Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/ffc28263-802e-3e53-8172-c6e3c1bf97d7.roa
File:                     ffc28263-802e-3e53-8172-c6e3c1bf97d7.roa (raw, json)
Hash identifier:          tHzfS5Pwactv+vYvXIFzrp2JkezFmSo2VMaaHr2nWYo=
Subject key identifier:   98:AA:C9:90:E9:FA:8C:2C:D2:85:10:FA:A8:B8:41:E7:25:D3:72:F3
Certificate issuer:       /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395
Certificate serial:       010D0C9F4328584D60E515F156C3DF947464CF00
Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/ffc28263-802e-3e53-8172-c6e3c1bf97d7.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     17275
IP address blocks:        161.107.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e5:15:f1:56:c3:df:94:74:64:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=6d03e555-fd20-405d-bfaa-3d0b97e8e157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:13:f8:70:15:fb:f7:20:95:14:1c:6c:46:bb:
                    12:cb:8b:a1:bb:a4:5d:2f:48:d2:0a:5b:2b:6f:5a:
                    32:ad:a3:d7:1b:a6:14:0f:f3:32:1e:8c:bd:91:c4:
                    b8:80:3f:ac:f1:5b:27:18:13:02:89:d7:7c:84:13:
                    fc:9e:9c:f3:12:ff:45:37:a0:f6:83:74:5b:52:b8:
                    06:c4:3c:de:12:cc:e9:bb:0c:7f:5a:c0:93:d7:9d:
                    fc:0f:b4:a1:41:ff:59:9a:63:07:18:36:68:12:65:
                    b8:9c:38:9b:9f:99:1f:0d:da:d7:c8:eb:15:89:dd:
                    a7:77:6d:fc:cf:52:4f:ed:7c:24:d6:16:61:89:bb:
                    19:92:7d:ab:b4:ce:db:7e:de:eb:d3:1b:93:b0:a9:
                    ee:ca:26:9a:59:44:4a:91:b8:06:3c:00:cc:39:27:
                    6b:d3:a0:97:a5:17:79:10:a9:fd:f4:fb:df:b2:3d:
                    17:d4:b2:88:9c:36:76:e1:f1:c6:04:75:3c:d9:a1:
                    af:65:b8:64:bd:4e:27:61:e9:b1:8f:5c:5f:b6:c9:
                    04:ae:be:05:e3:39:66:a6:0a:0f:ad:ee:e5:93:d4:
                    e5:93:2f:c0:ab:6e:91:00:6f:87:db:29:6a:cc:fc:
                    b9:9d:35:6a:46:54:61:44:7b:44:27:33:3d:50:00:
                    8d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:AA:C9:90:E9:FA:8C:2C:D2:85:10:FA:A8:B8:41:E7:25:D3:72:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/ffc28263-802e-3e53-8172-c6e3c1bf97d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl

            X509v3 Authority Key Identifier:
                keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.107.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:a8:86:b6:fc:a6:ed:f8:8b:36:c4:44:6f:b0:be:a4:82:04:
         3d:ba:02:c4:8c:bb:1c:b9:49:7b:6f:9e:08:4b:72:b2:b7:83:
         47:51:c2:22:38:78:d7:d6:e6:31:d8:6b:76:e3:fe:62:e8:a1:
         08:61:0e:6e:79:cf:af:d4:48:b2:2b:7c:07:b7:02:15:0f:4c:
         6a:fa:6b:1c:1e:69:69:97:a0:be:f5:23:24:e0:0c:e4:e2:52:
         b4:00:36:09:d1:cb:84:56:48:72:7e:d8:1c:d2:63:05:dd:23:
         77:de:a7:ab:bb:66:84:9e:5e:07:93:92:97:2f:de:40:f6:8e:
         37:9c:c1:68:42:af:85:75:28:40:cd:c0:27:55:8e:27:f9:cc:
         0c:8b:e8:da:3e:60:e5:25:a6:53:2e:7d:00:96:71:95:2d:10:
         00:d3:22:6c:d0:1f:62:f3:ff:4f:1f:41:c4:3d:bf:f7:ca:d9:
         2a:9c:fb:d6:50:28:e8:3f:e7:60:93:6f:c1:45:72:75:ac:68:
         b6:9d:85:5c:a8:42:cf:d8:a3:e4:e5:14:90:05:41:ab:a2:d6:
         7c:e1:f8:9b:80:af:cd:df:2e:b3:ed:bc:57:4b:64:6c:a5:20:
         cc:6f:6a:86:03:79:e1:40:4e:ab:a9:a8:c6:a3:53:44:12:f7:
         5b:cf:8d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:21:33 2026 by rpki-client