Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/703f5f39-4ca1-3844-a475-708e53f14853.roa
File:                     703f5f39-4ca1-3844-a475-708e53f14853.roa (raw, json)
Hash identifier:          DBhbb7nJFLs4R/NAd2XoVpWYbLUaXy3fg+5EjLyM+p0=
Subject key identifier:   21:62:6D:D4:23:19:EB:7F:FC:BE:E7:84:00:26:F5:C9:50:73:D3:12
Certificate issuer:       /CN=4746a92d-5f69-4264-863f-81298a3d93ed
Certificate serial:       010D0C9F4328584CD99CF05076DB21F65AA04C00
Authority key identifier: 81:6F:5D:9C:52:44:D7:10:29:C6:8B:DE:2B:66:72:BA:A6:9A:1E:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/703f5f39-4ca1-3844-a475-708e53f14853.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     36114
IP address blocks:        72.46.128.0/22 maxlen: 24
                          76.164.192.0/22 maxlen: 24
                          76.164.206.0/23 maxlen: 24
                          104.143.10.0/23 maxlen: 24
                          2605:6f80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/4746a92d-5f69-4264-863f-81298a3d93ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/4746a92d-5f69-4264-863f-81298a3d93ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:f0:50:76:db:21:f6:5a:a0:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4746a92d-5f69-4264-863f-81298a3d93ed
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=482d8af9-8a6e-49e3-a4ef-2a7d26f32a09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:47:57:3c:f8:b0:41:a8:29:72:4f:51:d6:39:
                    b4:b6:61:f4:5d:24:6e:f9:95:31:c7:20:93:90:6f:
                    56:75:73:9c:03:f8:9b:c5:99:05:97:53:c0:4e:46:
                    32:9b:17:38:20:1b:c8:43:98:4d:3f:21:ce:8f:aa:
                    fe:4d:d7:b5:0f:58:ee:5f:37:fa:5d:24:46:4c:10:
                    09:e2:82:52:3a:05:05:87:cf:25:5e:87:35:f3:a6:
                    68:95:af:2e:16:d8:2a:31:90:86:3b:f9:cf:1e:6e:
                    c3:c2:4c:9a:2b:a0:b7:5c:35:bd:ce:85:b1:89:c7:
                    c2:96:4d:96:01:c5:1f:53:f6:52:ff:35:3b:6c:d9:
                    4f:7e:dc:e9:ec:ac:e1:e9:62:53:9f:af:c1:f8:62:
                    3a:1b:28:a8:b1:56:d5:1b:0c:9f:fa:6e:56:df:04:
                    79:f7:ef:f9:b0:3f:0e:bb:97:67:31:0d:1f:4d:38:
                    4a:62:d3:a8:03:f8:f3:b0:c6:53:ff:e3:66:21:b8:
                    5b:89:2d:48:42:7c:6c:31:31:8e:cb:7b:b5:ea:ab:
                    9d:cd:a2:53:17:79:c8:bd:e7:d4:b3:e5:cc:ac:3d:
                    be:91:b6:ae:e8:11:2b:a5:d0:09:e0:e1:06:68:83:
                    66:0b:99:99:04:50:7c:2b:43:18:74:c0:8e:d1:fa:
                    9f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:62:6D:D4:23:19:EB:7F:FC:BE:E7:84:00:26:F5:C9:50:73:D3:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/703f5f39-4ca1-3844-a475-708e53f14853.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/4746a92d-5f69-4264-863f-81298a3d93ed.crl

            X509v3 Authority Key Identifier:
                keyid:81:6F:5D:9C:52:44:D7:10:29:C6:8B:DE:2B:66:72:BA:A6:9A:1E:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.46.128.0/22
                  76.164.192.0/22
                  76.164.206.0/23
                  104.143.10.0/23
                IPv6:
                  2605:6f80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:30:48:89:89:2a:18:e5:91:e9:6d:33:44:c9:4f:41:b9:8d:
         77:f7:1f:fc:92:dd:29:c7:43:15:f9:51:58:96:b1:a6:b6:a7:
         8a:97:42:d5:7c:05:7d:d0:35:77:9a:9b:71:c5:3a:83:6f:1a:
         05:e5:14:75:d8:bd:82:ef:1c:d4:af:b5:c5:27:9f:40:33:f6:
         0c:57:d7:f0:7d:39:63:57:55:45:bb:6e:8b:93:16:3d:25:60:
         2c:b1:a7:da:72:8a:06:02:f5:42:69:4d:3c:99:c5:e2:97:e6:
         f9:11:1f:bf:bf:fa:fc:50:c7:d0:dc:00:12:07:9d:5e:9b:95:
         cd:c1:7e:31:e3:61:1a:d5:c5:c0:8e:49:b4:96:89:c6:35:7b:
         b6:17:62:0f:aa:13:88:2c:28:8c:19:ed:d6:86:d4:90:21:6e:
         b2:29:8c:90:aa:6e:7f:20:71:e4:fb:d8:63:36:58:14:b6:a8:
         ef:cc:1e:7c:d1:14:ea:57:08:f3:dc:62:41:ce:f8:ad:57:54:
         cd:78:78:22:46:c5:4f:fd:2c:cd:43:bb:76:1a:34:b8:ba:ee:
         17:72:e4:de:2d:10:f9:78:f1:e3:96:ca:97:03:a3:cf:bf:2c:
         c3:2c:6f:14:ec:4f:c8:ea:02:23:5c:70:c2:fd:01:de:06:75:
         fe:34:d0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:09:36 2026 by rpki-client