Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4af2d60d-7d3a-30e8-a88e-9268b7441016.roa
File:                     4af2d60d-7d3a-30e8-a88e-9268b7441016.roa (raw, json)
Hash identifier:          Lgvt+l01xuEXWbmtQu6JkOZHLgJVyfJMmx6s7EQ3A2E=
Subject key identifier:   03:0D:47:12:91:27:D3:6E:16:5C:3D:4D:36:10:6E:3C:98:1B:BE:20
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFEA8C67426C82217EC900
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4af2d60d-7d3a-30e8-a88e-9268b7441016.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33363
IP address blocks:        104.137.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:ea:8c:67:42:6c:82:21:7e:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=1583e86a-d941-421d-9c5e-c8de0f6d634d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:58:85:c4:59:30:fc:37:b4:bf:9a:52:cf:40:
                    f1:e4:9b:af:ae:a8:e2:6d:b5:40:c4:42:87:3c:aa:
                    a7:51:c0:fe:52:7c:59:df:31:b4:8a:0a:88:f1:00:
                    99:ec:05:26:f2:73:ca:de:02:05:a6:4b:fc:e7:4e:
                    0d:35:ed:83:92:e4:82:78:21:4e:b7:ac:08:16:35:
                    80:4e:a7:65:3b:3e:00:60:70:81:44:7d:ca:5b:b2:
                    c3:02:43:e2:22:61:b2:9a:94:bc:d0:9d:6d:ab:03:
                    d9:42:45:a0:a9:28:97:a9:f6:2f:0e:c7:17:a4:24:
                    aa:3b:d1:02:4a:71:ed:f0:a3:9d:26:38:b5:3b:3e:
                    17:b0:d1:74:6e:42:78:01:7f:49:18:3a:06:ae:c9:
                    67:79:f2:2b:ed:f9:37:20:f0:cf:42:11:bd:1b:94:
                    8d:33:7d:e0:12:6e:e3:99:20:e3:f9:3a:6f:1a:9a:
                    63:19:0f:c9:c5:d1:a0:c7:09:a0:68:ae:3e:c3:41:
                    ea:c9:4b:65:7b:01:cc:10:ee:17:e8:60:c6:be:b4:
                    7e:30:45:81:ff:d1:ee:bb:dc:96:ba:71:68:ec:81:
                    8e:a6:ce:4c:f5:cc:55:8e:db:c4:d1:e8:c6:96:29:
                    52:eb:a0:08:6e:a0:ab:23:5e:59:44:85:95:fe:5e:
                    d1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:0D:47:12:91:27:D3:6E:16:5C:3D:4D:36:10:6E:3C:98:1B:BE:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4af2d60d-7d3a-30e8-a88e-9268b7441016.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.137.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:30:65:3f:66:a8:dc:3e:f7:bb:76:03:d9:eb:f9:39:57:e0:
         b2:73:de:ca:02:b8:69:18:17:20:5b:44:23:b3:38:92:14:7f:
         1f:63:6f:6f:fd:1d:c5:be:10:39:e5:11:82:e5:a9:6d:f3:13:
         b9:4f:c6:f3:14:6d:f8:fa:0d:70:92:ef:bc:21:22:27:69:42:
         61:e2:92:cd:4c:fd:ed:e1:de:8d:a1:06:8b:53:9e:64:d1:13:
         27:51:2e:c9:ba:bf:88:14:b8:f8:f2:15:27:d4:98:9f:fe:4b:
         0c:99:18:be:da:63:5d:ee:58:d9:31:73:8a:86:62:7f:bd:16:
         1e:9b:b3:40:a8:97:4d:74:78:3b:5a:c3:2a:49:eb:c0:18:c5:
         eb:e9:92:0f:dd:1c:26:eb:2a:d5:ec:a8:0e:28:1a:db:14:54:
         c7:f1:9e:4c:31:de:40:35:82:5a:e7:d1:a1:99:1e:c1:47:5f:
         ef:b6:9a:b9:aa:a0:d9:08:d1:24:25:18:1b:e6:00:4a:cf:01:
         a6:4f:16:cc:3f:b2:84:b1:9f:68:6c:49:1c:e1:6b:8e:e3:e3:
         27:cb:0a:ed:41:10:c1:6f:1e:39:40:7f:75:3f:1d:17:dc:27:
         7a:59:fc:bd:c5:0c:5d:4f:e9:cc:d8:60:bc:db:02:59:f9:30:
         d0:4b:c3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:38:13 2026 by rpki-client