Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b7942ba5-a7e4-36fd-b2ca-a0e4e5d33d8d.roa
File:                     b7942ba5-a7e4-36fd-b2ca-a0e4e5d33d8d.roa (raw, json)
Hash identifier:          evS+71LpLvJU/zzo+clH5ZS0hbt84zMxqZ5mrOep0Mw=
Subject key identifier:   5C:2B:BC:A7:98:99:09:0F:C9:33:98:26:37:81:2A:76:B5:AC:89:F6
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFE89F19D11741E9BD2800
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b7942ba5-a7e4-36fd-b2ca-a0e4e5d33d8d.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     20115
IP address blocks:        172.223.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:e8:9f:19:d1:17:41:e9:bd:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=7850ff25-0137-4bd0-993e-789c46d3e032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:bf:fd:f0:92:39:f7:80:42:60:b4:39:41:96:
                    b0:d9:a5:fb:4a:f8:af:57:72:d6:31:9f:67:8e:15:
                    80:1f:6f:f3:99:5d:39:82:ff:4a:01:ec:15:4d:40:
                    e0:ed:4d:8d:27:d2:3b:a4:d5:3d:aa:03:56:1f:be:
                    f1:1d:ad:70:49:d0:cf:f2:0d:e4:e3:52:1f:3a:32:
                    9b:9c:03:ca:1d:f6:5d:50:63:55:f2:a0:7a:89:61:
                    8e:96:25:49:1f:bb:ce:73:e2:91:cc:c7:3e:4c:29:
                    27:96:11:76:8a:1f:eb:42:85:57:d3:d9:1a:9a:18:
                    c2:5d:58:69:c9:51:31:bf:9b:8e:75:bc:45:f7:8e:
                    21:bd:5f:41:8e:42:08:c8:04:49:a0:3d:83:51:1a:
                    b5:d7:fc:93:54:49:9c:91:a1:01:87:2f:ba:b4:fe:
                    69:cc:e7:a6:d5:c1:18:0f:40:1e:bd:9e:29:12:00:
                    b5:48:6e:31:0e:ef:58:e9:df:c3:27:6e:40:e2:2a:
                    72:41:a3:f8:59:1d:7d:a2:70:36:fa:4a:8c:e0:ae:
                    dd:92:3f:57:21:d3:bd:26:9f:90:90:52:6e:c9:f4:
                    cf:63:60:71:ca:74:de:c7:74:b3:a8:da:dd:a3:a9:
                    34:70:8d:b9:5a:19:de:84:8c:f4:4b:58:b8:d6:e3:
                    6e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:2B:BC:A7:98:99:09:0F:C9:33:98:26:37:81:2A:76:B5:AC:89:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b7942ba5-a7e4-36fd-b2ca-a0e4e5d33d8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.223.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:b7:0c:49:a2:65:e1:00:c1:1e:bf:8b:8d:09:9d:0a:78:0c:
         35:fc:74:42:1e:75:c6:29:b4:29:5c:0b:b4:66:e3:c7:b8:02:
         81:41:e2:6e:83:77:16:fb:19:15:b3:cd:79:5e:00:1e:fc:76:
         e2:44:1e:cb:e0:10:9a:65:a2:99:dd:f3:3e:31:48:50:9e:c6:
         ec:87:f8:45:24:60:30:74:ea:e6:62:b7:00:ce:65:54:46:44:
         d7:7b:49:49:a1:a3:67:22:b0:23:b5:df:1c:62:85:a7:c9:a3:
         db:49:26:44:7f:c2:bf:c9:d5:33:e8:cf:83:ab:05:56:12:e8:
         67:5c:59:b4:ae:b2:01:31:57:8c:36:25:97:49:e4:f1:df:98:
         69:ee:b9:5d:c5:0c:be:55:03:13:d9:7c:d7:ea:d2:4b:49:e2:
         69:20:bc:2f:21:0e:af:bc:f4:fd:1e:3d:1d:71:10:bd:0f:00:
         76:e8:62:69:83:ab:d5:4f:a1:f5:5b:6b:26:9a:5a:56:95:c9:
         1d:79:5d:b4:8a:62:70:76:dd:8a:5f:65:4a:64:b1:12:72:7d:
         f4:87:42:33:1d:e6:31:f9:51:8c:aa:7b:f8:33:b8:18:f9:31:
         fb:3b:59:a6:e8:94:3f:21:6d:e1:da:5a:92:07:7e:98:e3:f4:
         6b:0a:b1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:27:40 2026 by rpki-client