Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/cc3199e9-ef8a-38ab-8b3e-8e94e40fdef1.roa
File:                     cc3199e9-ef8a-38ab-8b3e-8e94e40fdef1.roa (raw, json)
Hash identifier:          9OHc8OKKi5vzB8/B4Sii+6ePOa9SwV4k2iX9hUn0xYc=
Subject key identifier:   1D:1E:F7:D8:93:35:F7:65:61:CE:FB:E3:FC:DB:82:E6:91:03:0F:0E
Certificate issuer:       /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
Certificate serial:       010D0C9F4328584CB3EC5AF07CFB29AFFC2524C0
Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/cc3199e9-ef8a-38ab-8b3e-8e94e40fdef1.roa
Signing time:             Sat 31 Jan 2026 02:00:32 +0000
ROA not before:           Sat 31 Jan 2026 02:00:32 +0000
ROA not after:            Fri 01 May 2026 01:00:32 +0000
asID:                     7029
IP address blocks:        202.165.72.0/21 maxlen: 24
                          202.182.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b3:ec:5a:f0:7c:fb:29:af:fc:25:24:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
        Validity
            Not Before: Jan 31 02:00:32 2026 GMT
            Not After : May  1 01:00:32 2026 GMT
        Subject: CN=36169b18-77a2-4d20-b6bc-ff3065905e7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:15:5b:fe:6f:4c:8c:2d:bf:f8:25:90:c1:46:
                    fb:34:ac:f7:9c:2e:1c:4b:50:43:1c:cd:47:66:a8:
                    58:5d:53:fc:c5:a4:99:60:f5:b9:6e:4e:f7:83:ef:
                    f6:be:59:c6:22:7c:54:a8:98:7b:0b:24:bc:b8:44:
                    4f:11:07:71:4e:0c:0f:98:84:24:e7:28:3f:ae:24:
                    79:31:cb:70:3f:0f:99:67:e4:33:e6:ce:12:f6:6e:
                    62:90:41:1b:6d:f5:70:3b:1b:bb:02:75:82:87:bf:
                    96:7e:df:72:fc:cb:14:18:ec:22:7d:54:cc:ac:4d:
                    9e:98:3d:44:78:9c:15:a8:b0:2a:f4:8a:7b:f6:a5:
                    e1:d6:c1:63:47:38:27:b2:6b:b8:3c:1a:07:2f:c8:
                    41:0e:f0:7f:52:72:18:be:08:76:bc:b3:94:2e:e0:
                    d1:39:3b:93:a1:47:3e:dc:cf:82:fc:0e:4a:55:3f:
                    d0:f5:c7:4f:72:e0:dc:5b:f2:94:02:e1:b0:2e:83:
                    01:4c:7e:8a:45:ff:a9:35:d5:ca:15:11:3b:82:82:
                    a5:06:30:60:e0:12:87:b5:88:38:b4:22:b1:6c:0e:
                    a2:88:cc:fa:5d:e5:b7:e1:c0:00:49:2c:06:7c:11:
                    5a:6f:3f:c8:d0:cf:7e:32:e1:2c:86:a7:bd:3b:b6:
                    a8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:1E:F7:D8:93:35:F7:65:61:CE:FB:E3:FC:DB:82:E6:91:03:0F:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/cc3199e9-ef8a-38ab-8b3e-8e94e40fdef1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl

            X509v3 Authority Key Identifier:
                keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.165.72.0/21
                  202.182.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:92:b1:55:46:e2:7d:eb:a9:50:1c:06:ba:99:22:d2:52:07:
         d9:60:37:26:f5:52:b5:cd:12:02:3f:28:c0:3c:48:cb:b1:5d:
         a9:b0:6a:4a:7e:de:0d:d0:83:d1:21:ae:1b:42:60:e1:15:89:
         a7:2a:05:4a:2b:8f:4d:90:24:7d:07:ab:13:54:28:1a:d6:ff:
         2b:7a:2f:6c:cb:ef:55:79:b3:0f:28:a0:4e:2e:3d:91:f9:8f:
         d3:c7:78:d1:68:01:59:77:60:6f:2e:8a:97:58:8e:e8:ec:dd:
         5d:78:6c:37:db:50:4a:7b:98:cc:21:65:48:35:1d:cc:88:42:
         fa:3b:1b:f9:25:f6:28:93:ff:e1:ad:dc:20:5b:cd:7d:e5:6c:
         ae:d6:4c:db:cd:0c:3e:b3:ba:ad:2e:b1:d2:e5:dc:52:71:20:
         ef:2e:85:ed:3e:72:84:5a:0d:b3:78:44:97:75:f7:b2:50:e8:
         49:67:a1:bf:db:95:70:70:b4:ce:81:07:84:62:27:d5:f3:24:
         17:30:21:1c:ef:69:a8:8c:40:03:b7:d2:d7:0f:3d:a2:01:07:
         34:55:e2:0c:8e:3d:56:a4:5a:d8:52:0f:77:c2:bf:22:5a:54:
         34:22:93:e6:7c:bd:30:ea:94:f1:af:76:03:e7:66:c3:e9:c3:
         7c:fb:44:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:31:35 2026 by rpki-client