Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/49a42911-5927-3412-a1bb-7e9ec7443aa8.roa
File:                     49a42911-5927-3412-a1bb-7e9ec7443aa8.roa (raw, json)
Hash identifier:          Ug7SmOwXF/H5kFKAz0KDzFOX6EUgtFLA2wj0d9lT4G8=
Subject key identifier:   06:84:B2:BC:53:3F:2B:7F:36:B8:9E:B8:B2:4D:80:79:39:1A:3B:48
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328584D65152D6414F3780C7B018100
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/49a42911-5927-3412-a1bb-7e9ec7443aa8.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     19905
IP address blocks:        106.0.62.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:2d:64:14:f3:78:0c:7b:01:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=232e5880-17eb-4a32-a7de-80a3ce77a55e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:fa:87:77:87:a3:b9:7d:4e:a0:c4:03:e1:02:
                    fd:85:0e:fb:3e:6b:f9:50:e2:37:24:c5:44:8d:b8:
                    6c:5d:d2:a0:12:27:b2:c6:b2:ec:f2:1d:58:43:98:
                    ad:35:c2:2b:74:d5:4a:2d:1d:da:51:c3:98:d1:9b:
                    7e:4c:78:09:7a:46:96:5e:36:91:7c:6f:90:b8:4c:
                    0b:6e:29:b7:ac:b2:d5:b4:1a:d2:b1:b0:32:d1:4f:
                    78:74:bd:a1:48:76:af:46:ed:b7:83:06:58:99:9e:
                    04:39:cd:22:96:f1:89:62:ba:e8:ef:48:c3:c1:cc:
                    bf:ee:30:fa:dd:6e:e7:c1:54:fa:09:49:48:82:d5:
                    63:81:67:79:23:36:7d:23:43:ed:1d:45:96:9a:1d:
                    ba:06:29:d1:3a:3c:61:eb:5f:35:57:f2:aa:d6:13:
                    a1:7a:fd:e6:42:8d:8d:84:f8:c2:53:75:d0:3e:2c:
                    63:63:de:46:a0:e3:8c:d8:75:b7:28:30:d7:16:c8:
                    7e:6b:61:b9:b4:5f:be:1c:88:b6:94:0e:99:7a:18:
                    4b:ed:c7:60:57:f4:78:1e:5f:69:f1:25:2b:8f:87:
                    cc:ae:78:bc:7c:21:1c:a7:f0:26:30:b4:c4:12:60:
                    65:f1:8d:cd:b7:32:56:d7:3f:05:2e:cd:47:cd:1b:
                    13:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:84:B2:BC:53:3F:2B:7F:36:B8:9E:B8:B2:4D:80:79:39:1A:3B:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/49a42911-5927-3412-a1bb-7e9ec7443aa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.0.62.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:d0:40:27:5e:f2:75:17:67:b9:48:9b:f0:5c:44:c1:a4:ed:
         92:66:31:ed:e5:7d:ec:ef:62:fb:2e:d0:95:52:74:3e:f8:96:
         f3:b0:f6:f9:04:04:3e:78:03:40:1f:b6:62:3b:3c:08:8f:bc:
         14:04:1d:3b:b7:a6:02:45:f2:10:24:2b:99:c0:58:e5:83:a8:
         f3:52:99:3e:b3:a2:31:a5:5a:6f:6e:b3:93:c5:27:7f:c6:bb:
         8f:f6:75:0b:cd:bb:4d:d1:cb:de:59:20:e2:49:b7:d9:8e:f7:
         ae:73:85:0c:7f:9d:b8:10:51:ad:ca:a7:39:b3:d4:f9:6e:15:
         c1:a2:3b:89:21:a8:fb:55:d8:d7:14:cb:60:60:52:bb:b3:ce:
         44:2c:c5:f1:64:e2:03:d5:c2:e3:b2:a7:04:4b:50:7e:45:63:
         f1:7e:b0:01:a9:41:bd:a4:0b:d5:13:10:11:87:0a:33:eb:90:
         bc:b1:d6:93:cc:ed:9e:a8:10:bb:95:57:78:d5:6a:a7:e8:91:
         41:0c:53:d8:41:33:65:76:46:2f:47:cb:99:df:ab:2f:40:e4:
         9f:dc:93:53:8b:8f:70:0c:30:f3:6c:52:0e:f2:8e:fa:c8:ea:
         ed:9b:2f:ad:0c:aa:55:fc:e6:56:1c:81:fa:4c:ab:60:b3:2d:
         d2:22:49:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:27:14 2026 by rpki-client