Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70ba8597-8362-30a3-8c57-a5b999f39895.roa
File:                     70ba8597-8362-30a3-8c57-a5b999f39895.roa (raw, json)
Hash identifier:          Z8zN+Zfcwnzi3t0Uoxf5G10lTiQWFKKsC/22C6p29K8=
Subject key identifier:   B5:7D:55:46:AD:79:77:BF:19:3C:E0:B3:0F:16:67:3B:04:7F:D3:F9
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D4D5A8C2DDB5E9BDBE5272280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70ba8597-8362-30a3-8c57-a5b999f39895.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     36183
IP address blocks:        172.226.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:8c:2d:db:5e:9b:db:e5:27:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=e24090b2-b789-4d89-b657-9f9f0f8339a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3a:2a:80:b3:75:4e:ca:96:ba:da:c9:c1:09:
                    37:24:bb:9a:07:92:38:cf:91:4f:5e:fd:42:ba:9f:
                    47:2d:49:c3:da:c5:a9:a8:82:84:ce:8c:85:71:c5:
                    75:88:bd:2b:16:8f:18:ac:b0:0a:49:b9:6c:ae:5a:
                    02:3a:7d:cd:68:83:8c:ab:3e:ed:74:5c:2e:90:19:
                    45:d2:ec:d4:b1:eb:e4:4a:03:ca:c3:ed:ce:50:9e:
                    e2:51:bf:d8:85:30:8a:77:2a:03:51:57:6b:34:41:
                    a1:61:95:d7:75:8f:8a:ec:d5:64:9a:05:73:7c:c6:
                    a5:7e:c0:87:10:db:a8:45:47:15:c4:0a:95:60:83:
                    99:46:aa:7d:82:44:6d:77:e3:82:e9:7a:ad:3a:6c:
                    b9:35:16:fd:a6:dd:1b:ca:33:1f:19:7d:c9:e8:38:
                    f8:0e:fa:8c:6a:ce:b3:e6:ff:b5:ca:47:01:da:cc:
                    e4:55:3b:45:d1:45:5a:a7:45:e6:ca:99:3f:38:53:
                    8f:80:2b:c6:44:05:41:25:bc:47:3e:04:c8:65:ed:
                    d4:34:d0:26:22:32:e9:e2:3b:6c:fb:f1:aa:0b:a8:
                    e1:ed:aa:fc:7c:80:2e:d2:15:29:da:16:05:16:c6:
                    0a:21:84:27:b3:a4:8f:8e:14:cd:cb:c8:91:76:97:
                    08:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:7D:55:46:AD:79:77:BF:19:3C:E0:B3:0F:16:67:3B:04:7F:D3:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70ba8597-8362-30a3-8c57-a5b999f39895.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.226.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:42:63:fe:a9:7b:23:f5:91:3a:cd:ac:91:50:89:c3:41:e9:
         15:81:7d:82:bd:8e:37:2e:b9:64:12:55:dd:f6:99:94:74:a1:
         93:cb:0c:0f:e3:86:99:d0:04:55:f3:2c:3b:0e:0a:cd:fb:86:
         f6:00:47:46:d7:c3:e5:28:3e:16:de:fb:aa:ca:aa:39:8f:c4:
         6f:73:bd:e5:f3:5e:15:32:4d:c4:ee:36:51:9c:43:fb:10:f1:
         67:eb:80:0a:33:a3:6d:c1:14:e5:84:7c:fe:8b:ec:fa:f4:6a:
         93:8b:d4:b8:fa:8c:b6:25:99:e0:4d:4a:65:c3:8a:82:5f:75:
         c3:59:b6:94:91:7d:78:86:03:33:35:98:47:25:7c:47:4c:31:
         2a:86:d5:76:e7:be:77:8e:13:a6:d5:a1:8e:68:f0:25:d1:8a:
         c9:ae:d0:7e:77:a9:45:de:e0:1c:7c:d7:45:66:24:6c:c5:d8:
         21:53:33:0c:e9:aa:a8:b1:d0:f7:9f:c9:e1:06:4a:d7:64:97:
         86:54:d9:e2:98:f5:a3:bd:ca:e0:fb:17:d4:a8:97:79:35:ca:
         1c:b9:a8:b2:63:11:28:d8:e2:4b:0b:a4:59:fb:1e:6d:66:2a:
         f2:d4:ea:dc:17:39:13:4a:73:ac:4c:ec:d2:5a:28:8b:c4:ba:
         3b:6f:36:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:05:53 2026 by rpki-client