Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1d501fd6-2f1a-4d00-89c7-7dabc9364605/46df740d-a1ad-322a-a9bb-04165973d6f5.roa
File:                     46df740d-a1ad-322a-a9bb-04165973d6f5.roa (raw, json)
Hash identifier:          Nw7Qo9bDW8l+A6F6gFG4yQtfYBPvePxG2kwAy3MVp0U=
Subject key identifier:   63:B0:F2:05:39:AF:98:09:A5:6D:43:86:F2:0B:60:25:9F:C9:06:D2
Certificate issuer:       /CN=1d501fd6-2f1a-4d00-89c7-7dabc9364605
Certificate serial:       010D0C9F4328584CAA271B70C4C05ECCA9953B60
Authority key identifier: AE:99:FA:16:91:FD:C5:EA:4A:41:68:9F:07:16:B7:84:BA:08:07:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1d501fd6-2f1a-4d00-89c7-7dabc9364605.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1d501fd6-2f1a-4d00-89c7-7dabc9364605/46df740d-a1ad-322a-a9bb-04165973d6f5.roa
Signing time:             Tue 27 Jan 2026 14:00:36 +0000
ROA not before:           Tue 27 Jan 2026 14:00:36 +0000
ROA not after:            Mon 27 Apr 2026 13:00:36 +0000
asID:                     54048
IP address blocks:        64.7.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1d501fd6-2f1a-4d00-89c7-7dabc9364605/1d501fd6-2f1a-4d00-89c7-7dabc9364605.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1d501fd6-2f1a-4d00-89c7-7dabc9364605/1d501fd6-2f1a-4d00-89c7-7dabc9364605.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1d501fd6-2f1a-4d00-89c7-7dabc9364605.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:aa:27:1b:70:c4:c0:5e:cc:a9:95:3b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d501fd6-2f1a-4d00-89c7-7dabc9364605
        Validity
            Not Before: Jan 27 14:00:36 2026 GMT
            Not After : Apr 27 13:00:36 2026 GMT
        Subject: CN=ff057ee8-5fbc-4214-9082-cdeef9c8bfad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b5:cc:2a:10:0b:98:a1:9d:5f:f1:09:b4:ea:
                    61:71:64:33:35:61:0f:c7:eb:8d:81:10:8c:fc:3a:
                    c5:42:f5:ae:b4:ff:a8:c8:ec:d2:70:3e:ee:79:fe:
                    4d:cc:5d:b2:56:f1:ab:d0:19:e5:19:64:5e:7d:59:
                    8a:cf:b5:b4:14:b6:29:f3:c9:ec:99:e2:9b:0e:fc:
                    ed:53:3d:2e:6d:d0:66:2a:89:3c:9c:71:c3:b9:58:
                    ef:c3:3b:fc:9d:4e:1e:2c:ff:6b:22:d6:e7:a7:51:
                    78:bd:45:fc:0a:24:23:3c:e7:43:b9:01:f9:bb:f2:
                    c0:1c:c8:cd:eb:36:67:8c:0c:ff:aa:fc:2f:b1:be:
                    68:99:b1:9f:68:f4:0f:75:ca:c4:57:9f:d7:e4:b8:
                    bf:4e:31:0a:a8:ed:2c:e5:78:5a:25:1b:9d:d9:7f:
                    65:83:41:87:1f:d0:24:33:99:d1:ce:b2:64:b0:d5:
                    79:55:be:64:e7:7b:63:d9:f9:d1:6f:5a:81:ec:3a:
                    fe:a8:f5:53:13:f5:2e:ec:40:49:4e:42:2d:5d:39:
                    b5:94:98:64:1c:df:93:99:ae:38:72:25:97:f4:20:
                    7e:d1:0c:a8:93:9f:9b:d7:98:a6:fc:e0:60:be:e6:
                    19:8d:b4:77:4d:8c:6f:e3:59:dd:1d:09:b4:4a:d1:
                    f9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B0:F2:05:39:AF:98:09:A5:6D:43:86:F2:0B:60:25:9F:C9:06:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1d501fd6-2f1a-4d00-89c7-7dabc9364605/46df740d-a1ad-322a-a9bb-04165973d6f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1d501fd6-2f1a-4d00-89c7-7dabc9364605/1d501fd6-2f1a-4d00-89c7-7dabc9364605.crl

            X509v3 Authority Key Identifier:
                keyid:AE:99:FA:16:91:FD:C5:EA:4A:41:68:9F:07:16:B7:84:BA:08:07:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1d501fd6-2f1a-4d00-89c7-7dabc9364605.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.7.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:58:0d:f5:45:d3:2d:16:59:58:8d:93:a1:3a:fe:2a:9b:80:
         a6:6a:8a:a2:82:04:ca:92:2e:90:b6:57:b1:4b:68:41:d3:16:
         82:34:2b:c0:bc:4f:02:cd:7a:ab:4b:36:e2:7b:14:a8:a3:34:
         63:d1:6e:02:c7:24:21:63:43:d3:87:91:05:f3:be:46:a2:09:
         ec:1e:d7:ec:d3:53:82:9a:2d:9c:0b:82:05:5c:ba:2c:ae:b4:
         a7:6e:5a:65:62:1b:ca:d0:4e:dd:d7:b8:a2:30:90:77:c9:4a:
         f1:f8:f4:c7:84:ef:6d:23:46:c9:66:d2:a9:66:53:52:c5:70:
         fb:c3:ad:9b:1f:55:ff:7f:1d:8b:56:36:6c:4d:88:2b:51:86:
         24:be:da:2a:e6:ca:24:7f:dd:d7:a4:bd:4a:26:42:21:84:91:
         82:13:03:0f:bf:80:9e:29:a5:54:4d:bf:24:71:2e:00:47:e8:
         60:e8:97:9d:b4:31:6d:80:76:7c:07:39:d2:a0:2b:d0:a0:61:
         25:8e:12:cf:e8:1a:89:e2:f3:47:0f:f8:52:3c:8f:35:68:f5:
         2d:f0:8e:75:dd:aa:b2:ca:f8:88:9f:b4:f2:03:54:d4:88:92:
         5d:41:ef:0b:b7:99:3d:de:35:4e:f2:97:dc:05:f5:2c:e1:9a:
         99:88:0a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:32:00 2026 by rpki-client