Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4e977397-2185-301d-9bff-671e74962805.roa
File:                     4e977397-2185-301d-9bff-671e74962805.roa (raw, json)
Hash identifier:          6+WxT1qcxWu/g6FiWJd6Fg3v4SsTYcLtLY/Ch9gsTzk=
Subject key identifier:   BE:F7:99:AD:0B:A2:BF:DB:F3:BF:02:70:06:85:0A:17:24:4D:72:60
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D6944FE22A1FC96DC47925080
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4e977397-2185-301d-9bff-671e74962805.roa
Signing time:             Mon 06 Apr 2026 01:00:24 +0000
ROA not before:           Mon 06 Apr 2026 01:00:24 +0000
ROA not after:            Sun 05 Jul 2026 01:00:24 +0000
asID:                     33363
IP address blocks:        97.69.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:69:44:fe:22:a1:fc:96:dc:47:92:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Apr  6 01:00:24 2026 GMT
            Not After : Jul  5 01:00:24 2026 GMT
        Subject: CN=5d7d936c-e087-4ba4-95f2-265bef486f29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a9:03:af:9f:60:16:85:f3:d2:c4:d7:f7:40:
                    2a:a8:68:9b:6a:ed:9a:f7:cc:25:be:76:66:52:f8:
                    ac:b0:b7:2c:5c:a9:5d:9f:9b:67:47:b3:24:fe:24:
                    a9:80:20:3a:99:09:a0:f8:bb:3d:98:87:2c:d5:49:
                    d4:63:75:f2:43:52:f0:c5:e5:b8:00:b0:fc:be:39:
                    8e:74:8f:e3:39:78:49:21:61:39:a2:73:b0:7b:88:
                    bb:e5:6c:c3:14:d5:1f:9f:46:5e:fb:0c:ac:ba:4f:
                    ae:ba:66:ed:e5:fb:b6:5f:0e:97:43:50:9e:7b:7d:
                    ea:e4:1d:7b:97:f5:fd:59:22:72:86:ae:ab:9b:99:
                    b6:76:3d:d7:2f:a0:cf:8b:e6:a1:cf:0a:08:89:6a:
                    f1:3b:e9:a6:d6:32:fc:00:f4:09:cf:21:ab:22:c0:
                    d7:c6:24:c9:37:d7:79:01:b6:cf:80:8e:e4:75:5c:
                    40:a2:f3:1a:d4:09:dc:34:c3:d0:fc:9b:66:1e:98:
                    20:e6:75:25:14:e3:60:b5:50:f3:ff:a6:57:d6:f4:
                    14:26:60:6b:3e:c8:6d:0f:07:27:ee:ea:5b:46:c3:
                    50:a7:43:97:fb:f1:27:bd:7f:e3:08:b3:52:87:88:
                    cb:e0:6b:e8:5f:29:d5:7b:f3:de:7f:a9:8d:aa:54:
                    41:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F7:99:AD:0B:A2:BF:DB:F3:BF:02:70:06:85:0A:17:24:4D:72:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4e977397-2185-301d-9bff-671e74962805.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.69.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:28:48:87:37:4c:4b:ad:46:31:83:98:c0:b8:79:9e:76:3c:
         9d:b0:d7:da:48:2b:44:a1:3f:c1:19:5f:3c:c9:bc:c2:48:66:
         b7:44:1d:60:a4:86:88:e8:28:15:2a:18:4f:49:8b:e9:54:cf:
         e6:ce:ec:c6:7a:96:6b:14:13:ea:43:42:01:25:48:f7:34:09:
         59:11:e9:48:ac:76:76:69:ae:d1:9a:93:3a:bb:91:70:37:92:
         53:2d:69:19:c6:70:3d:81:eb:40:87:be:c7:fd:62:fb:7a:48:
         a6:0a:02:08:70:d5:97:63:71:a2:6a:ac:b1:94:d0:32:5e:17:
         61:bd:de:97:b4:b0:2b:bf:c6:47:ef:49:2d:48:cd:14:ea:d4:
         bb:de:85:cd:a7:03:17:53:cb:83:bb:eb:52:3c:4b:e1:74:8c:
         12:80:15:c7:8f:7c:4d:48:6a:60:a0:41:d5:22:dd:7d:02:4e:
         fb:51:93:d0:fa:11:4d:25:53:1d:a7:05:ba:11:bd:b2:11:24:
         9a:ff:7b:b5:09:bd:2d:92:60:6c:51:ed:a6:b8:0e:d6:78:67:
         69:f4:c2:00:dc:4a:08:2f:26:3f:57:2e:94:fc:b0:77:19:21:
         14:0b:81:c8:df:af:a3:d8:20:fb:85:c1:60:c4:82:ba:c7:76:
         6d:3d:08:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:40:27 2026 by rpki-client