Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aaabda53-d164-3ae9-aed8-f893f7b33cbf.roa
File:                     aaabda53-d164-3ae9-aed8-f893f7b33cbf.roa (raw, json)
Hash identifier:          scWIyvXZLq6aWI4tS8lgNS4/kkMdn5A6kq4knCdYvq8=
Subject key identifier:   91:30:A2:0A:7F:CF:E3:FA:1D:03:B7:21:E5:84:2A:EF:3B:47:68:E5
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D571FBB7C1C643E6A3A725A80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aaabda53-d164-3ae9-aed8-f893f7b33cbf.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     36183
IP address blocks:        172.224.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:bb:7c:1c:64:3e:6a:3a:72:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=028d2642-adb3-460b-b153-4ea2a6c03a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3c:39:7b:88:9e:28:44:a4:b6:a3:01:31:ef:
                    84:ef:f5:76:c1:b9:96:d5:6a:6a:4e:cf:d9:ee:30:
                    c4:65:31:97:f2:7d:6e:c6:4f:7c:92:fc:6c:80:02:
                    49:61:b3:bf:90:aa:9b:ff:62:7a:52:30:e0:f0:40:
                    93:2e:6c:ac:22:10:80:df:7a:0c:8f:24:6d:9c:99:
                    dc:f1:0b:16:2e:30:43:6a:22:aa:2e:e6:3b:e2:fe:
                    35:e2:fd:ba:b9:75:16:b7:3f:85:5d:46:ac:68:31:
                    7c:6c:88:ba:ed:09:56:e6:23:7f:50:5e:30:ad:ec:
                    bb:fc:ac:00:d3:9d:f8:82:b9:7b:b7:99:00:75:61:
                    5b:30:0f:78:88:35:f0:81:6b:c8:20:a6:dd:29:86:
                    39:b0:fd:74:3d:19:8f:a5:e2:7a:74:42:05:5f:49:
                    9d:be:6a:23:d8:81:ad:c0:2e:35:a1:8c:32:bb:3c:
                    41:5f:b0:1e:86:e4:b7:aa:36:75:95:04:68:b1:c5:
                    1d:e5:f3:d1:a4:56:5c:6a:f0:9a:ea:57:a2:3b:d7:
                    e6:37:78:27:75:28:cb:19:17:b0:eb:e2:c0:dd:c3:
                    90:0d:ec:29:e9:be:12:b4:0f:40:01:f0:ad:47:58:
                    9f:31:9c:03:8b:92:9a:a2:84:69:10:12:8e:23:5e:
                    02:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:30:A2:0A:7F:CF:E3:FA:1D:03:B7:21:E5:84:2A:EF:3B:47:68:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aaabda53-d164-3ae9-aed8-f893f7b33cbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.224.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:73:70:24:7a:23:2b:bb:f1:5e:2e:b2:3c:04:1d:60:35:3e:
         59:f1:b9:88:ea:1c:71:e0:65:e8:02:29:f6:b7:6c:61:79:e8:
         87:fe:61:e3:a5:8e:1e:ba:ad:21:7a:d7:f1:b4:71:b5:63:81:
         0a:9e:26:fb:71:c6:46:4f:2f:bb:dc:f3:70:e1:98:4e:04:8a:
         f7:00:73:35:af:e3:18:78:c3:1c:92:ba:26:96:0a:f5:a1:80:
         35:ef:2b:63:97:30:f6:59:97:e3:c8:f9:5a:50:fc:59:ec:d0:
         31:7b:9a:0a:d9:a3:68:bc:1a:66:0c:ab:cd:bd:65:8f:b1:46:
         a4:0d:de:2d:5e:07:d3:2c:56:06:c3:f2:bf:85:2a:8a:f8:53:
         83:4f:fe:16:24:97:cb:d1:76:e3:af:06:c3:9e:04:03:e1:d4:
         1d:ba:2e:d8:eb:56:55:d4:7c:61:ab:06:f8:92:76:63:78:4d:
         ad:c2:bb:76:9b:cd:66:e7:e7:77:f3:15:01:59:9b:2c:b4:37:
         ba:79:2e:0c:d8:44:fd:59:4a:74:e4:34:08:66:c8:78:5d:48:
         af:ed:0e:bd:8e:d8:d5:d1:bd:b4:0d:c1:53:e5:4c:37:5c:a4:
         e9:8c:34:3c:bc:a7:27:9e:59:b8:7b:bc:79:92:dd:1b:fa:e5:
         d8:5b:44:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:11:28 2026 by rpki-client