Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1d1a1ab4-a606-3bc1-b67b-71a77a9052c1.roa
File:                     1d1a1ab4-a606-3bc1-b67b-71a77a9052c1.roa (raw, json)
Hash identifier:          B/BaBO9qmYCVr7WrkccYWhzf29EHNNjYF5fipSuoa0A=
Subject key identifier:   98:DC:11:42:AF:CC:F2:CF:82:8F:5D:7A:47:09:34:EB:D3:9C:53:94
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3E00008396F7A715F25A5F70
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1d1a1ab4-a606-3bc1-b67b-71a77a9052c1.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     64283
IP address blocks:        71.44.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3e:00:00:83:96:f7:a7:15:f2:5a:5f:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=0773e4dc-1c4d-43db-9014-afda20f73176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c7:d5:89:4f:b7:ed:1a:8a:f7:c4:90:e0:4f:
                    d6:27:63:fb:04:18:ee:82:7c:7e:9d:dd:77:21:91:
                    b2:3d:50:b8:12:b4:50:a4:9d:c9:82:3c:9e:78:fc:
                    cf:a7:f5:28:b6:21:a2:dc:78:fe:e9:29:cb:25:07:
                    1c:90:f5:03:d1:84:c6:01:16:71:e9:e0:0b:fc:77:
                    d6:f9:b7:44:a6:76:de:4d:5c:01:4a:ca:10:3c:e1:
                    1e:0b:7d:0a:70:22:22:64:f3:f0:88:1b:9c:7a:b8:
                    f8:41:df:3a:26:e5:14:d2:96:d7:94:78:61:c2:3e:
                    6a:3a:18:7f:24:71:04:34:10:0b:97:07:80:86:4d:
                    54:ac:47:80:92:71:ed:fb:4b:9c:94:fd:34:ce:eb:
                    01:24:76:e5:10:21:cf:52:b6:39:7d:40:a5:f5:21:
                    dc:6c:19:78:eb:34:3b:c5:8d:21:1b:f5:86:fd:ac:
                    7c:98:06:8f:6c:e4:e6:9f:dd:3a:d1:1e:b9:54:3c:
                    45:9f:c8:a9:94:1c:5d:83:7a:06:6a:30:79:a1:da:
                    ed:f2:3a:8d:b8:00:38:1a:19:da:4a:cc:01:20:12:
                    09:db:11:19:bf:94:80:75:8b:2f:77:47:a9:07:1d:
                    8b:22:67:f8:0d:8d:55:a5:a2:3b:a6:cd:e8:16:5c:
                    d6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:DC:11:42:AF:CC:F2:CF:82:8F:5D:7A:47:09:34:EB:D3:9C:53:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1d1a1ab4-a606-3bc1-b67b-71a77a9052c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.44.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:cb:79:e3:1b:17:3a:5a:7e:39:3c:d2:30:a2:77:7c:2f:63:
         e7:32:c5:ec:f3:0b:b8:ec:c3:fe:a3:b4:b1:e7:c6:dd:c2:2f:
         46:79:fc:26:26:24:d8:39:3a:05:de:f2:be:53:f7:97:81:1f:
         cf:67:b1:55:77:e8:df:c4:7c:ce:c3:77:f1:4a:ed:42:e1:a5:
         95:fa:3c:70:c7:83:05:8d:25:04:b9:51:17:d7:10:7e:1a:37:
         49:c2:99:0c:0c:03:d0:a9:b2:2a:d5:4d:12:9b:b3:db:cd:58:
         f6:25:37:0c:35:f7:88:c9:a9:56:38:c9:d8:08:c1:b6:9d:70:
         9e:24:f3:10:27:eb:c6:44:46:15:68:27:cc:b6:72:4f:e1:92:
         03:1b:a5:bf:c2:58:51:e0:a4:31:81:cc:4e:f3:9b:76:27:7e:
         94:ca:0a:52:8c:69:2c:79:50:33:67:0c:c8:3e:be:5a:44:c8:
         6b:83:4d:37:dd:46:62:8d:fc:37:18:96:1b:6a:68:30:23:2a:
         90:bc:9d:b5:96:86:bb:14:b1:bb:4d:15:c9:46:e1:93:78:f8:
         ac:84:4d:6a:9d:7f:f3:d6:6a:5e:e4:11:d1:45:88:80:a8:60:
         ac:c7:2a:db:5e:d0:ac:e2:b1:4c:6f:d9:03:d8:51:ef:5b:5e:
         cd:e5:14:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:41:46 2026 by rpki-client