Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/acd6507c-4f88-3ba8-a356-fe09ba417a69.roa
File:                     acd6507c-4f88-3ba8-a356-fe09ba417a69.roa (raw, json)
Hash identifier:          CDl0PAdMjVEmiuu8iTNe1sEqb5dXKhSN4bk2MGJpEww=
Subject key identifier:   61:CA:9A:A5:E3:6F:70:91:04:FE:FE:C0:F7:A3:28:BB:ED:97:4A:5B
Certificate issuer:       /CN=abdcc2e2-c99a-4bc5-8c10-f78c4275050a
Certificate serial:       010D0C9F4328584CCA41E6F289C9BEB044E961E8
Authority key identifier: B7:49:5B:25:C2:C3:4E:84:0F:EC:3E:9F:7E:E4:B8:5A:C4:00:D6:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/acd6507c-4f88-3ba8-a356-fe09ba417a69.roa
Signing time:             Sun 08 Feb 2026 02:00:32 +0000
ROA not before:           Sun 08 Feb 2026 02:00:32 +0000
ROA not after:            Sat 09 May 2026 01:00:32 +0000
asID:                     40755
IP address blocks:        172.98.4.0/24 maxlen: 24
                          174.136.252.0/24 maxlen: 24
                          2606:3040::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ca:41:e6:f2:89:c9:be:b0:44:e9:61:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abdcc2e2-c99a-4bc5-8c10-f78c4275050a
        Validity
            Not Before: Feb  8 02:00:32 2026 GMT
            Not After : May  9 01:00:32 2026 GMT
        Subject: CN=45727632-9859-4040-bc6c-ec3a70bd7593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a6:70:b4:48:35:f5:08:da:48:1c:09:95:de:
                    39:3e:14:e1:55:96:d5:f4:d6:33:8c:61:e2:7e:3d:
                    ed:73:d6:0d:da:f1:66:4b:a4:29:4b:75:d2:4b:74:
                    0b:08:11:87:24:ad:b9:ca:c2:88:56:00:53:d4:b4:
                    35:e3:6f:78:d3:33:47:4b:85:91:a6:de:9c:9e:76:
                    55:1e:39:3a:e8:d4:ba:35:e1:fe:78:a1:67:a3:91:
                    95:bf:e8:7f:1d:d5:29:a2:23:12:89:97:6f:52:d4:
                    67:82:16:4e:af:3e:22:3e:de:22:00:59:74:2a:2b:
                    31:0f:41:e4:79:0e:c6:b5:f3:93:d2:bb:54:12:89:
                    39:74:19:c1:a0:9f:bb:9c:7f:eb:be:6c:df:5c:69:
                    e3:a5:74:fa:6c:9c:1c:8c:0e:76:40:fa:b1:8e:bb:
                    df:9e:a5:a1:99:a3:78:df:00:02:71:a0:de:d8:08:
                    ec:b5:67:83:bd:aa:e2:36:af:52:af:8d:15:6b:40:
                    61:6d:02:fc:d8:5a:46:aa:d2:30:b6:43:b6:34:09:
                    60:91:c8:34:94:96:33:13:37:2f:93:2c:fc:33:b9:
                    26:ff:e7:80:c1:f5:70:ad:a9:1e:3b:67:f7:45:e8:
                    1d:aa:38:44:49:ac:12:9e:de:ed:27:9d:07:71:1a:
                    2c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:CA:9A:A5:E3:6F:70:91:04:FE:FE:C0:F7:A3:28:BB:ED:97:4A:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/acd6507c-4f88-3ba8-a356-fe09ba417a69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.crl

            X509v3 Authority Key Identifier:
                keyid:B7:49:5B:25:C2:C3:4E:84:0F:EC:3E:9F:7E:E4:B8:5A:C4:00:D6:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.4.0/24
                  174.136.252.0/24
                IPv6:
                  2606:3040::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:86:65:eb:91:f4:92:dc:c6:7b:d7:46:3e:92:cc:e1:2b:37:
         1e:78:a6:7b:99:37:1f:dd:40:5b:a5:92:d7:d8:cb:d7:f7:6b:
         c3:4d:91:69:e3:b0:43:8e:2e:bc:a6:7e:da:3d:d4:d5:33:65:
         6e:6b:68:39:94:76:c0:16:db:92:d2:2b:dd:ee:05:59:01:83:
         17:60:54:2f:08:98:a4:a1:b4:66:28:78:4e:72:a9:82:cb:6a:
         43:72:7b:66:2b:1a:3c:3e:87:88:5c:d3:e0:ab:0f:08:91:71:
         db:f8:23:f1:35:f8:4e:54:fd:a6:60:ae:7f:49:03:23:21:6f:
         0b:c9:eb:e6:7c:21:8f:b9:b6:a1:2b:58:cf:0b:74:e1:4b:d0:
         d2:11:d2:f0:ea:3f:44:ed:4c:0b:08:17:97:78:49:86:90:b8:
         cd:42:f3:fa:54:99:65:e8:08:91:82:ef:da:6f:3d:8b:bc:a3:
         69:d8:3f:81:8c:4a:1b:84:83:f6:d1:86:5c:b7:9a:aa:87:6b:
         7f:b9:e6:1e:c7:3d:86:ce:5e:89:32:15:51:82:ed:20:7f:84:
         5c:48:1b:75:83:e8:0a:12:65:ef:2a:e9:62:88:59:3b:c4:60:
         6c:d2:4f:b4:f4:43:6e:58:65:40:90:1d:f0:3a:94:7b:cc:c7:
         fb:00:fe:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:57:13 2026 by rpki-client