Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b94accf0-8067-4a9a-ba69-832d3d95402d/5e7201fa-0fc9-3bfb-b150-cb3db51ac63f.roa
File:                     5e7201fa-0fc9-3bfb-b150-cb3db51ac63f.roa (raw, json)
Hash identifier:          rvoR71JeJoUE5aLlaN7FYefkbDX5t8B0AXBBi/XRrE8=
Subject key identifier:   36:B3:A2:DF:B7:CC:00:0B:CE:90:99:3D:D0:41:74:AC:FD:AD:D4:B1
Certificate issuer:       /CN=b94accf0-8067-4a9a-ba69-832d3d95402d
Certificate serial:       010D0C9F4328584D83CAAC26592016F8738E5740
Authority key identifier: AE:8E:16:C6:CD:47:F7:01:8F:62:8D:0C:33:24:C4:A9:A4:5E:6E:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b94accf0-8067-4a9a-ba69-832d3d95402d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b94accf0-8067-4a9a-ba69-832d3d95402d/5e7201fa-0fc9-3bfb-b150-cb3db51ac63f.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     8075
IP address blocks:        170.62.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b94accf0-8067-4a9a-ba69-832d3d95402d/b94accf0-8067-4a9a-ba69-832d3d95402d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b94accf0-8067-4a9a-ba69-832d3d95402d/b94accf0-8067-4a9a-ba69-832d3d95402d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b94accf0-8067-4a9a-ba69-832d3d95402d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:ac:26:59:20:16:f8:73:8e:57:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b94accf0-8067-4a9a-ba69-832d3d95402d
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=57af3684-78ba-4b0b-99cd-bc0c610a5440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1b:11:43:33:6d:ed:7f:5d:87:33:5d:6c:48:
                    05:c5:52:17:87:e4:5b:e5:e4:fa:5d:5b:31:84:02:
                    a7:b6:93:da:6f:df:09:b9:08:6e:0d:58:d7:bc:3d:
                    5c:31:d3:6a:e1:27:1a:e3:a7:0a:a6:da:c4:30:5c:
                    c8:f2:81:9d:04:c0:aa:a1:70:6b:6e:6d:80:f3:ca:
                    dc:3d:53:54:a0:e0:10:8a:2c:ae:75:f8:54:99:67:
                    c9:5c:6e:7f:40:6d:36:2e:ce:03:ce:99:bd:3a:47:
                    f5:d8:f6:52:a5:9b:c7:05:a9:68:91:30:96:35:2d:
                    28:79:72:07:a2:03:ff:48:a0:cd:cf:ee:3f:1a:8a:
                    e7:46:79:5a:4e:c9:6a:c1:8d:6b:ae:cc:11:0d:8f:
                    23:3c:8f:cb:dc:b9:f0:76:b2:b5:2a:37:f0:3c:a1:
                    a9:3b:e8:47:50:e2:a2:14:de:5b:37:1d:a2:43:d5:
                    63:35:c5:8e:c6:22:c9:b6:f6:77:da:e3:35:03:f7:
                    d7:76:65:2a:5c:59:34:9e:ab:47:eb:56:f1:9f:63:
                    1b:7c:29:23:bd:87:a7:b4:4d:1d:92:0f:c9:d2:85:
                    38:27:11:02:81:c6:21:4d:5b:f0:1d:69:a1:9d:f3:
                    17:5c:60:64:c8:2f:f3:68:ce:4e:14:1e:6a:d2:6a:
                    b4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B3:A2:DF:B7:CC:00:0B:CE:90:99:3D:D0:41:74:AC:FD:AD:D4:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b94accf0-8067-4a9a-ba69-832d3d95402d/5e7201fa-0fc9-3bfb-b150-cb3db51ac63f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b94accf0-8067-4a9a-ba69-832d3d95402d/b94accf0-8067-4a9a-ba69-832d3d95402d.crl

            X509v3 Authority Key Identifier:
                keyid:AE:8E:16:C6:CD:47:F7:01:8F:62:8D:0C:33:24:C4:A9:A4:5E:6E:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b94accf0-8067-4a9a-ba69-832d3d95402d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.62.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:2c:98:e9:aa:0a:0b:2e:96:e3:2c:2e:15:df:34:33:eb:ef:
         50:46:96:e5:8a:15:72:8b:e3:b7:43:82:ef:c2:52:33:96:66:
         ec:8c:4c:a5:de:a0:23:6f:dd:c4:5f:44:35:e6:f1:89:4a:fd:
         78:f8:cb:17:72:dc:ce:d5:e3:ef:f2:1d:1e:99:fb:0f:1a:9c:
         c4:2d:86:c0:6f:f6:fd:f1:00:5a:b9:13:f0:a3:25:50:2e:7b:
         41:eb:87:4b:ad:fe:9b:31:c7:ed:0d:e1:95:c5:dd:08:5f:19:
         16:42:16:41:c4:1e:da:d5:1e:62:02:65:e9:a0:55:4e:f6:11:
         c5:8c:aa:55:98:8c:bd:d0:a1:cd:91:d3:ed:48:d2:14:15:10:
         50:84:e0:2e:c9:ef:01:c9:45:1d:fe:53:fc:cc:8b:75:f9:58:
         af:75:4c:eb:32:a6:ac:af:d7:76:16:d1:76:e6:4f:e6:8c:f6:
         df:00:a6:ed:07:12:0f:82:08:da:28:d6:6d:69:b7:4d:01:8c:
         75:6f:ce:cf:97:fc:35:28:fc:a5:0a:a1:d5:ae:9b:df:e1:73:
         0f:a2:02:10:2f:61:24:c1:fb:0e:d6:4c:8d:0e:9c:2d:03:d3:
         b9:98:b5:62:bf:4e:fb:56:69:0a:06:cf:a7:48:8c:95:54:bb:
         67:c1:97:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:35:44 2026 by rpki-client