Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47c6d301-f2b8-4ca1-a0ee-de814409c55f/82532317-88e5-36e4-a29d-83a6c02569b3.roa
File:                     82532317-88e5-36e4-a29d-83a6c02569b3.roa (raw, json)
Hash identifier:          w88/Bcd2/1sN8d5NgGtk0c0Oh0eZnJn7eb95z8YS/f8=
Subject key identifier:   2B:DC:F0:23:71:2E:B0:F7:D1:A5:6B:15:1C:56:62:7C:AE:5F:D7:4A
Certificate issuer:       /CN=47c6d301-f2b8-4ca1-a0ee-de814409c55f
Certificate serial:       010D0C9F4328584D8695595D6442D25E0BF59C00
Authority key identifier: B8:9A:36:FC:E5:12:9A:4A:E1:0A:DC:00:86:2C:AD:D5:DC:FF:6D:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47c6d301-f2b8-4ca1-a0ee-de814409c55f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47c6d301-f2b8-4ca1-a0ee-de814409c55f/82532317-88e5-36e4-a29d-83a6c02569b3.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     394195
IP address blocks:        172.103.36.0/22 maxlen: 24
                          208.103.177.0/24 maxlen: 24
                          216.246.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47c6d301-f2b8-4ca1-a0ee-de814409c55f/47c6d301-f2b8-4ca1-a0ee-de814409c55f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47c6d301-f2b8-4ca1-a0ee-de814409c55f/47c6d301-f2b8-4ca1-a0ee-de814409c55f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47c6d301-f2b8-4ca1-a0ee-de814409c55f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:59:5d:64:42:d2:5e:0b:f5:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47c6d301-f2b8-4ca1-a0ee-de814409c55f
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=3c053831-3bda-408b-93c2-e5dcb8b4246a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:76:f6:fd:11:9d:48:f6:e7:91:c2:24:57:42:
                    1b:a4:09:c3:f3:34:46:6e:d6:3a:da:4d:76:b3:66:
                    c9:01:fe:e0:50:64:3b:76:63:35:17:a9:e9:c2:1a:
                    bd:45:40:ae:d0:cd:a9:fd:f3:69:a3:ea:3f:46:4b:
                    bf:8e:84:3b:1f:5b:46:2c:df:96:2f:b8:09:cb:c6:
                    e8:82:47:f4:3f:b1:e9:c7:7d:2f:34:73:50:cb:35:
                    09:fa:b1:00:ae:97:57:62:77:ab:27:ac:df:10:5d:
                    55:cb:53:f9:6a:9a:ae:5a:f2:e1:4e:d1:e9:ac:51:
                    ad:07:f3:df:38:98:f2:48:b3:4e:fd:01:4f:35:fd:
                    5e:2d:44:9d:5d:dd:8b:30:0e:66:70:8b:97:7f:d7:
                    c2:12:40:99:03:48:53:2e:6f:50:a9:de:9d:a3:07:
                    fa:39:21:3e:64:39:07:12:cb:33:46:bd:70:ea:7c:
                    b3:2e:69:32:f0:26:93:89:4d:ca:44:58:75:73:82:
                    97:c1:a1:22:56:c2:f4:4d:09:25:46:8b:80:0d:ea:
                    e7:30:08:d0:f3:74:7c:eb:7b:f1:2d:42:34:91:4d:
                    a8:2b:23:a4:4f:20:2a:ad:b9:69:96:77:43:8d:96:
                    eb:24:25:2e:d5:df:a5:c1:58:f8:25:d0:d3:4e:bb:
                    b0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:DC:F0:23:71:2E:B0:F7:D1:A5:6B:15:1C:56:62:7C:AE:5F:D7:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47c6d301-f2b8-4ca1-a0ee-de814409c55f/82532317-88e5-36e4-a29d-83a6c02569b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47c6d301-f2b8-4ca1-a0ee-de814409c55f/47c6d301-f2b8-4ca1-a0ee-de814409c55f.crl

            X509v3 Authority Key Identifier:
                keyid:B8:9A:36:FC:E5:12:9A:4A:E1:0A:DC:00:86:2C:AD:D5:DC:FF:6D:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47c6d301-f2b8-4ca1-a0ee-de814409c55f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.103.36.0/22
                  208.103.177.0/24
                  216.246.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:10:67:eb:ed:ae:d6:1e:88:e5:00:57:68:a8:68:1b:68:60:
         be:1e:60:b9:71:7f:74:a4:eb:01:3f:52:97:95:9c:5e:24:66:
         a6:56:67:c5:9a:9a:19:16:fe:a1:d7:c8:3f:94:4e:56:d5:b3:
         df:83:c0:8c:82:bb:ae:5f:ce:13:c0:94:99:93:4b:77:6e:f0:
         a9:5f:9c:1f:b5:3a:2f:54:51:4f:e9:91:88:7b:e2:09:7c:89:
         70:71:7f:f0:53:59:06:a7:ce:46:08:a6:cd:58:04:27:bf:9e:
         12:2c:1a:89:d0:f1:2e:3e:15:da:ad:87:a6:3a:dc:2e:61:9c:
         be:d3:cb:02:c6:5c:39:5a:45:91:df:75:e6:37:dc:e1:94:4c:
         3e:e3:08:a1:cd:93:1f:f1:57:eb:8f:e1:1a:10:f8:3f:9d:2a:
         53:bd:a5:65:7d:22:3b:80:6a:37:b0:32:9c:54:c4:6c:fa:da:
         ac:53:11:85:fc:2b:b5:b0:de:ce:4d:f7:7a:3c:ab:1f:d8:31:
         87:6e:75:de:1c:81:81:9e:56:cc:30:4b:28:58:01:4a:eb:30:
         e1:f0:ca:b7:52:4c:b8:2c:7c:15:db:a6:86:c1:e0:c3:df:47:
         8d:e9:96:1d:64:2d:5c:ec:9c:26:e4:bf:ba:ce:90:b6:c1:b1:
         81:72:27:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:28:04 2026 by rpki-client