Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/746d32d6-cdae-3263-a43d-4fe067b49807.roa
File:                     746d32d6-cdae-3263-a43d-4fe067b49807.roa (raw, json)
Hash identifier:          vgwIEbOuznqLeFnhHa+0Osok/LGQsR85mIsN9FkRVxQ=
Subject key identifier:   30:44:CE:31:CB:6C:B2:E9:34:FF:12:A8:DE:5A:74:56:A8:54:8F:E1
Certificate issuer:       /CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2
Certificate serial:       010D0C9F4328584CAB8C48F10A5C8CBAE7710B00
Authority key identifier: 19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/746d32d6-cdae-3263-a43d-4fe067b49807.roa
Signing time:             Wed 28 Jan 2026 02:00:29 +0000
ROA not before:           Wed 28 Jan 2026 02:00:29 +0000
ROA not after:            Tue 28 Apr 2026 01:00:29 +0000
asID:                     62874
IP address blocks:        45.41.128.0/22 maxlen: 22
                          45.41.140.0/22 maxlen: 22
                          142.147.224.0/20 maxlen: 20
                          142.147.248.0/21 maxlen: 21
                          162.249.164.0/22 maxlen: 22
                          167.160.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ab:8c:48:f1:0a:5c:8c:ba:e7:71:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2
        Validity
            Not Before: Jan 28 02:00:29 2026 GMT
            Not After : Apr 28 01:00:29 2026 GMT
        Subject: CN=03d066c0-6775-4957-9f9c-11c261538601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:80:2b:d4:7b:e8:07:09:6d:35:fd:64:00:c6:
                    62:c8:2a:b0:ac:fb:c8:f9:bf:46:5a:c0:8c:1a:8b:
                    a7:c7:dc:75:9d:df:2b:14:f0:2d:73:de:3e:08:56:
                    f9:c9:c5:82:39:7e:97:d1:e4:88:a5:68:f7:61:cf:
                    1c:67:d2:4b:30:38:96:de:a3:7f:90:46:fb:8d:40:
                    39:78:76:e5:fb:b6:19:96:3d:61:77:59:83:3c:a9:
                    06:4c:c9:6d:ea:c9:14:30:6e:7e:b7:89:d7:52:d0:
                    35:3e:c6:12:39:9a:f1:1f:88:22:20:87:46:61:d1:
                    5d:f9:86:d8:54:fc:a1:b1:9e:4c:02:ef:0c:18:d8:
                    01:5d:f4:50:f5:3d:9e:f6:92:5b:ab:cc:47:a6:19:
                    f9:2e:f3:21:6f:ef:26:27:63:3b:08:f9:42:ac:a9:
                    10:67:1d:78:95:15:52:e7:f6:8c:eb:01:03:1d:5c:
                    95:d5:35:bb:ce:4e:e7:44:64:a9:c8:e3:47:b5:43:
                    fe:77:d8:15:2d:75:29:a2:9a:e0:cc:08:f1:d8:30:
                    40:a0:c6:86:21:80:61:79:ba:20:82:64:83:e9:14:
                    3f:1b:7e:02:12:f9:d1:18:fd:11:45:04:9f:0d:3d:
                    34:65:81:9b:2b:a4:45:a9:a0:6c:a8:40:fc:72:b5:
                    e6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:44:CE:31:CB:6C:B2:E9:34:FF:12:A8:DE:5A:74:56:A8:54:8F:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/746d32d6-cdae-3263-a43d-4fe067b49807.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl

            X509v3 Authority Key Identifier:
                keyid:19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.41.128.0/22
                  45.41.140.0/22
                  142.147.224.0/20
                  142.147.248.0/21
                  162.249.164.0/22
                  167.160.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:a8:6f:c1:80:3e:8e:7a:8e:29:2f:7e:b1:24:ff:d9:c1:c5:
         82:c5:b0:66:3c:19:3e:f7:4a:7b:0e:84:2e:1d:5e:f7:e1:84:
         79:bc:5d:fe:f5:95:2d:32:00:44:a1:bf:e8:fc:ae:6b:43:56:
         fd:68:c3:e3:29:ad:5a:76:64:2b:0c:f2:ac:52:59:ae:cb:03:
         3d:14:49:2e:e3:3e:e1:f8:30:14:6f:d7:c2:54:1e:f3:5e:15:
         d5:be:ad:dd:6a:4e:03:cf:51:50:be:f8:30:c9:8e:a7:92:a6:
         90:92:e3:1b:85:89:47:d3:91:31:cd:f9:ec:b1:38:b3:23:13:
         48:cd:34:b3:f9:0b:84:50:1b:0d:8e:97:c8:39:e1:88:7a:bb:
         7b:29:54:6c:3b:0f:fe:f6:82:5a:a4:16:0a:3e:9a:45:12:e7:
         12:35:77:40:a4:03:8c:7c:17:51:d8:d5:fc:f6:85:c6:f3:05:
         90:df:3a:1b:fa:a7:9b:d9:4b:18:ee:9b:41:80:7a:ba:55:76:
         8f:24:a9:b9:ba:5f:7a:5c:a2:a5:3f:94:78:3f:33:90:13:e0:
         d0:93:45:eb:2f:4f:6f:ce:05:f1:05:46:c6:b7:6e:97:b0:63:
         36:51:ce:cf:90:bb:df:68:00:91:e1:15:cd:d9:f9:5d:49:b3:
         ad:be:9b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:00:49 2026 by rpki-client