Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af44cea2-d23c-3f58-ab9b-364d697af692.roa
File:                     af44cea2-d23c-3f58-ab9b-364d697af692.roa (raw, json)
Hash identifier:          Pd5wz2uAg54LU77NXSlqgz2YQ0av+oUAmsz31uwZUic=
Subject key identifier:   E1:47:F9:F9:E1:29:CA:72:76:F1:ED:F1:DB:C0:3E:8F:A5:4C:D6:CC
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D4D5A7DF73CAFC6DA71C45DA0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af44cea2-d23c-3f58-ab9b-364d697af692.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     36183
IP address blocks:        172.226.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:7d:f7:3c:af:c6:da:71:c4:5d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=bd1fc546-48df-46f6-b4f3-7d9be3fa4d1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:eb:1e:ab:aa:c6:4f:79:2c:1f:f6:00:af:27:
                    f5:4a:3d:52:8e:8f:bc:2a:30:9f:d9:38:f5:37:ff:
                    3d:74:71:16:16:d7:ef:cc:8c:0d:06:b8:92:71:e7:
                    bc:e8:b1:62:73:76:e4:57:7b:aa:22:1e:95:0c:26:
                    6b:46:29:0f:4d:04:76:0a:73:b7:ff:c4:24:e4:6f:
                    a9:5a:64:7f:c5:41:33:19:18:87:c5:e9:66:42:54:
                    9b:5d:65:df:b0:b6:58:c3:5b:e6:2d:87:02:2f:7b:
                    3d:90:3c:81:52:1c:3b:fc:6e:2b:11:e0:a1:43:7c:
                    e5:64:6a:9a:54:a3:e1:94:f1:83:e8:bf:1b:f0:1b:
                    42:bd:cc:dd:ef:8a:4b:03:5f:ef:98:08:c6:a0:b9:
                    b5:03:10:e3:18:9a:9f:80:d4:b8:08:4b:18:c1:34:
                    15:61:4e:d2:17:a5:ae:be:2f:65:68:95:2c:9b:c9:
                    c0:8d:46:e3:69:30:d8:de:5d:5a:7c:88:63:26:01:
                    73:75:09:1a:15:6e:4a:5a:8e:73:65:15:31:06:ce:
                    7d:12:df:1e:b9:22:bb:24:6b:14:8f:d0:ca:f4:b2:
                    da:f7:73:e8:45:19:c5:19:45:d5:a3:b4:ff:3a:04:
                    b2:5a:98:b4:c9:95:1e:db:fd:85:7e:4e:ab:02:89:
                    76:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:47:F9:F9:E1:29:CA:72:76:F1:ED:F1:DB:C0:3E:8F:A5:4C:D6:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af44cea2-d23c-3f58-ab9b-364d697af692.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.226.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:d5:9f:7f:b2:0a:fa:b1:73:b3:98:07:13:f2:81:14:a5:b7:
         e7:da:59:29:6a:89:cf:a9:d5:af:d0:63:aa:61:75:95:cb:63:
         c2:66:00:29:6d:41:c0:e1:b5:7f:79:06:9c:6f:03:d2:81:3c:
         29:29:0a:56:fe:87:1b:1d:00:ae:0d:ef:30:bf:09:d1:e8:31:
         0a:17:76:c6:d3:58:d1:de:3b:90:6b:15:fd:1f:71:08:1f:72:
         41:5a:7c:76:58:f6:8f:ba:2c:11:58:1d:04:6d:76:89:1c:d7:
         e2:71:2c:e9:f1:e6:c4:14:28:af:a5:43:ca:82:f2:86:7f:8c:
         84:dc:38:a8:e8:e0:40:15:e6:ea:a3:ed:f2:82:ad:e2:2c:79:
         e3:96:08:c5:eb:b7:2a:52:0c:32:1b:c8:fa:c9:c1:c9:19:e7:
         3a:8e:c2:d4:5e:f6:a2:e7:db:7c:34:4a:ab:5f:f2:9d:31:8c:
         b5:e1:f7:36:61:93:3e:7c:83:ff:9a:e5:29:9c:bd:06:1d:a1:
         7a:da:65:86:15:ae:31:ae:6c:7c:c1:5c:3f:33:90:ef:11:9b:
         ad:56:51:73:76:fc:b4:f1:68:ae:5a:5c:47:af:5b:38:9b:e8:
         d6:09:b1:77:94:92:9c:1d:64:a9:16:0d:10:e4:fd:d5:af:92:
         d5:08:8a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:34:54 2026 by rpki-client