Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5b857663-2a90-3553-ae58-b9e88a096e7a.roa
File:                     5b857663-2a90-3553-ae58-b9e88a096e7a.roa (raw, json)
Hash identifier:          vO4WR5hQB+ydzTfZN40UWtzbh/x5vKbd2cdso/BMBeM=
Subject key identifier:   4F:19:2D:13:AD:C9:87:14:3C:89:F2:95:C3:E5:90:27:2C:8F:8A:7C
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584E1E447F3D59451E9503D90B00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5b857663-2a90-3553-ae58-b9e88a096e7a.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     33363
IP address blocks:        71.44.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:7f:3d:59:45:1e:95:03:d9:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=13fe1f24-3bdf-4db8-849c-2acce77241fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:65:9d:e2:97:ff:95:5f:91:ec:ba:f2:46:06:
                    db:17:79:e6:9f:11:1a:fe:cd:ba:08:a2:bd:f9:b3:
                    56:3a:e4:2d:0d:ea:c6:28:d4:42:21:11:9a:4d:87:
                    88:94:2b:41:c0:7b:c3:27:8c:5a:99:3d:04:8c:54:
                    93:82:9a:c7:c8:9a:8e:ce:b5:5b:b5:79:ce:fb:93:
                    18:93:df:17:94:56:fd:fc:d6:9b:48:53:4e:36:ab:
                    05:80:a0:62:60:89:76:8e:cf:14:4b:95:68:0e:64:
                    a7:c4:67:5a:fe:28:f3:4d:cc:f2:ba:8b:3c:da:04:
                    f6:04:31:78:76:e0:75:70:97:94:6f:f6:dd:28:4f:
                    cb:c5:b1:83:db:0f:12:a7:6f:57:f1:8e:05:68:ba:
                    13:08:54:5b:20:ec:52:fa:50:64:76:14:49:fb:62:
                    f0:9f:24:8d:49:73:5d:10:33:23:e3:e3:b8:52:83:
                    58:6d:1c:66:0a:92:4f:1e:06:7b:d5:40:c0:31:fa:
                    b4:b5:f6:54:de:46:50:31:01:99:cd:08:28:6c:c5:
                    21:1c:61:da:23:0d:14:de:13:48:24:20:9a:e9:3b:
                    ee:c7:e6:4c:d9:65:16:bb:eb:dc:e5:52:81:dc:28:
                    7f:82:00:58:83:83:c1:84:11:57:5c:b8:4e:3f:e8:
                    9e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:19:2D:13:AD:C9:87:14:3C:89:F2:95:C3:E5:90:27:2C:8F:8A:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5b857663-2a90-3553-ae58-b9e88a096e7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.44.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:b9:f6:ab:f2:2b:3c:5a:a3:82:af:72:4b:84:ed:c4:5d:8d:
         21:05:b1:1c:6e:83:8c:22:b2:c2:41:91:cb:94:57:d8:e8:aa:
         02:d7:45:6f:03:18:fb:ab:7d:99:77:bb:cf:55:ec:49:aa:6a:
         00:ae:ad:a3:2c:5d:aa:33:11:bb:9d:63:c3:a4:77:57:af:09:
         2f:d4:a2:f1:92:a5:e4:44:f4:32:12:a0:2f:16:23:10:d8:d6:
         98:f4:15:fa:54:3a:6e:1f:e6:5e:46:90:f7:01:f3:a3:9b:15:
         86:94:e7:26:13:9c:93:86:e0:86:af:3a:1c:6d:6e:ff:cf:20:
         06:ef:cd:16:dd:33:34:ca:48:71:5c:26:4b:9f:08:fa:03:d5:
         88:1b:d3:ee:37:e4:5e:b9:bb:dc:6f:f9:d4:c1:6e:00:3d:d2:
         6e:94:bf:76:8c:c1:9f:7d:b4:a4:0b:17:92:26:e3:7d:07:9f:
         17:ec:c8:7a:c3:54:cb:63:76:1e:f9:62:7f:cf:0e:73:0c:1d:
         a7:a3:2d:8d:a6:53:c4:71:f1:03:9e:d1:8a:b2:ba:53:cf:81:
         75:3f:3b:f1:75:8f:f0:7e:32:3e:ca:49:01:70:6b:77:47:05:
         8b:13:fc:41:6b:51:b0:b1:54:31:ba:ba:8c:f5:52:95:52:f1:
         8e:81:3a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:36:05 2026 by rpki-client