Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/40a67241-3cd8-43fd-9ff7-3e18bd867926/54427769-b1ab-3c85-94cb-0721b1f9f051.roa
File:                     54427769-b1ab-3c85-94cb-0721b1f9f051.roa (raw, json)
Hash identifier:          Hg5TwbXwVka/yuYdKMQKvMDnWlNvsmzupuoSEmkYen0=
Subject key identifier:   11:A2:45:F7:B7:33:AA:62:C5:7C:92:C6:0D:95:2C:B3:C7:07:17:62
Certificate issuer:       /CN=40a67241-3cd8-43fd-9ff7-3e18bd867926
Certificate serial:       010D0C9F4328584D71A50E7DF94F60CF1786BE00
Authority key identifier: D5:B5:59:9F:D6:FE:71:1C:FA:0E:BE:CE:0B:29:DA:34:DB:02:F5:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/40a67241-3cd8-43fd-9ff7-3e18bd867926.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/40a67241-3cd8-43fd-9ff7-3e18bd867926/54427769-b1ab-3c85-94cb-0721b1f9f051.roa
Signing time:             Thu 09 Apr 2026 01:00:23 +0000
ROA not before:           Thu 09 Apr 2026 01:00:23 +0000
ROA not after:            Wed 08 Jul 2026 01:00:23 +0000
asID:                     14618
IP address blocks:        202.37.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/40a67241-3cd8-43fd-9ff7-3e18bd867926/40a67241-3cd8-43fd-9ff7-3e18bd867926.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/40a67241-3cd8-43fd-9ff7-3e18bd867926/40a67241-3cd8-43fd-9ff7-3e18bd867926.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/40a67241-3cd8-43fd-9ff7-3e18bd867926.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:71:a5:0e:7d:f9:4f:60:cf:17:86:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40a67241-3cd8-43fd-9ff7-3e18bd867926
        Validity
            Not Before: Apr  9 01:00:23 2026 GMT
            Not After : Jul  8 01:00:23 2026 GMT
        Subject: CN=62081b30-1f97-471c-895a-7f72fdab9aeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:33:42:6c:a8:76:9f:d1:f8:ff:cd:c6:fc:dd:
                    a6:95:48:a7:39:ca:37:d6:e0:f2:f2:43:df:79:49:
                    1b:18:38:92:3b:ac:59:f1:95:3c:ac:a1:54:5c:a6:
                    89:57:f3:23:17:9c:5c:28:d2:08:58:b6:3b:b7:d6:
                    17:71:2b:f4:15:1c:10:9a:aa:c8:7d:3c:06:de:fe:
                    64:e4:4d:6b:5d:43:c1:8b:85:14:78:1b:57:ee:fc:
                    a0:ce:69:27:2d:66:93:50:4a:6e:30:68:9b:b6:0e:
                    81:4f:f5:b6:19:b2:b6:97:ce:d0:b1:65:9b:51:4e:
                    3e:1b:a4:bc:b7:7e:01:2c:90:74:9f:bb:2c:1d:9d:
                    ea:e1:45:98:12:62:9d:c2:29:6a:07:e4:0c:48:87:
                    af:96:ec:73:9a:d3:90:3a:3c:ff:e0:a9:39:27:71:
                    6e:6d:7b:92:92:90:8d:9f:76:6c:07:fb:18:c0:1b:
                    bf:af:01:44:d5:97:a4:6c:bb:90:fe:ed:3c:71:bd:
                    db:fd:fa:35:f3:a5:23:41:c1:5e:e5:75:79:67:df:
                    ee:db:62:1c:de:8f:d2:8a:a0:d4:40:7a:d9:14:aa:
                    a7:61:0c:1f:29:2c:9f:30:e8:b7:cd:ba:bd:cd:c0:
                    85:60:2a:2e:3d:bd:64:ce:e0:05:c9:63:6b:16:a5:
                    d3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A2:45:F7:B7:33:AA:62:C5:7C:92:C6:0D:95:2C:B3:C7:07:17:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/40a67241-3cd8-43fd-9ff7-3e18bd867926/54427769-b1ab-3c85-94cb-0721b1f9f051.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/40a67241-3cd8-43fd-9ff7-3e18bd867926/40a67241-3cd8-43fd-9ff7-3e18bd867926.crl

            X509v3 Authority Key Identifier:
                keyid:D5:B5:59:9F:D6:FE:71:1C:FA:0E:BE:CE:0B:29:DA:34:DB:02:F5:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/40a67241-3cd8-43fd-9ff7-3e18bd867926.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.37.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:bf:69:20:3b:5c:54:9d:85:dd:91:3b:0a:16:c5:b3:55:d9:
         43:1f:73:b0:a1:90:08:21:2f:51:d8:eb:fd:c7:58:d7:1c:24:
         e3:70:ef:f4:f8:63:03:03:30:b6:3c:cf:d1:b4:94:d7:de:0d:
         88:e0:40:ef:9b:a7:4b:bc:58:62:24:cb:63:46:1d:56:3a:0c:
         0c:e2:f5:96:59:be:f0:24:95:e6:be:2e:70:9b:e8:2f:37:67:
         a8:4a:99:f8:58:67:c5:e8:33:f8:0d:46:af:29:da:8d:8e:a8:
         ae:d6:87:f5:99:a0:ff:41:1e:a1:4d:b0:5f:60:0f:c6:47:c9:
         48:a5:7c:76:c5:7b:ed:6e:58:55:86:7a:be:06:07:ff:a8:bf:
         96:05:3d:36:04:ef:b1:41:6c:78:0a:67:3b:70:fa:93:3b:83:
         8f:1a:b9:d8:f8:7e:4d:fa:0b:89:e1:c6:54:b9:62:cd:21:23:
         77:26:ef:36:96:0d:45:ee:06:54:72:f2:f2:8d:53:d5:80:46:
         39:44:f3:e3:10:cf:53:06:58:b1:46:11:f7:fe:85:92:5a:a0:
         3d:b2:1d:20:05:a5:e6:d1:e4:b5:c0:f0:b0:0a:3d:4e:34:84:
         85:98:63:6f:09:27:0e:d6:69:11:09:ff:93:58:08:bf:f2:d8:
         1b:88:fa:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:40:07 2026 by rpki-client