Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/06a16a61-6f9c-35c3-84de-2806dd454047.roa
File:                     06a16a61-6f9c-35c3-84de-2806dd454047.roa (raw, json)
Hash identifier:          QQTMnHpZApBGMN2UqKI6YXi2IlYv1vESxvqA3j2vKU0=
Subject key identifier:   58:3E:20:8B:E3:F3:B5:E0:D5:FA:6F:80:A7:1E:6D:00:AB:EE:E3:EF
Certificate issuer:       /CN=37d6a0ba-c124-4540-b5ef-6ab20943af24
Certificate serial:       010D0C9F4328584CB81C885ED7A09083D3D32700
Authority key identifier: 3F:C6:68:B4:FB:02:1A:DC:55:78:B5:D4:5F:11:F2:04:AC:FD:D4:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/06a16a61-6f9c-35c3-84de-2806dd454047.roa
Signing time:             Sun 01 Feb 2026 14:00:40 +0000
ROA not before:           Sun 01 Feb 2026 14:00:40 +0000
ROA not after:            Sat 02 May 2026 13:00:40 +0000
asID:                     14618
IP address blocks:        162.212.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/37d6a0ba-c124-4540-b5ef-6ab20943af24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/37d6a0ba-c124-4540-b5ef-6ab20943af24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b8:1c:88:5e:d7:a0:90:83:d3:d3:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37d6a0ba-c124-4540-b5ef-6ab20943af24
        Validity
            Not Before: Feb  1 14:00:40 2026 GMT
            Not After : May  2 13:00:40 2026 GMT
        Subject: CN=7516ef55-b862-4b4c-86fb-ae66a51c3001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b5:de:a8:cf:09:24:07:56:bc:7a:b7:63:de:
                    12:a3:46:86:6e:b4:db:5c:a7:08:5c:e4:30:80:63:
                    30:21:c1:dc:fe:5c:b5:52:f2:f8:21:48:4b:fc:bd:
                    13:01:30:d8:43:fc:6c:b0:28:dc:51:ca:cd:78:67:
                    9d:d8:3b:6f:fc:bc:06:3a:e4:19:bb:3a:22:96:23:
                    40:b5:26:2f:32:3e:ba:b0:8e:d7:2f:44:6a:39:69:
                    47:25:49:f1:99:8b:5a:1b:08:8f:b9:85:52:18:13:
                    77:79:f6:c3:84:f2:a9:36:a4:58:b0:e3:95:8b:34:
                    b9:18:37:21:88:c1:cb:49:da:a3:50:16:02:c1:c1:
                    26:85:2c:22:a2:51:2c:f3:55:37:dc:a4:ad:d2:1a:
                    ad:46:80:39:63:b4:ed:20:c4:72:66:8a:e5:6e:07:
                    bc:e3:ba:13:bf:ce:b8:58:ea:01:8e:0b:44:b7:9f:
                    f0:fe:bd:e9:f1:41:e2:f2:ef:e9:81:9d:a6:43:05:
                    41:9c:5b:8b:55:11:f1:45:18:1d:bc:0d:99:53:62:
                    18:7d:8f:02:83:6e:81:ff:4d:65:ef:ea:1b:59:20:
                    10:c4:86:27:0c:6c:c1:ea:4a:75:06:21:e1:54:5c:
                    c7:8e:c5:92:66:85:1b:9c:10:24:cf:bb:ad:d6:45:
                    da:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:3E:20:8B:E3:F3:B5:E0:D5:FA:6F:80:A7:1E:6D:00:AB:EE:E3:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/06a16a61-6f9c-35c3-84de-2806dd454047.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/37d6a0ba-c124-4540-b5ef-6ab20943af24.crl

            X509v3 Authority Key Identifier:
                keyid:3F:C6:68:B4:FB:02:1A:DC:55:78:B5:D4:5F:11:F2:04:AC:FD:D4:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.212.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:55:81:af:02:1e:38:2a:37:73:5a:2b:1f:30:60:38:a9:4e:
         41:73:ad:5f:ce:7a:30:5e:4c:a0:22:77:65:ad:10:9a:70:bd:
         da:8e:9b:ac:88:43:77:17:46:fa:7f:c1:45:95:6b:dc:11:3b:
         e6:32:9c:ec:98:ce:0c:34:d3:e4:55:5b:57:63:8f:2a:26:90:
         5b:a1:f0:19:0f:19:1b:f5:5d:28:66:51:7a:aa:1a:a7:79:0f:
         97:44:27:a5:bc:ee:4e:66:f6:62:8d:30:0f:a4:e5:b7:6c:8b:
         a6:8d:58:45:fc:5b:fa:d4:3d:95:66:d8:76:9c:11:a9:51:37:
         79:41:5d:03:11:0a:a6:8e:6b:5d:8c:88:58:da:7a:87:bd:2e:
         1a:77:e4:01:77:08:66:18:78:22:56:ea:5a:7d:db:5e:6b:5e:
         c7:01:ca:29:99:c4:2f:0e:54:10:be:a8:41:44:34:ab:b2:66:
         e1:36:97:ee:39:2f:0f:12:e5:8a:33:ae:d7:24:27:89:19:45:
         8f:ab:c5:09:12:9c:b1:e4:36:20:94:83:fa:57:60:7d:a6:d0:
         8b:e5:c4:27:00:02:5a:04:2d:91:b0:17:89:28:50:17:c5:b1:
         c0:84:52:4f:35:45:bc:71:66:ee:b7:a3:76:7b:c0:41:41:1f:
         d3:21:10:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:25:38 2026 by rpki-client