Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/0b76bcd1-87c9-3e4f-8d62-960cf44707bc.roa
File:                     0b76bcd1-87c9-3e4f-8d62-960cf44707bc.roa (raw, json)
Hash identifier:          Nl+qZKnge4ZFKXZtVfjBymMThIS5eWzLUWT6fKw18u8=
Subject key identifier:   AE:09:D4:80:78:17:62:FB:A7:D8:9B:11:C4:93:AB:AF:F9:63:76:F0
Certificate issuer:       /CN=afc9c4c7-de4a-4066-870e-383d770d6d47
Certificate serial:       010D0C9F4328584CBDB1DEB730FF7C7DABF01E80
Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/0b76bcd1-87c9-3e4f-8d62-960cf44707bc.roa
Signing time:             Tue 03 Feb 2026 14:00:39 +0000
ROA not before:           Tue 03 Feb 2026 14:00:39 +0000
ROA not after:            Mon 04 May 2026 13:00:39 +0000
asID:                     14500
IP address blocks:        173.244.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bd:b1:de:b7:30:ff:7c:7d:ab:f0:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47
        Validity
            Not Before: Feb  3 14:00:39 2026 GMT
            Not After : May  4 13:00:39 2026 GMT
        Subject: CN=976764e9-bda3-4807-ba21-5b8e9d5798b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:43:0e:62:19:e0:ff:d4:d7:49:61:be:8c:87:
                    ff:46:41:10:6b:dd:8b:e2:d6:70:ec:3f:40:a7:53:
                    c5:52:b1:0b:40:cc:7e:f2:69:17:d6:20:4f:4f:2c:
                    a6:b4:41:a4:44:4f:09:d4:9f:dc:2b:77:0a:4d:b1:
                    58:8e:3b:ac:2f:10:a7:b1:da:e6:e3:8e:06:f8:83:
                    05:cc:43:8c:26:9e:a9:a1:e6:26:d3:e1:64:39:1a:
                    f1:86:fc:b9:5f:89:f4:87:d8:f5:64:ac:64:d6:1c:
                    71:22:4d:83:e3:c9:aa:70:64:6b:78:c4:20:aa:a6:
                    e6:47:98:81:72:a5:51:a9:2b:23:e6:ab:d0:39:9a:
                    07:bb:60:5d:39:c1:67:4f:09:37:71:72:1a:06:ff:
                    aa:01:7c:f6:b2:eb:0e:47:7d:91:df:71:cb:58:42:
                    05:e0:73:a5:36:0c:b3:aa:2b:b2:7a:62:28:36:19:
                    22:51:1b:16:a6:2a:06:9d:a4:d2:4e:88:f6:e8:d7:
                    81:59:54:dc:ef:d5:0a:96:67:98:ee:48:8f:b7:1b:
                    50:7b:2b:22:2a:bf:f0:fa:93:30:74:23:8a:6c:56:
                    b7:8d:d8:c7:e2:c2:89:c4:b9:4c:ee:c9:29:47:09:
                    b8:ab:f8:b6:9e:4e:8d:f6:e1:1a:fc:e1:81:72:4f:
                    d3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:09:D4:80:78:17:62:FB:A7:D8:9B:11:C4:93:AB:AF:F9:63:76:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/0b76bcd1-87c9-3e4f-8d62-960cf44707bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl

            X509v3 Authority Key Identifier:
                keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.244.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:24:64:00:52:ba:ae:ab:9d:16:b2:1f:63:10:e3:4b:b7:25:
         90:91:fc:85:02:64:5f:3c:16:ac:38:f6:39:14:6f:d0:45:3d:
         94:2c:9e:7a:42:f1:66:34:1d:ca:b1:a4:ad:b8:a2:ac:c3:09:
         42:0d:50:91:51:12:49:19:fc:65:02:bb:03:9b:e0:4d:1e:01:
         0e:db:04:89:99:9a:75:fc:8b:7e:c9:32:73:63:4a:09:d9:2b:
         fa:d8:59:83:8f:fc:a9:be:5b:75:ce:e8:54:10:75:dd:08:b5:
         2b:98:db:29:15:bd:ca:f6:2d:d5:55:a1:56:7e:1d:02:33:71:
         29:fc:ab:9a:ad:5c:72:b2:f2:6d:40:c7:8c:1b:12:72:37:a1:
         19:bb:65:30:b7:59:fd:95:8f:a1:c6:4d:fe:a7:25:24:22:ca:
         37:ec:a0:2e:91:75:1a:10:08:06:88:03:69:22:75:64:b8:78:
         58:2e:58:27:79:b1:62:40:c3:b8:d6:29:ff:d6:cf:44:dc:e9:
         ba:f6:f5:99:e8:80:78:ec:2c:af:f7:6a:ca:64:6e:a0:29:ee:
         3d:9e:a2:88:4e:a0:29:56:8e:fc:c8:9e:2d:76:2c:88:9e:c9:
         7b:9b:29:11:f3:c3:2a:61:a6:16:46:2c:cd:9a:af:27:66:bb:
         6a:4b:ba:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:36:19 2026 by rpki-client