Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/49491938-1a07-3c4b-b6d2-9420d5d5d089.roa
File:                     49491938-1a07-3c4b-b6d2-9420d5d5d089.roa (raw, json)
Hash identifier:          986qty0Sp5yN5QhIw5MntS3WguAQlCFGc9OSfIFDUb8=
Subject key identifier:   E6:C7:6A:10:32:9D:E1:74:40:62:CE:66:0D:CD:34:55:EE:7E:3C:34
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584C5EC6EAC8AA98DFD62400F940
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/49491938-1a07-3c4b-b6d2-9420d5d5d089.roa
Signing time:             Wed 31 Dec 2025 14:00:38 +0000
ROA not before:           Wed 31 Dec 2025 14:00:38 +0000
ROA not after:            Tue 31 Mar 2026 13:00:38 +0000
asID:                     33588
IP address blocks:        172.221.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:5e:c6:ea:c8:aa:98:df:d6:24:00:f9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Dec 31 14:00:38 2025 GMT
            Not After : Mar 31 13:00:38 2026 GMT
        Subject: CN=9779f794-5ac2-40f1-97d6-b4ebb86d1d04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8b:c9:2c:c6:dc:0c:a9:4a:5d:5a:f5:e9:65:
                    e7:e9:77:90:25:71:a9:fc:2b:7b:56:f8:63:63:ef:
                    9f:5a:c0:af:66:40:b7:7b:31:3c:90:21:52:e9:b0:
                    b1:e4:f6:a8:49:1b:37:3a:b7:aa:80:da:ea:fc:05:
                    04:19:9b:64:6f:92:49:ee:96:a0:ba:bf:32:6b:a9:
                    7d:2c:15:56:8e:a6:ae:04:ad:6f:65:cb:d2:dd:59:
                    cf:55:d5:11:76:6b:e7:18:0f:29:68:d4:04:31:77:
                    28:ae:c0:d5:23:ce:c2:a4:a1:88:98:fd:11:73:16:
                    e8:bf:33:5f:48:4e:1b:3e:92:d9:8f:f6:a0:33:83:
                    62:28:89:6d:a6:87:ff:13:86:87:f9:34:81:3e:c0:
                    21:8a:52:1c:f1:6c:72:ba:f6:21:9a:c9:d5:74:ee:
                    6c:1b:bb:6a:c8:25:f4:f8:8e:06:c2:d0:06:72:79:
                    bf:93:6e:63:ba:bc:0e:2d:f8:34:91:47:fa:68:e4:
                    9f:31:65:cc:aa:13:82:74:29:13:91:61:a2:ae:5b:
                    84:50:6f:a8:ed:eb:ff:ed:8a:c4:56:56:0c:e0:4a:
                    9f:2d:52:cb:a8:d8:d8:41:bb:27:92:07:32:91:34:
                    6e:15:f0:c6:c2:0b:60:01:58:e9:0b:cf:3c:4d:30:
                    e0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:C7:6A:10:32:9D:E1:74:40:62:CE:66:0D:CD:34:55:EE:7E:3C:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/49491938-1a07-3c4b-b6d2-9420d5d5d089.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.221.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:50:3d:39:0a:04:68:7e:4a:2a:b7:40:ed:5a:dd:3f:99:f2:
         a1:2b:4e:b4:41:f4:60:af:1a:68:6c:a7:21:a3:dc:31:42:1d:
         07:61:3b:f8:ba:63:45:a0:1d:c8:bb:7c:39:89:aa:07:6a:cb:
         fc:38:df:30:3e:b4:8c:ea:89:75:44:da:dd:1d:98:ff:df:96:
         8c:d7:f2:b0:b6:56:ab:15:75:80:a2:f8:84:91:9c:cb:ed:7b:
         b1:e4:f6:ba:c2:40:17:ba:38:bb:f6:ff:75:31:41:85:1d:36:
         26:5f:90:e3:fd:8a:b8:f2:39:1a:8e:27:4b:12:78:87:2b:6b:
         e4:c5:8f:44:29:58:4b:96:aa:e3:8a:34:6c:b2:b9:7f:35:19:
         22:9d:41:6b:25:4e:e6:2e:69:8d:69:57:40:cb:7c:94:71:36:
         83:31:bf:66:73:a6:61:d3:c4:8d:65:cc:db:e3:cd:17:68:2b:
         d9:aa:5c:88:8d:5a:81:35:dd:ca:4a:8e:df:c8:97:d7:90:13:
         42:d4:4e:27:02:41:b5:0b:f3:20:a0:44:ce:47:7a:ab:bf:38:
         7e:a3:fe:c3:bb:f5:9b:32:a6:90:85:6b:b7:9f:7d:e3:fd:85:
         3c:1c:1a:ec:62:37:c8:60:aa:99:e3:72:2c:83:6e:40:be:2c:
         08:6a:df:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:18:49 2026 by rpki-client