57:d1:dc:
                    95:f6:f7:19:ac:c6:f0:ec:eb:6e:64:08:7c:4b:23:
                    4b:f4:9e:c7:ad:06:d5:9c:8e:ec:c6:6a:35:d7:3b:
                    b6:27:33:f1:73:db:b7:4a:28:5e:9f:16:cf:9a:8e:
                    a2:8c:44:44:b6:2f:a4:87:34:c3:0c:50:86:37:51:
                    b8:5d:9a:48:40:a8:cf:e8:22:09:a8:e0:57:00:2c:
                    25:94:31:f6:8a:e3:68:8f:d7:c5:7b:00:eb:8f:07:
                    cd:c3:d0:20:a2:f2:af:7e:5d:07:4a:fa:db:d1:d0:
                    40:be:86:d6:7a:f4:41:7b:d0:a5:82:47:52:d1:cc:
                    31:d9:cd:72:8b:98:f6:02:2a:0d:73:97:d9:fe:dd:
                    e5:fc:80:25:2a:bc:70:2a:78:98:cb:2b:20:bd:58:
                    bf:4f:f0:9f:d8:fc:6d:5e:17:42:52:0f:cd:21:a9:
                    a2:4f:03:93:7a:b8:2e:cb:c1:e9:59:49:a4:c8:0a:
                    f4:82:89:ad:6f:72:f3:b3:e1:99:cb:fe:9c:4a:f2:
                    15:ae:9a:0f:89:06:f7:6e:b0:8c:1e:30:24:c3:ba:
                    e0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:33:34:AE:35:BE:90:C4:79:EF:3F:78:DE:58:C2:81:A7:49:0C:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/376815db-2a35-3f76-bafa-0b1653000f0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.102.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:bf:d5:bc:7c:e3:5a:ec:86:fa:28:1e:5a:2e:92:65:ec:84:
         59:40:f6:dd:7c:70:77:f5:2d:60:1f:15:6d:26:f4:0e:5b:58:
         46:83:8c:ff:8f:f5:b9:2b:c1:97:03:6a:87:11:ee:02:5d:4b:
         fe:35:16:55:4c:38:6b:02:33:ef:fa:f1:41:5f:8d:a0:5a:ce:
         c0:ad:a8:7c:d6:cb:7c:3e:a5:b6:85:3b:8b:f0:92:03:40:bc:
         be:f0:61:d4:88:8e:16:ca:35:9e:d4:be:c2:b8:d1:a2:8c:b3:
         7b:72:0e:26:bf:cf:c8:96:48:3d:ea:db:f4:31:93:68:7d:0e:
         cc:f9:06:00:6c:cb:65:30:1c:91:e3:02:b4:ba:66:52:63:2c:
         be:66:ca:02:ac:9a:61:91:d7:e5:16:16:7e:a8:52:02:88:29:
         34:d5:fa:bc:f0:50:68:d5:91:0e:37:1a:dc:14:e7:2f:bd:77:
         ab:d4:c3:0b:8c:51:6f:dd:6b:c4:26:41:ca:4a:f0:9f:94:eb:
         35:72:2f:db:ba:3e:c6:ad:0c:6a:27:01:82:2e:64:d4:65:7c:
         55:51:66:88:f6:5d:2e:25:13:ec:ea:1d:d3:e9:fc:fe:48:f9:
         fe:d6:b8:49:3f:c0:93:b4:c1:1d:9b:74:ba:ef:e7:1a:96:f1:
         b4:d7:c3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:06:19 2026 by rpki-client