Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/c39a4354-aede-3ae8-ab66-37717e4d1c1b.roa
File:                     c39a4354-aede-3ae8-ab66-37717e4d1c1b.roa (raw, json)
Hash identifier:          cRQRVFTZw0IrkrBNi3LFg25IJidGowlkinLVOrkj2Yg=
Subject key identifier:   95:5B:29:A2:24:6E:89:C1:4F:31:B3:F0:39:65:52:3A:EB:12:5A:8F
Certificate issuer:       /CN=6a491649-e76e-4a4b-aa8d-8c44043b81bb
Certificate serial:       010D0C9F4328584D0BDD05186CFEED3367040440
Authority key identifier: 2F:9C:DF:58:D6:DC:59:06:B3:86:E9:37:EC:EE:5A:0F:D4:9F:DF:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/c39a4354-aede-3ae8-ab66-37717e4d1c1b.roa
Signing time:             Tue 03 Mar 2026 14:00:40 +0000
ROA not before:           Tue 03 Mar 2026 14:00:40 +0000
ROA not after:            Mon 01 Jun 2026 13:00:40 +0000
asID:                     36236
IP address blocks:        198.176.44.0/22 maxlen: 24
                          2604:a680::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/6a491649-e76e-4a4b-aa8d-8c44043b81bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/6a491649-e76e-4a4b-aa8d-8c44043b81bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0b:dd:05:18:6c:fe:ed:33:67:04:04:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a491649-e76e-4a4b-aa8d-8c44043b81bb
        Validity
            Not Before: Mar  3 14:00:40 2026 GMT
            Not After : Jun  1 13:00:40 2026 GMT
        Subject: CN=a515a5a4-0999-4143-b60a-bc860f548019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:17:24:9b:ba:58:e1:1a:af:71:83:18:3d:fe:
                    40:c9:49:7e:45:a2:e6:8f:34:d9:5c:13:42:54:84:
                    b4:08:cc:ff:2d:0a:fa:81:ef:52:b7:98:38:c9:b8:
                    93:85:91:0a:81:73:a6:4e:97:12:d4:bb:36:05:cd:
                    ac:b5:de:2b:fb:ad:64:39:30:30:fb:ab:06:03:0c:
                    a3:0b:0d:74:27:5c:21:9c:2c:28:19:be:0e:5a:fe:
                    46:8c:a1:84:38:af:b2:b2:78:bb:c8:4b:98:72:d4:
                    fa:ea:bc:24:ba:03:5e:76:a3:96:5f:61:57:4e:a0:
                    e6:d3:f9:fa:71:11:eb:ee:36:16:1a:25:ae:0d:22:
                    34:d0:b1:42:63:03:d4:4e:11:3f:1e:c3:5f:f6:65:
                    20:10:41:2f:97:3e:4c:f6:bd:c1:6d:a6:9e:2d:dc:
                    da:bf:5d:a6:6c:02:9a:be:0c:a1:60:37:ef:91:1b:
                    28:ca:5d:5e:47:a5:d1:9b:3f:31:87:6a:e4:e7:84:
                    fb:42:91:c7:ac:2b:0e:6c:f8:f7:87:0e:c5:d4:93:
                    95:38:7a:ef:e9:4b:03:e3:ac:72:45:71:2e:63:12:
                    78:63:30:58:58:04:f5:e7:e7:4f:02:0f:60:7d:70:
                    b2:09:37:22:8a:2f:35:18:46:f1:5d:d2:29:c2:be:
                    88:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:5B:29:A2:24:6E:89:C1:4F:31:B3:F0:39:65:52:3A:EB:12:5A:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/c39a4354-aede-3ae8-ab66-37717e4d1c1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/6a491649-e76e-4a4b-aa8d-8c44043b81bb.crl

            X509v3 Authority Key Identifier:
                keyid:2F:9C:DF:58:D6:DC:59:06:B3:86:E9:37:EC:EE:5A:0F:D4:9F:DF:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.176.44.0/22
                IPv6:
                  2604:a680::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:27:6d:7c:6d:db:7c:42:e0:ad:ad:23:e4:3b:d5:22:84:af:
         e5:17:be:c6:83:26:d4:98:bf:91:6e:fc:5e:97:45:9f:89:84:
         c0:ba:ba:0a:ff:b7:47:6f:cd:3d:eb:f6:e3:85:a8:1f:0e:08:
         bf:7b:24:8e:e6:e3:9c:10:82:bb:71:49:67:98:24:ec:41:7b:
         df:12:3b:48:5b:cb:51:a0:20:8c:aa:2c:83:90:ec:04:6e:53:
         99:a6:55:b9:5b:14:c5:14:eb:09:d1:20:15:e8:60:54:49:71:
         c9:d9:df:cd:18:79:ee:77:89:8a:83:63:2d:f3:e1:08:1e:34:
         ca:97:fe:5e:cb:a4:88:44:1b:57:40:a5:6d:39:41:a0:ce:40:
         05:e7:0d:2e:32:f1:04:4c:5f:0b:d2:44:81:09:cc:8a:96:dd:
         10:ef:01:ef:2e:38:2b:03:65:e5:33:12:10:e4:01:0a:58:e5:
         02:b1:6a:20:e1:79:e3:74:a0:4a:8d:c3:32:65:0f:cd:e8:27:
         b8:b1:02:36:69:75:d5:a6:50:24:1a:16:41:9f:49:b5:3e:39:
         26:12:7c:72:f4:00:b4:8a:f0:99:cb:60:a5:e7:37:f2:cc:53:
         10:fc:82:56:ea:7e:06:dd:11:45:de:fc:c1:d5:d0:11:07:1a:
         77:89:66:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:31:20 2026 by rpki-client