Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/046edc58-3188-4be4-bad7-643a593bcf38/41007056-7b54-311b-9ee6-54dcd2cdbaba.roa
File:                     41007056-7b54-311b-9ee6-54dcd2cdbaba.roa (raw, json)
Hash identifier:          xkGmDdO5GllunAdtc3p0IVoVg2zQcDmpK2OikN6r8Ac=
Subject key identifier:   F9:8A:97:03:2D:1B:A1:0C:82:21:DC:30:5F:DA:1F:39:40:1E:CE:87
Certificate issuer:       /CN=046edc58-3188-4be4-bad7-643a593bcf38
Certificate serial:       010D0C9F4328584D624A60369041F2970AB0BF80
Authority key identifier: 31:EF:CB:6B:90:66:B6:32:B4:3B:90:67:CD:AF:1E:20:6E:47:FD:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/046edc58-3188-4be4-bad7-643a593bcf38.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/046edc58-3188-4be4-bad7-643a593bcf38/41007056-7b54-311b-9ee6-54dcd2cdbaba.roa
Signing time:             Fri 03 Apr 2026 13:00:30 +0000
ROA not before:           Fri 03 Apr 2026 13:00:30 +0000
ROA not after:            Thu 02 Jul 2026 13:00:30 +0000
asID:                     211590
IP address blocks:        170.39.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/046edc58-3188-4be4-bad7-643a593bcf38/046edc58-3188-4be4-bad7-643a593bcf38.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/046edc58-3188-4be4-bad7-643a593bcf38/046edc58-3188-4be4-bad7-643a593bcf38.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/046edc58-3188-4be4-bad7-643a593bcf38.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:62:4a:60:36:90:41:f2:97:0a:b0:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=046edc58-3188-4be4-bad7-643a593bcf38
        Validity
            Not Before: Apr  3 13:00:30 2026 GMT
            Not After : Jul  2 13:00:30 2026 GMT
        Subject: CN=58fcdb5b-aed5-4533-abab-34ff339cbcfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:27:9b:20:f6:7d:5b:8e:26:09:78:23:6e:17:
                    7b:5d:c8:dc:4b:b0:86:2f:fb:74:0d:81:25:dc:c6:
                    d3:54:ba:c5:fc:49:dc:0b:45:42:bc:c4:71:66:1c:
                    1c:5f:9c:4a:9d:15:ab:f3:77:0e:07:81:05:95:58:
                    0f:d5:ec:cd:73:3e:f6:86:4e:e0:ad:09:e1:ca:e5:
                    7d:74:a1:7a:23:b4:31:7f:35:e7:8e:67:cb:9f:6b:
                    77:66:3c:55:05:b9:0f:e0:ec:f8:48:d4:5e:0c:04:
                    af:3d:f3:cd:92:96:35:3c:64:ef:69:24:1d:3a:0e:
                    87:86:96:4c:4a:2a:7b:e8:b8:58:aa:46:e2:5a:db:
                    14:9f:70:88:da:f5:c0:aa:dd:2c:40:08:6b:fe:4f:
                    75:ba:46:3f:fb:e3:53:99:73:86:73:01:fb:1a:f0:
                    69:25:05:70:04:b1:11:e5:05:ed:bc:7f:90:29:c2:
                    eb:d0:94:91:1d:dc:b3:51:6a:49:0b:3b:1f:bf:fb:
                    31:fa:63:29:2d:88:b4:ad:86:b9:86:4b:8d:5b:e2:
                    ed:ab:9c:c8:6a:51:56:77:e3:2d:dd:43:c8:a8:a8:
                    e6:bf:89:6d:b4:be:26:c7:71:3f:cf:e2:34:3d:23:
                    a1:39:a6:9c:11:a3:11:dc:e0:cd:be:53:05:91:51:
                    fb:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:8A:97:03:2D:1B:A1:0C:82:21:DC:30:5F:DA:1F:39:40:1E:CE:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/046edc58-3188-4be4-bad7-643a593bcf38/41007056-7b54-311b-9ee6-54dcd2cdbaba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/046edc58-3188-4be4-bad7-643a593bcf38/046edc58-3188-4be4-bad7-643a593bcf38.crl

            X509v3 Authority Key Identifier:
                keyid:31:EF:CB:6B:90:66:B6:32:B4:3B:90:67:CD:AF:1E:20:6E:47:FD:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/046edc58-3188-4be4-bad7-643a593bcf38.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:e4:c9:ea:b6:7b:37:b5:9e:b3:52:73:49:6f:3f:31:d3:ff:
         1b:27:a4:35:17:b8:d2:85:2b:68:81:25:b1:2b:0f:40:c1:92:
         cf:d0:94:a1:25:dd:7c:23:0a:6b:d1:84:60:a1:16:36:ea:9e:
         9d:c1:c8:23:86:b1:e7:37:87:f0:42:b9:fd:e7:ec:ae:21:cf:
         25:08:b8:25:53:57:1e:e2:2a:53:63:73:06:a2:be:69:66:5a:
         53:0e:b6:b5:cf:53:1d:05:5d:b1:65:31:e1:f5:75:bb:3c:f6:
         0a:c8:f0:2b:cb:3e:8a:6e:41:d4:ec:62:84:a6:2a:7e:08:dc:
         e6:4f:9c:bf:1a:14:5b:df:6d:04:15:fa:9a:20:9e:6a:23:c5:
         90:6e:7a:28:6a:45:07:ae:1a:9e:ab:b9:87:2c:ee:38:4d:af:
         95:6f:c3:5e:04:35:9f:6f:39:f8:85:7f:b0:82:9d:96:13:94:
         da:a8:57:f9:11:11:d5:d6:c6:0f:59:d0:0d:5e:4d:f3:ad:e6:
         50:95:22:c9:e4:f5:43:7b:6e:6f:be:9c:61:8a:02:e0:8f:de:
         a5:7e:20:b5:e2:8d:ed:5d:fb:78:98:30:f5:75:74:34:47:23:
         0a:27:16:bc:b8:c0:a5:6e:64:fe:f5:d5:06:93:77:6f:a9:35:
         15:bd:84:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:29:55 2026 by rpki-client