Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5dff6933-d238-3c65-b75c-6e090cc092e5.roa
File:                     5dff6933-d238-3c65-b75c-6e090cc092e5.roa (raw, json)
Hash identifier:          cLt10VU4NZ1f737X8dMt+87H4iGmKtZ1HFBq+rqkwOg=
Subject key identifier:   30:E8:19:43:D7:A1:DB:C5:55:6F:04:FA:7E:95:1D:34:BF:9D:68:42
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584C5EC6FFF27229017533A57480
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5dff6933-d238-3c65-b75c-6e090cc092e5.roa
Signing time:             Wed 31 Dec 2025 14:00:38 +0000
ROA not before:           Wed 31 Dec 2025 14:00:38 +0000
ROA not after:            Tue 31 Mar 2026 13:00:38 +0000
asID:                     20115
IP address blocks:        172.222.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:5e:c6:ff:f2:72:29:01:75:33:a5:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Dec 31 14:00:38 2025 GMT
            Not After : Mar 31 13:00:38 2026 GMT
        Subject: CN=13545103-6485-400c-bde4-e6120c863a41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:66:ff:9f:3e:5b:48:0f:18:fd:98:54:b6:7e:
                    37:15:19:24:e4:11:4a:31:8d:ae:dd:a8:54:e0:e5:
                    23:37:6a:0d:d6:c8:c5:8a:91:24:9b:a1:d0:34:03:
                    92:d8:aa:5a:ab:df:9d:d1:95:fc:9a:c5:db:f3:7b:
                    06:5b:41:5a:24:8c:1b:91:ab:d4:d4:d8:af:41:50:
                    09:cb:7e:ae:a2:49:bc:65:67:c6:5e:de:f5:97:fc:
                    45:1f:f4:28:a7:d0:58:2a:09:49:da:f5:a6:06:46:
                    f8:8a:83:46:05:d9:b1:55:f4:2a:98:9a:89:e7:00:
                    fc:d7:cc:d8:75:0c:0a:48:58:df:02:bb:11:84:b2:
                    aa:28:92:32:6c:f9:cb:3e:2d:39:5b:d0:bc:d0:da:
                    4f:5e:06:69:ed:7f:92:eb:43:16:54:7b:84:3a:f2:
                    ab:ab:da:d2:77:72:27:12:c0:92:2a:0d:f3:68:9a:
                    f1:d7:3d:07:e1:40:67:58:75:38:32:b2:e6:55:f5:
                    59:51:25:1f:1b:c6:e2:d8:d4:cc:3e:54:fd:b2:3f:
                    57:43:99:8a:13:93:6d:d1:1c:5d:64:40:37:ba:d7:
                    8c:84:83:5e:bb:a4:d2:e0:15:33:82:30:b8:60:14:
                    9c:76:0a:cc:18:31:fd:f7:18:dc:8c:46:ef:2e:eb:
                    9a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:E8:19:43:D7:A1:DB:C5:55:6F:04:FA:7E:95:1D:34:BF:9D:68:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5dff6933-d238-3c65-b75c-6e090cc092e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.222.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:54:e1:ff:d1:81:0e:0d:b3:3e:4f:09:e6:09:10:88:05:cd:
         ee:b6:dd:eb:d5:b7:0d:7d:26:c9:da:ff:70:8e:f1:eb:31:d3:
         39:2f:1f:86:e0:93:0e:94:19:dd:8f:3d:78:2f:ef:14:4c:a9:
         bd:df:fd:fa:1a:30:df:d4:b9:24:05:d5:c9:57:88:dd:c2:51:
         32:1b:39:ad:35:36:d6:1c:12:88:33:21:af:3e:b0:8d:ec:6c:
         76:50:f9:33:a1:24:c5:e1:53:e7:16:01:36:cf:8b:92:3d:3a:
         40:70:aa:d8:d0:de:23:58:06:e6:f3:68:4f:9a:c2:af:4d:b7:
         4a:82:ba:2b:9c:24:be:0f:7a:5a:71:b4:0d:f0:76:6b:8b:bc:
         40:da:7f:ca:ca:ec:c2:aa:bf:54:bb:0c:fb:5b:1f:c6:71:c5:
         cf:e5:dd:43:da:5d:81:af:48:f5:ef:03:3d:0a:4a:56:d6:af:
         f9:c4:e1:ec:4f:07:d1:59:0e:7e:f9:64:e9:bd:a0:8e:b5:4e:
         77:1b:63:93:11:d9:d0:46:e6:be:c5:6e:40:81:4a:21:4a:8c:
         db:c4:e1:b1:02:c5:ae:c5:25:61:5f:8d:ab:fe:8a:bf:87:c6:
         df:72:a4:49:2d:cd:0a:49:00:bc:46:aa:01:fc:3d:b1:12:a9:
         3d:55:39:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:01:05 2026 by rpki-client