Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a4546eec-735b-3937-857e-565ed67c9924.roa
File:                     a4546eec-735b-3937-857e-565ed67c9924.roa (raw, json)
Hash identifier:          6YRNPEfGMUEWf++MvqADRRdvhSyUG6evN+hic6cQgyA=
Subject key identifier:   DF:4E:0E:01:9E:F7:0C:65:0E:38:59:D3:0C:DF:88:D9:84:DE:B3:F3
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584CB6B7141BB96DFE6E15C4DE80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a4546eec-735b-3937-857e-565ed67c9924.roa
Signing time:             Sun 01 Feb 2026 02:00:32 +0000
ROA not before:           Sun 01 Feb 2026 02:00:32 +0000
ROA not after:            Sat 02 May 2026 01:00:32 +0000
asID:                     33363
IP address blocks:        71.44.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b6:b7:14:1b:b9:6d:fe:6e:15:c4:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb  1 02:00:32 2026 GMT
            Not After : May  2 01:00:32 2026 GMT
        Subject: CN=cfb0496c-fb52-4e94-9077-eca93a909545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1d:36:9e:b3:a6:84:eb:c7:08:df:bb:5f:95:
                    b5:f4:0a:e2:47:45:0c:1e:05:f3:ea:34:58:ec:1c:
                    aa:d8:f9:76:72:20:65:98:be:ec:e4:36:05:9b:27:
                    9e:2d:26:27:f5:19:a8:b1:d3:e1:a3:13:2e:f6:24:
                    cd:e0:79:80:ad:1b:41:77:a2:c1:48:85:fc:eb:ba:
                    d9:1e:27:2b:6b:ac:a9:2b:dd:ac:49:66:4c:f2:bb:
                    81:85:99:06:a2:cb:4e:29:4a:6d:01:48:46:ca:bc:
                    1a:dd:53:61:b8:4f:d5:35:a9:60:96:ee:55:37:f6:
                    ad:e6:2e:58:69:3f:ff:d8:7e:4c:67:a2:34:aa:8a:
                    58:5a:04:05:25:b8:20:08:ec:62:3b:9b:8f:d5:4b:
                    c0:ec:0a:a1:9f:84:8b:1f:16:30:a8:2f:c3:72:84:
                    85:3b:93:c2:b1:4f:04:d3:d6:05:6e:cc:a8:eb:e6:
                    d9:ec:83:ae:0b:76:d6:58:60:e4:e9:c7:63:bf:c5:
                    9b:72:b3:09:ae:fd:8b:3d:8d:56:27:6f:fb:fc:c1:
                    e5:db:ba:65:2a:55:d1:89:05:54:e0:48:b5:0d:79:
                    7a:99:05:f6:46:7a:ab:a0:dd:a2:2b:c1:e4:3b:ce:
                    2c:73:ea:47:1f:fb:0a:2d:12:03:c6:1a:74:a0:61:
                    c8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:4E:0E:01:9E:F7:0C:65:0E:38:59:D3:0C:DF:88:D9:84:DE:B3:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a4546eec-735b-3937-857e-565ed67c9924.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.44.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:22:06:62:34:69:04:5f:e8:14:ba:e9:dc:3e:d0:a9:d8:76:
         cf:1c:e6:d6:f4:ae:31:ab:99:08:de:70:29:10:c7:a5:de:32:
         c6:7f:e6:31:a2:3d:20:7c:ae:64:7a:76:0c:58:ab:d9:bf:87:
         36:24:c3:0c:25:f5:14:65:02:b2:51:6a:bf:b2:6e:94:2b:c7:
         68:8a:a4:17:1e:6f:0e:6c:c6:dd:52:4a:5b:2d:09:38:4d:6d:
         4e:bb:ce:3f:9d:0f:2d:ce:f1:46:2d:29:e5:b7:01:de:57:d2:
         f6:4e:04:20:3f:e2:45:b6:60:11:4e:49:67:68:ce:95:2e:5b:
         1a:a1:07:46:8d:db:11:9a:c0:0d:a4:17:dc:b5:66:c7:a5:80:
         98:34:9b:91:78:3a:7b:4e:17:81:49:af:62:19:ea:f5:08:ee:
         99:0c:82:62:bb:d0:42:f8:2f:b8:54:9a:18:e4:35:58:32:86:
         2c:12:bd:c2:21:c9:45:f6:b9:fb:c3:10:b3:aa:e4:35:7c:e6:
         65:4f:49:da:ca:de:81:70:71:59:bf:a3:6a:5f:db:05:34:c7:
         8a:ee:cf:82:c3:c3:62:26:3c:fa:98:63:ab:09:65:90:a1:26:
         03:4d:1d:91:e1:7e:4a:74:22:71:fa:6d:c2:fb:27:2a:f1:59:
         77:01:73:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:19:28 2026 by rpki-client