Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/3cb3247e-d780-36d0-8281-9099712cab81.roa
File:                     3cb3247e-d780-36d0-8281-9099712cab81.roa (raw, json)
Hash identifier:          h8+ocu0VR3x+ElFO6U9gg7zS7zndwoPgQdodrlZQ1+c=
Subject key identifier:   F8:3C:76:E7:00:E4:44:4B:C5:C2:B9:DF:06:01:F8:EB:E1:1B:BC:3C
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F4328584DBFD041B67B9676C08A839000
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/3cb3247e-d780-36d0-8281-9099712cab81.roa
Signing time:             Thu 07 May 2026 01:00:23 +0000
ROA not before:           Thu 07 May 2026 01:00:23 +0000
ROA not after:            Wed 05 Aug 2026 01:00:23 +0000
asID:                     54339
IP address blocks:        65.110.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bf:d0:41:b6:7b:96:76:c0:8a:83:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: May  7 01:00:23 2026 GMT
            Not After : Aug  5 01:00:23 2026 GMT
        Subject: CN=77c672d1-91f4-4da7-9ea2-def60cc59ccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a6:34:49:70:b0:ed:4e:ee:79:75:a8:ad:e7:
                    48:c3:ee:6c:42:78:6f:9f:ea:e4:75:40:73:11:5d:
                    1e:36:89:78:1b:7d:0a:8f:35:7c:4c:a2:d1:3b:d8:
                    14:38:65:88:0b:34:62:11:28:70:5b:d6:f9:23:a8:
                    13:75:75:89:4c:cb:b3:ab:55:e7:21:48:4e:5c:ef:
                    82:17:19:7d:23:b2:a3:d7:86:a8:f1:4e:00:1a:d4:
                    39:db:fa:13:b3:63:b2:96:a9:3b:f7:7c:5c:de:4b:
                    6e:0a:d7:cc:b0:1f:f7:a5:2a:0b:c1:84:fd:4d:70:
                    ce:a5:3b:89:76:7a:2a:59:e4:1e:bf:76:af:8a:28:
                    b6:fe:89:61:03:aa:c7:b4:d4:76:5d:52:ea:2c:8a:
                    15:e2:45:05:91:70:e2:4c:d3:59:3b:80:93:0a:48:
                    40:09:7e:c4:ef:43:61:b0:f5:16:32:da:b8:07:71:
                    9f:18:20:59:89:19:2d:b1:c2:70:c4:50:7a:a8:6f:
                    0f:5f:38:85:1c:3e:1c:02:c6:06:65:01:5f:05:3e:
                    4f:3e:9e:39:a4:4e:5c:23:78:b5:a2:77:94:80:b4:
                    1f:b9:71:72:36:44:13:d5:20:94:36:9c:74:66:dd:
                    9a:bf:d5:2b:ea:05:1b:16:8b:63:0f:08:4a:9d:76:
                    56:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:3C:76:E7:00:E4:44:4B:C5:C2:B9:DF:06:01:F8:EB:E1:1B:BC:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/3cb3247e-d780-36d0-8281-9099712cab81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.110.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:1d:13:7d:c7:ad:40:2d:26:2c:a1:3f:5b:db:90:3c:40:d9:
         e9:cf:7a:77:79:4c:a4:b8:7c:33:6c:b1:fe:7a:84:14:07:a0:
         25:d1:07:35:d2:c3:61:71:bb:3d:0e:76:0f:92:30:71:a1:36:
         0e:b4:55:a5:78:a7:fd:13:55:d0:30:4c:b8:9d:39:a3:76:f3:
         4b:c2:4a:64:8b:13:e8:39:01:4c:2c:27:25:4f:18:da:d9:79:
         8b:da:33:fb:5c:55:a6:de:d1:44:c2:81:58:3d:11:ec:88:fc:
         7c:73:bf:db:a7:2b:38:45:67:63:7b:90:62:79:81:46:5a:10:
         5f:69:bc:2d:29:b6:93:6f:46:30:09:0e:4a:47:f0:23:b4:8c:
         f4:35:32:be:32:f8:b2:b9:6f:2a:2f:21:2d:05:b6:cd:93:21:
         8d:84:5e:4a:64:cb:3d:14:df:25:3c:10:d2:2d:6b:a8:c1:42:
         33:06:2c:df:b6:a1:19:77:0b:d8:6e:f5:8c:d1:1a:a5:64:45:
         96:3b:08:6e:7c:b4:43:cf:96:54:2f:3e:b4:fa:c6:88:0f:8b:
         4c:ca:c7:00:f3:72:94:a8:9b:7f:47:25:50:3c:55:61:3e:93:
         62:08:90:08:c9:77:66:9c:08:be:50:2c:e2:67:b0:5e:fa:ca:
         7a:4d:36:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:14:36 2026 by rpki-client