Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4745e31c-32e1-30eb-891a-95c6ba54d368.roa
File:                     4745e31c-32e1-30eb-891a-95c6ba54d368.roa (raw, json)
Hash identifier:          fni0VWvwtg5zqlMH3zcMdbWAqvqg69IoJDK8u7hgljQ=
Subject key identifier:   94:3A:9D:C7:AF:14:68:F7:F8:9D:C9:AD:88:27:09:78:0C:22:08:BD
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584DAC45857527AFC1B900FFFFC0
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4745e31c-32e1-30eb-891a-95c6ba54d368.roa
Signing time:             Thu 30 Apr 2026 01:00:26 +0000
ROA not before:           Thu 30 Apr 2026 01:00:26 +0000
ROA not after:            Wed 29 Jul 2026 01:00:26 +0000
asID:                     54858
IP address blocks:        162.244.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ac:45:85:75:27:af:c1:b9:00:ff:ff:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Apr 30 01:00:26 2026 GMT
            Not After : Jul 29 01:00:26 2026 GMT
        Subject: CN=9b88d229-def7-45df-bfb9-f284ce6853e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:7a:c8:57:7e:3d:2c:75:e2:8e:01:e1:21:2d:
                    00:2d:05:cc:01:b4:5a:15:c2:97:81:54:f8:f6:65:
                    c1:cb:92:ed:52:fb:23:d0:91:26:f5:89:ce:a7:dc:
                    0d:7d:c2:32:31:0b:13:f8:7f:4d:8f:e8:6d:82:9c:
                    a6:36:f3:e9:a1:ca:b2:f2:3e:c5:40:37:35:58:c8:
                    da:40:1a:d1:36:38:fc:61:cf:75:21:1f:54:b3:32:
                    27:5c:7a:2d:6c:10:37:31:bf:eb:0b:ca:6e:79:26:
                    a3:d7:f7:91:0e:8d:cc:13:58:cf:1b:81:7d:64:98:
                    b5:98:47:26:6d:fa:da:ab:d7:9b:4a:a6:32:cf:6a:
                    5d:1a:dd:85:c6:c1:30:dd:26:b7:f0:2f:8b:39:7c:
                    18:85:bf:93:0f:3b:06:be:77:ce:1e:e0:5b:a5:fd:
                    eb:4d:4a:b0:36:fb:2c:40:76:18:5b:4f:11:e4:da:
                    91:18:1f:17:fd:99:a6:5c:82:02:e0:d3:6e:10:47:
                    e3:61:a3:07:9d:cc:1e:eb:ff:4f:8a:f8:11:98:ac:
                    0f:bd:4d:c1:8d:b5:83:6e:0a:ae:91:f4:b6:09:52:
                    ab:12:45:f4:31:bf:0d:21:80:22:6e:01:8c:b1:55:
                    de:1b:a8:1c:7b:7b:78:d9:cd:ef:df:7f:87:e0:0a:
                    b4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:3A:9D:C7:AF:14:68:F7:F8:9D:C9:AD:88:27:09:78:0C:22:08:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4745e31c-32e1-30eb-891a-95c6ba54d368.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.244.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:35:00:70:12:7d:c6:4f:47:05:bc:f5:34:26:67:1b:16:02:
         54:be:64:4f:d9:67:22:dc:14:72:ba:b8:52:48:aa:cf:b3:10:
         36:a2:90:0c:63:37:f9:fc:af:b2:cb:a0:70:48:33:70:a8:39:
         85:f2:60:a1:d5:d6:b5:90:fc:a6:32:7a:ef:60:4e:7a:45:a1:
         0c:6c:a2:4b:99:7c:e9:79:7b:37:69:86:74:09:db:60:20:a9:
         31:32:ee:84:ab:f4:b2:31:24:6c:c3:ad:a7:44:ac:de:a5:67:
         df:fb:fc:4e:86:db:6d:c5:25:9e:34:b6:21:8d:ae:6e:65:54:
         95:0c:46:db:f5:15:b8:ea:fc:43:84:16:6e:71:ce:e4:8b:12:
         0f:5b:b2:49:18:46:71:cb:bf:9e:e7:45:b3:02:19:3e:a2:ab:
         a2:ca:a4:06:cb:85:da:eb:31:ec:de:7e:71:d3:1d:76:fc:96:
         77:51:ca:80:8a:f4:af:5a:0a:d9:58:64:e0:c8:b8:43:25:d9:
         49:98:6d:5c:df:2c:03:e7:a1:0e:da:02:85:c9:95:af:c0:1d:
         68:ba:92:ee:00:c6:33:16:96:4d:fc:4c:88:dc:33:e9:6b:29:
         2a:5b:0f:dd:3e:ea:1f:a0:e4:e2:26:9a:72:80:44:98:d5:6f:
         ce:7e:42:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:49:41 2026 by rpki-client