Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/4079f4bb-2c2e-39ff-a740-529dd5eed514.roa
File:                     4079f4bb-2c2e-39ff-a740-529dd5eed514.roa (raw, json)
Hash identifier:          zrP1/IORwXHj+vwGo9NcdduzJmnYjOXF7QQUxdcmJUg=
Subject key identifier:   83:2E:FD:DD:82:7B:70:CE:25:37:1F:13:A1:A8:8E:15:9B:FA:13:30
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F4328584D359F96933F09E4E7DC043680
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/4079f4bb-2c2e-39ff-a740-529dd5eed514.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     7018
IP address blocks:        65.110.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:9f:96:93:3f:09:e4:e7:dc:04:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=cb791850-4daa-4b74-a10f-c1fd597c080c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:60:22:87:66:c5:e2:e4:89:d4:1b:04:59:b8:
                    a2:57:87:04:c8:17:a8:bd:ae:99:5f:aa:b1:c3:07:
                    42:06:d5:90:a6:a6:7c:6e:3e:fc:63:3b:ab:1f:1e:
                    ab:90:d6:61:68:0f:25:65:b7:c0:07:01:22:8d:41:
                    e5:c9:dc:6c:13:15:5f:22:5c:5d:6c:ed:fd:dc:60:
                    26:5e:81:e2:dd:18:ec:e2:22:b8:62:18:81:69:35:
                    7f:ff:44:d5:03:30:18:38:9a:89:0d:a1:a1:83:0c:
                    57:9e:1f:4d:d7:4c:b5:aa:11:b8:93:37:32:84:aa:
                    19:7d:a0:34:64:f0:4a:cd:ef:86:c7:6f:e1:e0:c0:
                    32:32:19:84:fa:1b:20:2f:c3:22:ef:5d:a0:10:57:
                    e7:66:29:07:df:5a:6c:59:f7:b7:b2:79:e1:42:1d:
                    68:ae:2d:a4:19:7e:ae:d7:e1:1d:45:76:32:79:19:
                    88:da:cf:49:53:04:7f:98:86:b2:0d:7f:a8:10:a0:
                    ee:60:5c:d6:59:cb:84:f8:a9:1c:c0:1e:15:b0:b9:
                    3b:64:9c:d7:69:e6:aa:17:6b:7b:7f:21:e5:e2:8d:
                    15:b0:65:b5:7d:ad:3c:c6:99:7f:28:3e:0e:83:53:
                    62:d7:58:42:00:e8:54:ee:ae:f9:b9:91:df:89:01:
                    6d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:2E:FD:DD:82:7B:70:CE:25:37:1F:13:A1:A8:8E:15:9B:FA:13:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/4079f4bb-2c2e-39ff-a740-529dd5eed514.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.110.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:54:0a:ac:75:07:b5:49:39:00:14:8d:74:8f:c8:36:01:b6:
         89:6e:5b:04:7b:b2:fb:a2:57:9c:a8:06:cd:e4:13:25:1b:d2:
         64:bf:0f:5d:3e:d1:5b:74:53:d6:63:6c:cd:a7:3d:75:bd:5c:
         11:6f:8d:1e:6b:b4:15:d0:33:2f:b9:d6:4d:b4:5f:db:81:bf:
         4d:e5:84:ea:6a:2a:92:83:dc:96:1d:d1:6a:45:12:66:db:74:
         cd:0a:e3:77:a3:84:76:b5:92:a2:bf:cf:3c:c1:4b:a8:13:0d:
         3f:7f:da:ed:48:8e:66:95:40:21:63:61:6b:b8:7c:66:df:63:
         bd:20:24:20:2b:cc:15:c6:a8:1c:45:40:f6:b3:df:71:f4:e0:
         64:a4:dc:b5:b6:9a:02:19:7a:dc:55:79:27:fa:d9:8d:42:dc:
         6d:69:52:c1:86:d0:4c:e6:75:5f:2b:61:15:63:4d:d9:0e:b6:
         95:9f:0d:d6:55:c8:3f:66:c9:4c:2d:b3:5d:06:d8:ff:a6:43:
         b2:d8:21:bc:b7:a9:9c:37:e1:9c:89:63:bc:2d:78:bc:e0:ce:
         a5:b2:08:54:84:f7:cb:e8:95:c0:20:7f:24:ed:43:57:e7:27:
         75:a8:05:68:98:c0:20:fb:50:33:23:61:5a:cc:cd:e1:90:b2:
         ef:bf:86:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:29:09 2026 by rpki-client