Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/46ff69bb-9989-3c76-8ba4-ade870dbe08f.roa
File:                     46ff69bb-9989-3c76-8ba4-ade870dbe08f.roa (raw, json)
Hash identifier:          +EA2C81yEVSGDoP5BoxKeIyw4jGReFxvkrKGTD1yxA0=
Subject key identifier:   C4:6B:3D:4F:1F:B8:77:84:58:D6:36:91:8D:74:15:A4:01:01:C5:66
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584CE4C7AF7CA61AE95CDC6837C0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/46ff69bb-9989-3c76-8ba4-ade870dbe08f.roa
Signing time:             Tue 17 Feb 2026 14:00:41 +0000
ROA not before:           Tue 17 Feb 2026 14:00:41 +0000
ROA not after:            Mon 18 May 2026 13:00:41 +0000
asID:                     5650
IP address blocks:        72.244.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e4:c7:af:7c:a6:1a:e9:5c:dc:68:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Feb 17 14:00:41 2026 GMT
            Not After : May 18 13:00:41 2026 GMT
        Subject: CN=3f501b99-5ccd-4be5-b82d-8e5ea50fe47f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:67:35:e0:4a:fa:df:07:97:13:c5:54:d1:79:
                    97:7a:dd:20:bb:d4:a5:bb:cc:86:a6:6d:27:6b:99:
                    94:7a:0c:75:f9:77:5d:f6:fb:23:4d:6c:16:e8:3b:
                    69:1a:9e:00:81:a5:73:8f:11:93:c6:09:0f:7b:aa:
                    20:81:87:37:dc:77:10:e0:e6:41:47:0b:18:43:c4:
                    d8:7b:5b:4a:c9:26:01:8e:00:57:f9:f9:01:66:9d:
                    90:49:23:61:5a:ca:80:1b:f8:d6:e1:7b:ff:e5:23:
                    e7:8d:c2:f9:37:f7:c0:f4:e7:0c:ba:ab:79:4b:6c:
                    36:9c:3d:e0:22:c0:a7:78:68:dc:27:7a:58:c1:85:
                    2f:a2:b8:dd:bf:19:46:70:04:66:15:35:c1:e3:6a:
                    48:a7:68:e3:e5:8d:50:06:0f:75:f5:d1:f8:88:a7:
                    28:70:a0:64:f5:da:de:1d:5d:e6:4e:b3:d9:84:34:
                    1c:d3:6c:09:37:22:ec:14:b8:ec:4c:7a:23:7c:71:
                    ca:e3:48:c7:10:dc:91:36:2f:41:d0:f4:c9:75:6e:
                    88:da:1e:d2:a3:55:6c:f5:d7:17:85:ed:ed:36:94:
                    f5:5e:7f:8e:80:aa:0c:44:2c:99:32:24:ef:0a:8f:
                    2d:7f:63:2f:9b:bd:91:48:d0:88:6c:d2:f3:7a:ac:
                    fd:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:6B:3D:4F:1F:B8:77:84:58:D6:36:91:8D:74:15:A4:01:01:C5:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/46ff69bb-9989-3c76-8ba4-ade870dbe08f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.244.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:77:e3:41:5b:30:c7:de:d7:e7:98:d8:53:5b:38:57:73:c5:
         6d:e4:85:e5:cb:58:8e:f1:89:6d:1c:41:d1:ea:d1:aa:fe:51:
         42:c5:ff:60:7d:d3:75:06:c7:12:2d:47:05:28:1a:28:cd:ea:
         1d:b3:b6:bc:0f:56:7c:c5:41:e7:e0:89:d3:26:61:d0:d0:55:
         78:67:ad:1e:82:83:47:47:d7:e6:9e:bc:37:19:60:f3:dd:42:
         1c:38:48:e1:1e:91:1e:5e:a9:e0:35:73:62:a5:9a:ce:78:e5:
         fa:0c:bc:0d:52:4b:75:f6:10:df:f5:3f:c8:4c:74:bf:47:31:
         2e:ca:0f:a6:83:15:ed:69:5f:35:fd:5a:81:f1:7d:26:0d:45:
         3e:5c:94:47:ec:be:4a:da:2b:ad:bf:88:0c:fb:7f:e2:c2:a3:
         44:9e:91:14:b8:55:7f:74:a1:a3:08:81:9b:06:df:fe:fe:cf:
         13:d8:08:0e:ed:8e:c7:7c:29:f5:03:ac:73:26:8b:29:74:39:
         4a:6d:4a:37:10:bd:3a:c6:71:61:64:cb:87:de:7b:d3:94:37:
         37:8b:fa:bf:1e:85:a2:5b:56:a1:70:86:12:93:9d:92:97:f1:
         b9:28:52:31:28:1e:2b:e8:8e:63:e7:1d:d6:3c:72:b0:ec:7d:
         13:e4:d3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:06:36 2026 by rpki-client