Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/46995dbb-97d6-3712-87ce-2048ddabbdd8.roa
File:                     46995dbb-97d6-3712-87ce-2048ddabbdd8.roa (raw, json)
Hash identifier:          5kDf67ZYa4MYoEIGr0dXwZq2/s3xOfoL4M/pnHQrj4A=
Subject key identifier:   8E:BD:B4:91:75:81:0B:39:B3:3B:38:94:23:FD:CA:8F:A4:CA:BE:3C
Certificate issuer:       /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Certificate serial:       010D0C9F4328584CC611E94753F77BB1135C7AE0
Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/46995dbb-97d6-3712-87ce-2048ddabbdd8.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     13807
IP address blocks:        24.72.204.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:11:e9:47:53:f7:7b:b1:13:5c:7a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=0d27c201-d7b9-4c6d-9d76-38d0aec7aaab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f1:0e:01:06:1e:1e:3c:a3:b9:61:b1:19:6c:
                    b0:32:74:61:c4:0f:bf:1b:a4:61:4d:bf:ff:30:8b:
                    55:0e:db:bc:65:0e:23:b4:d9:78:f0:93:cb:6c:30:
                    f9:3e:ec:ff:3c:d5:75:ff:06:f2:9b:59:b0:9c:71:
                    db:89:36:ab:ab:84:c3:de:48:27:69:76:b3:84:60:
                    be:6b:93:c6:94:3c:4b:d4:86:40:11:4f:82:3c:2a:
                    dd:14:01:0a:65:e2:dc:ab:c5:0d:3e:c4:99:34:58:
                    23:0a:f3:b1:4c:02:8b:c4:2e:4e:36:58:5d:29:63:
                    16:fa:7f:7c:74:14:ba:b2:a0:7b:8a:e8:80:6f:aa:
                    16:45:4c:d6:12:2b:7a:49:d0:ed:97:81:74:6e:d2:
                    96:f0:53:bd:3a:07:f9:82:94:76:1f:d1:c6:d2:66:
                    6e:6b:c6:4d:a2:70:d1:ee:d5:95:2b:65:7b:05:30:
                    2b:4e:9a:4e:e6:1c:00:98:03:46:29:3a:3f:73:42:
                    01:7f:32:5f:e2:da:dd:21:a5:e7:b8:c5:ad:28:2b:
                    a9:c9:ef:fe:0c:9b:1f:0c:d5:12:15:b6:f9:40:af:
                    f1:b1:60:1b:ce:77:04:34:c2:9c:be:07:37:c4:66:
                    da:d1:15:58:07:a5:16:e7:01:90:0d:e3:0c:92:0d:
                    c0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:BD:B4:91:75:81:0B:39:B3:3B:38:94:23:FD:CA:8F:A4:CA:BE:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/46995dbb-97d6-3712-87ce-2048ddabbdd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl

            X509v3 Authority Key Identifier:
                keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.72.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:c4:26:b2:7f:6c:42:7d:62:34:88:8f:3e:40:3b:3c:64:53:
         18:45:65:bb:74:b7:87:3c:46:2a:63:f1:3b:6b:3d:ef:2d:f2:
         69:55:30:67:1c:98:dd:99:79:78:f2:3c:5b:50:b5:b7:0e:f1:
         be:f9:f6:d3:f3:9f:77:6f:1c:d9:0d:fb:96:06:71:0d:95:ea:
         85:d6:6e:8b:95:7b:0e:ba:42:67:65:2c:76:f4:9c:ea:48:7c:
         d3:d7:cc:62:bf:7a:6d:66:c2:20:1d:f5:35:47:7e:a0:8c:b9:
         61:f7:44:5c:73:ec:d8:74:fe:9f:c5:97:2f:db:4a:4a:f5:33:
         f2:d5:e1:e1:65:cc:8a:20:db:48:a3:1b:99:15:bb:19:90:c7:
         9d:16:13:c3:96:fe:ef:0f:ca:c1:3a:00:65:27:b5:c8:86:14:
         b7:7b:1c:14:f1:88:69:fa:c2:5f:a7:c0:9d:78:31:55:fe:6e:
         c7:a7:12:05:f8:73:61:cb:86:e4:55:b8:ed:1e:0e:60:23:c1:
         c8:16:66:b8:b7:9f:09:b3:a4:91:58:f4:3e:ee:f3:54:1c:56:
         36:ea:4f:8d:cc:e1:9d:44:4c:7d:9d:31:85:bc:61:28:d8:78:
         72:e3:fc:d7:14:a0:cc:42:cf:25:9f:68:3b:66:59:71:38:37:
         0a:63:65:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:25:54 2026 by rpki-client