Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/755a8dc3-3cd7-3e8c-82da-5405f1993ac1.roa
File:                     755a8dc3-3cd7-3e8c-82da-5405f1993ac1.roa (raw, json)
Hash identifier:          Mbaaj7IBvRXIjubLFzS3vHdaRJutJj51mxWcHeRotqo=
Subject key identifier:   D6:1C:5C:E0:BC:01:A7:BC:C7:53:86:F1:AD:F2:9F:46:82:24:37:CA
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFE8C1C60A11719ED58180
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/755a8dc3-3cd7-3e8c-82da-5405f1993ac1.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     20115
IP address blocks:        172.221.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:e8:c1:c6:0a:11:71:9e:d5:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=8e255e84-616c-4594-ab1b-ea4d453f17c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a1:86:80:19:dd:e9:10:34:9a:34:6f:48:98:
                    16:27:6f:c1:19:85:e4:4d:39:1d:f5:6f:8a:aa:6e:
                    ce:32:7b:bc:ce:3f:2e:0b:f6:ca:c4:85:42:45:25:
                    42:d0:c9:f8:a8:fd:2f:53:e7:e5:72:0f:50:03:d7:
                    13:38:16:e1:ff:75:b3:18:f6:73:db:66:c3:f9:5d:
                    74:08:39:7f:76:da:65:10:c9:84:20:e7:fe:e2:bb:
                    ed:07:ea:b8:8b:5b:d0:ae:6b:31:49:02:d4:1b:08:
                    9b:0a:93:d1:c8:fe:09:1e:19:07:ed:ba:ce:2e:34:
                    f3:ce:e5:d6:e6:c5:5d:ae:c2:79:59:0d:ed:0a:9a:
                    20:de:36:57:5a:67:20:16:9c:79:b3:8d:6b:58:93:
                    54:e2:01:68:0a:d3:ae:fb:64:b3:b0:1f:2f:8d:cc:
                    a4:ae:a8:9f:5b:6f:b0:ee:57:9b:35:fc:f5:8e:d7:
                    de:5a:fc:92:66:26:52:15:45:b5:e5:94:ed:90:48:
                    4f:f7:d1:40:d9:6e:83:22:46:99:69:a2:c7:38:b5:
                    1f:9f:b6:c3:ae:64:53:53:2d:46:b2:64:51:ce:c4:
                    ad:7f:c3:51:a7:81:92:3a:cb:34:7d:b7:fa:52:5e:
                    8a:ed:3f:c7:31:4c:c6:78:87:80:5b:18:a0:39:55:
                    24:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:1C:5C:E0:BC:01:A7:BC:C7:53:86:F1:AD:F2:9F:46:82:24:37:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/755a8dc3-3cd7-3e8c-82da-5405f1993ac1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.221.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:f4:3e:58:7e:58:8f:f1:6d:a9:8b:d9:91:e3:fa:bf:ff:07:
         0f:27:f8:d0:a8:c7:75:bc:91:7b:7c:c4:46:49:e4:69:d5:ed:
         e3:bf:88:c5:06:1c:20:69:b7:f0:73:35:26:55:bb:39:c7:06:
         92:3b:f8:2f:60:1f:10:fc:29:cf:77:49:7a:60:ef:0c:fb:51:
         4b:59:60:e2:61:c8:20:e7:7e:3f:9a:6b:3b:63:62:16:3f:1b:
         0d:4a:62:46:e2:f5:1d:6b:2d:23:aa:d0:1a:cf:f1:8a:72:bc:
         be:ac:5b:74:e3:56:83:c3:a1:b8:32:3c:c3:ba:fa:97:d0:80:
         02:50:8e:fc:77:b3:a4:1b:cd:36:a5:85:32:d1:7c:de:ca:df:
         d0:1c:f1:eb:52:40:0f:62:27:f3:ed:16:2c:45:93:c4:b8:a8:
         c0:59:6b:9c:c2:74:73:49:c5:55:47:59:fd:2b:f8:ae:d2:ee:
         03:0e:15:a0:03:f0:4e:9a:a4:a9:8d:a8:a2:45:56:f5:6e:5f:
         ea:06:df:fa:6b:a1:96:6d:7f:9c:56:48:91:5f:1f:47:2c:2b:
         48:08:5a:ad:c4:2d:8e:06:69:95:d3:98:40:fb:dd:9d:3d:67:
         95:ff:6c:ca:92:0d:e0:83:9f:cd:8b:9e:b4:ee:a4:c1:0a:22:
         73:fe:bf:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:35:40 2026 by rpki-client