Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/7562a2a1-bbd0-3cfc-965d-246207693ae2.roa
File:                     7562a2a1-bbd0-3cfc-965d-246207693ae2.roa (raw, json)
Hash identifier:          hdRUqDmCS0lDvCNJZwohdrsnEFuxibyyyNXFE5RA3HQ=
Subject key identifier:   4C:0D:8E:E4:51:BC:BA:69:A8:21:21:96:AE:68:3B:92:74:DD:84:F8
Certificate issuer:       /CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7
Certificate serial:       010D0C9F4328584D5B4FAFACE72803726D355900
Authority key identifier: F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/7562a2a1-bbd0-3cfc-965d-246207693ae2.roa
Signing time:             Wed 01 Apr 2026 01:00:23 +0000
ROA not before:           Wed 01 Apr 2026 01:00:23 +0000
ROA not after:            Tue 30 Jun 2026 01:00:23 +0000
asID:                     22709
IP address blocks:        173.244.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5b:4f:af:ac:e7:28:03:72:6d:35:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7
        Validity
            Not Before: Apr  1 01:00:23 2026 GMT
            Not After : Jun 30 01:00:23 2026 GMT
        Subject: CN=877a0478-6700-4cd3-9a0a-48313bb68216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8d:94:4a:2d:d1:de:ac:7e:38:04:42:70:7a:
                    7a:e6:50:7a:53:c6:c8:a4:63:9b:ad:f0:3a:f4:63:
                    5d:03:44:61:21:66:07:15:aa:6c:bb:36:e8:4d:ba:
                    91:b8:c2:84:36:69:6f:64:ef:fe:d9:f5:93:31:e1:
                    0d:a0:bd:46:46:ec:bc:52:24:0d:15:12:9f:cc:85:
                    c3:d6:f9:c3:e1:ea:de:cf:79:ad:b6:43:e2:3b:3a:
                    45:82:18:99:92:cd:38:90:f0:ac:db:56:6b:64:fa:
                    f6:90:b0:d6:9c:b8:ff:74:d8:7c:23:38:bb:ab:b3:
                    89:35:42:bd:5b:a7:5f:3a:48:f8:d3:4c:32:71:f6:
                    ae:c2:4f:81:06:22:da:26:dd:a5:82:af:c4:19:30:
                    5a:87:98:86:9e:e2:67:9d:66:59:f3:ff:b5:c3:b5:
                    96:21:52:dc:d7:65:e6:d7:b8:96:40:96:4e:54:19:
                    ed:41:9a:c7:02:dd:42:36:dc:7f:cf:3c:ec:0f:84:
                    4d:37:27:96:ff:66:ee:6e:a4:f4:cf:26:50:5e:ec:
                    27:2a:0b:e2:74:b8:c5:c0:19:1d:da:bb:87:cd:1d:
                    17:f9:48:2c:3f:82:e4:11:5b:a2:ad:31:3e:f5:49:
                    89:93:fa:07:f4:dc:85:c3:64:6f:73:25:e4:56:60:
                    ec:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:0D:8E:E4:51:BC:BA:69:A8:21:21:96:AE:68:3B:92:74:DD:84:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/7562a2a1-bbd0-3cfc-965d-246207693ae2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl

            X509v3 Authority Key Identifier:
                keyid:F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.244.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:b4:33:b6:4e:0e:a3:30:59:4e:c9:e5:10:8e:f5:c1:5b:97:
         0d:bc:d5:67:89:75:d2:e1:99:c6:70:a5:23:33:9d:ea:76:b6:
         ce:1c:c6:c5:3d:61:34:6a:00:23:a9:de:59:cd:4e:bb:11:61:
         5c:46:ec:3f:f6:ca:6b:e5:b0:fb:45:9f:9c:10:88:0d:b2:0c:
         c4:01:ab:ae:6c:5b:a0:e0:66:f0:4a:29:20:0a:74:fd:94:07:
         9d:a3:f6:95:17:42:8d:71:a9:98:d8:3f:a2:73:b3:42:0c:bc:
         70:a4:55:06:72:9b:4b:cb:07:e6:3e:35:8b:31:04:f4:fc:4b:
         e5:02:a1:00:0d:6b:3f:03:44:d4:c4:82:9a:20:40:e8:23:ff:
         be:1e:ae:75:80:79:6f:de:df:f2:82:82:1f:81:60:cd:0f:0d:
         63:cb:3c:2e:c7:06:6e:7d:51:3b:01:30:f2:e1:42:47:50:97:
         40:95:4f:2d:16:a2:24:2f:95:f6:e5:ca:4f:2f:b4:b1:d2:64:
         90:33:33:82:ee:08:48:0d:23:c5:d6:4e:b8:fd:43:c8:e3:fc:
         48:09:eb:6d:72:f5:aa:5c:10:27:d1:1c:f9:21:b1:48:ef:ef:
         33:a8:9c:62:39:5d:00:a9:37:27:8c:e7:19:89:09:d6:b2:19:
         04:09:92:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:32:57 2026 by rpki-client