Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55a4d94f-b4d5-447a-9417-908a0f5a404e/dc665ef5-7866-3242-a76c-103dcc34ac7c.roa
File:                     dc665ef5-7866-3242-a76c-103dcc34ac7c.roa (raw, json)
Hash identifier:          UoQMlcKVjLXar0E07AX78lYAPqf1AuB+0jfTNEdAtPI=
Subject key identifier:   E7:50:E4:62:E5:13:1A:24:CD:43:AA:6B:1D:85:19:18:59:C5:D4:0F
Certificate issuer:       /CN=55a4d94f-b4d5-447a-9417-908a0f5a404e
Certificate serial:       010D0C9F4328584D703FE712127C81A484CC95C0
Authority key identifier: B5:F8:B7:36:93:7F:76:9E:25:D8:97:09:C9:60:7A:A6:D9:0E:3C:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55a4d94f-b4d5-447a-9417-908a0f5a404e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55a4d94f-b4d5-447a-9417-908a0f5a404e/dc665ef5-7866-3242-a76c-103dcc34ac7c.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     394542
IP address blocks:        170.117.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55a4d94f-b4d5-447a-9417-908a0f5a404e/55a4d94f-b4d5-447a-9417-908a0f5a404e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55a4d94f-b4d5-447a-9417-908a0f5a404e/55a4d94f-b4d5-447a-9417-908a0f5a404e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55a4d94f-b4d5-447a-9417-908a0f5a404e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:e7:12:12:7c:81:a4:84:cc:95:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55a4d94f-b4d5-447a-9417-908a0f5a404e
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=29bdbaa0-ef76-42c6-abac-2efc886e4181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:cf:c0:75:62:40:d1:5a:48:bc:79:c1:60:4b:
                    1c:c8:59:16:41:c8:ae:28:2f:3b:fd:0c:31:44:6b:
                    a0:52:25:de:e3:21:89:33:34:a2:5a:fa:76:16:f6:
                    83:70:04:74:54:3c:3e:4f:36:21:d5:f7:d4:49:5f:
                    aa:6c:a7:00:46:00:8b:0a:c0:ef:df:b8:79:be:d7:
                    2b:96:a5:2a:de:ee:e0:f3:a9:0e:cd:0b:52:2a:70:
                    96:89:2c:b4:1a:5d:da:7c:18:0e:11:87:4a:24:ba:
                    5e:77:e9:0c:8a:5d:8d:e9:35:11:35:98:e4:c3:81:
                    82:37:c5:49:ee:19:27:92:f7:a0:fe:2a:a9:99:ea:
                    08:3a:04:f0:07:8b:91:40:13:df:89:ae:d6:c6:62:
                    f7:5a:fc:15:19:b0:52:69:a1:2e:30:6a:1e:44:24:
                    a2:54:52:e5:0c:00:ba:b9:b9:28:75:fe:dd:9a:3e:
                    a5:b4:a3:cd:55:39:76:af:53:96:2c:95:66:a7:b6:
                    9d:70:e4:ba:a0:bd:5f:d4:c5:31:a0:83:9c:af:39:
                    e4:4c:fa:3d:06:1e:22:c0:1d:b2:93:ee:74:2d:52:
                    eb:d0:a1:71:6e:ac:45:5b:71:3f:87:42:d2:01:58:
                    50:10:e8:36:36:93:21:9e:a3:b9:53:db:5f:af:ec:
                    80:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:50:E4:62:E5:13:1A:24:CD:43:AA:6B:1D:85:19:18:59:C5:D4:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55a4d94f-b4d5-447a-9417-908a0f5a404e/dc665ef5-7866-3242-a76c-103dcc34ac7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55a4d94f-b4d5-447a-9417-908a0f5a404e/55a4d94f-b4d5-447a-9417-908a0f5a404e.crl

            X509v3 Authority Key Identifier:
                keyid:B5:F8:B7:36:93:7F:76:9E:25:D8:97:09:C9:60:7A:A6:D9:0E:3C:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55a4d94f-b4d5-447a-9417-908a0f5a404e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.117.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:74:b9:04:79:d4:14:a4:08:ba:f8:d8:b2:a7:7b:cf:b9:82:
         4d:c7:c1:00:a7:08:97:4b:ef:af:a6:14:8d:dd:ad:5f:c3:87:
         d0:1f:64:bd:b2:30:ff:05:21:73:c1:21:ba:08:f1:bd:7d:9b:
         f0:d4:a5:12:45:c2:7a:d9:f2:c9:0a:71:5b:46:e0:a6:f1:63:
         8f:15:ed:fe:d3:20:72:4c:46:9f:7e:c7:8c:3f:12:b7:b9:33:
         e6:54:01:89:df:4c:36:d6:55:f5:cf:b6:f9:8d:25:7d:35:91:
         20:33:5f:c6:39:0b:8a:78:b8:8d:54:e2:05:63:07:1d:00:af:
         60:05:d5:7a:7a:7c:df:c8:8d:e2:14:fa:82:90:f9:c7:27:68:
         19:d6:82:ba:4e:a2:a8:6e:bd:59:f5:bf:e4:7c:a5:7b:0b:45:
         71:fe:65:08:b9:65:5d:4f:b5:f5:84:b8:15:a4:b3:37:d6:8f:
         75:05:a2:41:fb:72:bf:4d:60:f7:70:83:37:99:41:f5:c0:06:
         d9:20:a3:26:fb:e3:cf:d0:34:bf:e3:1e:cf:ce:de:7b:41:2d:
         1b:e3:60:c6:16:ca:8b:21:68:18:4a:0a:e6:25:e2:33:b3:bc:
         dd:dd:b7:5f:09:fe:92:0d:86:60:f9:fc:d3:ee:b3:9e:92:e0:
         ed:0f:70:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:54:04 2026 by rpki-client