Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/078e2911-263f-3172-bafa-9975aa6e0616.roa
File:                     078e2911-263f-3172-bafa-9975aa6e0616.roa (raw, json)
Hash identifier:          HGz0iXRhQLIkXeHCQE2zgj2D6yYh08jtx7OGQn8piq0=
Subject key identifier:   E4:F9:48:30:80:EA:C6:64:DA:96:67:5E:A2:A3:75:24:8B:54:57:6D
Certificate issuer:       /CN=c3fb3897-fd14-48ee-ad84-812c408cf46e
Certificate serial:       010D0C9F4328584DAC457B69F461A881039D8260
Authority key identifier: 81:9C:0A:E7:28:DC:62:35:44:F4:10:85:B8:D7:12:59:1A:57:DD:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/078e2911-263f-3172-bafa-9975aa6e0616.roa
Signing time:             Thu 30 Apr 2026 01:00:26 +0000
ROA not before:           Thu 30 Apr 2026 01:00:26 +0000
ROA not after:            Wed 29 Jul 2026 01:00:26 +0000
asID:                     399494
IP address blocks:        170.205.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/c3fb3897-fd14-48ee-ad84-812c408cf46e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/c3fb3897-fd14-48ee-ad84-812c408cf46e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ac:45:7b:69:f4:61:a8:81:03:9d:82:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3fb3897-fd14-48ee-ad84-812c408cf46e
        Validity
            Not Before: Apr 30 01:00:26 2026 GMT
            Not After : Jul 29 01:00:26 2026 GMT
        Subject: CN=3d0761ec-5c4f-4e3f-be2f-b90617c4535f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8b:35:7c:30:d6:4b:6d:19:c0:51:e7:e5:0b:
                    24:90:b9:c4:05:47:27:73:87:a6:ca:4e:5d:0d:9d:
                    76:47:3f:45:2a:9a:1d:69:a8:61:0b:f9:df:bb:4b:
                    2b:c1:d5:ba:e3:9d:de:1d:80:47:42:8b:fd:86:6d:
                    3f:b1:61:2e:fa:65:ec:45:e9:e1:ec:48:e5:fa:64:
                    db:54:b3:95:f8:7f:90:80:e6:4e:6d:63:98:16:e8:
                    0f:d3:99:91:76:1a:78:35:54:9e:24:c9:61:ef:1d:
                    42:0a:e6:d3:fb:40:e8:d0:95:87:d5:89:b6:04:9d:
                    c5:fd:2e:fd:7c:30:3f:cd:f3:2b:e6:d7:6f:45:c3:
                    74:45:74:42:88:9b:48:d7:98:e8:30:02:1a:98:eb:
                    8f:75:c9:23:c1:10:ee:99:db:28:66:e0:c6:a7:06:
                    cd:54:0a:b2:4c:35:b4:54:30:81:db:07:81:32:37:
                    5b:c1:2e:49:bf:2a:ef:4e:f8:41:e0:c1:a7:87:d7:
                    dd:85:f6:b1:ff:36:90:29:8d:89:ab:dd:c1:27:84:
                    70:1c:e6:81:08:46:2b:30:df:cc:bb:e9:a2:d8:24:
                    53:b1:00:c9:93:f8:d8:0e:99:b1:8c:11:35:b2:12:
                    ca:5b:1b:78:d1:58:12:ba:8b:26:64:c2:52:f0:85:
                    97:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F9:48:30:80:EA:C6:64:DA:96:67:5E:A2:A3:75:24:8B:54:57:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/078e2911-263f-3172-bafa-9975aa6e0616.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/c3fb3897-fd14-48ee-ad84-812c408cf46e.crl

            X509v3 Authority Key Identifier:
                keyid:81:9C:0A:E7:28:DC:62:35:44:F4:10:85:B8:D7:12:59:1A:57:DD:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.205.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:9f:97:95:44:d2:d0:4a:58:6b:fb:90:66:36:7a:87:a9:6f:
         73:4f:97:74:a2:13:14:99:04:fd:ca:66:e5:66:17:29:70:ec:
         4d:02:a8:c5:cf:d2:7f:6a:74:52:c8:9b:21:a8:06:8d:3b:ad:
         fa:4d:b6:8a:d7:8f:00:1c:ed:38:c0:1e:be:7c:eb:b8:6f:5e:
         08:e3:32:32:78:3d:7d:c9:63:96:c2:e4:90:50:48:ae:04:c3:
         76:fc:ef:2f:3d:ca:a5:9a:10:5b:af:b4:43:01:77:ea:ee:04:
         a6:dd:69:08:8c:98:59:b2:64:7f:e0:8e:9e:e4:74:7b:18:57:
         ba:46:76:9a:a0:80:6b:7b:93:8f:b9:33:9c:0e:b0:4b:31:76:
         f7:e1:c7:98:66:27:af:2d:84:8d:0c:01:1b:ba:ba:6f:b7:ac:
         6c:96:fa:0c:67:41:ef:fa:4c:49:88:a0:11:7f:4c:19:73:47:
         4b:3f:67:a4:84:8b:d0:3c:c3:2a:83:ac:ae:5c:e1:57:17:47:
         48:3c:36:1e:f8:6d:98:59:96:e8:10:66:b5:f2:5f:0e:a9:af:
         41:3a:bb:d9:46:de:6e:4b:4c:0c:93:d5:37:62:e4:05:42:ed:
         9c:d2:0d:58:6e:d6:2e:10:f2:13:11:13:ad:00:df:b2:e7:16:
         6c:88:bb:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:02:16 2026 by rpki-client