Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3c7c7810-8bab-31b5-a04b-e1f71f947173.roa
File:                     3c7c7810-8bab-31b5-a04b-e1f71f947173.roa (raw, json)
Hash identifier:          xI8g+zextTOFqEQSTM109pujm8RJA7F/uf2RLGBT0Xk=
Subject key identifier:   D9:92:3C:AE:93:63:7F:7D:42:30:5A:02:17:8C:55:62:6F:42:6E:7C
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584D07ACFCE218A4349BF8627F00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3c7c7810-8bab-31b5-a04b-e1f71f947173.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     399672
IP address blocks:        173.211.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ac:fc:e2:18:a4:34:9b:f8:62:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=4ab51d6f-598c-483f-af35-4b4da4294b1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:fc:43:09:04:62:04:97:85:0e:d8:97:12:98:
                    2a:8d:96:82:6a:98:1f:ee:6b:f9:ad:ff:4e:18:44:
                    9c:89:b6:03:6e:c9:6b:bb:92:45:b2:58:26:a9:0b:
                    0a:23:0c:cb:f7:05:26:4c:2f:cc:4c:38:6a:a9:80:
                    8c:f5:fb:e8:86:6f:5b:14:75:1f:15:63:2f:6d:fa:
                    61:b8:77:34:76:23:8a:a8:89:74:88:a3:e1:67:c2:
                    b6:d7:14:61:cf:70:a6:5e:29:f5:0d:e4:81:a1:ab:
                    cf:37:6d:4b:3a:08:d5:54:b0:8c:67:38:33:0c:a2:
                    61:57:2d:8a:34:f5:58:a3:e3:c4:78:a8:22:81:d4:
                    9c:53:31:a7:9d:3e:4e:c0:38:6a:fb:92:e5:ce:92:
                    1e:1c:dd:d6:4b:65:73:a0:cf:1e:7f:28:42:c9:97:
                    3a:9c:8b:f0:00:91:54:34:2c:60:64:8e:bc:52:f6:
                    f2:09:9e:cf:5e:b2:3c:65:d8:60:eb:d1:b0:de:7f:
                    93:a7:0a:8c:52:0f:10:86:26:c9:dc:e5:a8:17:12:
                    74:39:4c:e2:5f:c7:eb:88:14:f7:c0:e6:0e:6c:5e:
                    f2:b2:50:1d:b4:d9:43:e2:14:da:9c:2c:b2:1e:d8:
                    aa:0d:d2:b0:3c:4c:45:c9:39:3a:e3:c2:17:ae:d4:
                    09:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:92:3C:AE:93:63:7F:7D:42:30:5A:02:17:8C:55:62:6F:42:6E:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3c7c7810-8bab-31b5-a04b-e1f71f947173.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:5c:e2:90:97:59:ad:9d:ca:2f:8d:d9:92:a1:27:e3:ed:cf:
         52:e7:dd:b2:e6:69:b8:81:4a:6a:61:1f:aa:ae:b6:57:5c:69:
         24:66:d5:c1:54:11:07:de:35:44:f9:c1:4b:e8:21:60:13:54:
         9e:e7:df:ac:a0:f9:a6:6c:f5:80:c8:ef:f3:81:1f:58:e7:c0:
         29:ca:05:4f:4f:cb:72:20:49:c3:45:d4:51:35:dd:71:27:3c:
         88:2b:89:6e:68:88:97:ad:62:e8:c5:3d:fb:4f:f0:78:c0:e1:
         69:5a:14:01:19:ac:7d:df:96:68:fb:b4:c4:5c:77:74:ad:29:
         2d:2e:5c:80:01:74:6b:e6:da:d3:1f:c0:f1:25:74:a2:fb:88:
         e2:4e:48:6c:fd:b5:c4:cf:bb:b1:91:92:04:52:15:30:31:ad:
         07:38:f4:63:07:f1:bc:e2:91:2f:29:d7:80:40:42:9b:4e:07:
         da:8f:39:c1:34:c0:68:06:cf:4b:ef:3d:e4:a1:75:cd:8d:46:
         b2:61:b0:48:b1:a2:50:26:23:cd:ef:79:6e:76:47:cb:0b:6f:
         d7:c2:89:61:36:93:56:41:db:b8:36:f9:73:ab:70:c2:97:26:
         d2:c4:c3:b4:c2:49:3c:bf:8a:e4:a1:16:8e:77:76:60:da:ea:
         1f:c1:49:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:40:56 2026 by rpki-client