Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/3582d4a2-5d9f-32b2-b65b-914cbcd79798.roa
File:                     3582d4a2-5d9f-32b2-b65b-914cbcd79798.roa (raw, json)
Hash identifier:          Vqp6e7lKvaO0Zot1bQU18/ZDUVgfvzhBPr/PW9zesBE=
Subject key identifier:   47:B0:EA:5B:9E:C2:66:DB:AC:F1:FE:B7:AA:7F:42:A7:49:F2:93:CE
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584DBA1E6FA00DF399A649554800
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/3582d4a2-5d9f-32b2-b65b-914cbcd79798.roa
Signing time:             Tue 05 May 2026 00:03:15 +0000
ROA not before:           Tue 05 May 2026 00:03:15 +0000
ROA not after:            Mon 03 Aug 2026 00:03:15 +0000
asID:                     62563
IP address blocks:        170.101.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:1e:6f:a0:0d:f3:99:a6:49:55:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: May  5 00:03:15 2026 GMT
            Not After : Aug  3 00:03:15 2026 GMT
        Subject: CN=b9c0f202-8ec8-4df1-9871-88806d3989bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:98:7b:6a:dd:1e:c0:2e:6b:05:69:50:af:6d:
                    29:bb:1b:15:94:bd:e3:12:77:58:11:a5:3e:53:84:
                    c0:54:97:cd:8b:49:5a:86:a8:bd:ad:8a:bc:7c:14:
                    bc:6f:3b:3c:6d:af:a4:f0:f2:36:1e:9e:6f:0f:64:
                    c1:31:5f:14:b4:1d:ce:8a:e0:30:63:b1:73:d2:0d:
                    3f:7e:db:52:8f:b6:28:53:7f:8f:b7:43:da:8c:3d:
                    99:bb:cb:5a:3a:fa:e5:14:a8:e2:eb:17:00:9d:9d:
                    31:2d:d4:bf:f7:08:36:fe:8c:b0:e6:68:ab:20:28:
                    a1:c0:9f:c3:12:63:34:66:ae:02:ec:d4:2f:9f:54:
                    f6:92:f7:7c:22:38:45:00:18:fa:d9:bc:18:b1:2d:
                    be:17:35:88:2b:03:7e:a8:5b:8e:44:21:da:e0:57:
                    ef:f2:dd:85:9e:bc:35:a9:0a:d7:00:b9:4f:9e:52:
                    70:70:57:20:2b:fe:f8:91:f1:f5:c9:50:cc:e9:4c:
                    a4:af:01:1a:5d:e0:c1:c1:88:8f:2a:ed:69:e5:49:
                    c7:e7:54:fa:ff:35:66:4b:81:05:2f:4d:08:82:26:
                    5e:c3:2a:9c:c4:46:eb:69:c2:06:0b:0d:d1:23:eb:
                    c8:64:cb:64:ef:79:8f:36:5a:60:22:c7:56:a4:e7:
                    79:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B0:EA:5B:9E:C2:66:DB:AC:F1:FE:B7:AA:7F:42:A7:49:F2:93:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/3582d4a2-5d9f-32b2-b65b-914cbcd79798.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.101.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:e0:8c:c6:0f:e0:5f:32:8b:a1:1a:d2:63:cd:34:e6:da:c0:
         c5:65:7e:50:f1:5f:91:a8:2e:8e:19:4d:81:37:e1:0a:32:e7:
         2d:f5:29:11:ba:5d:77:2c:12:db:01:a4:8c:b3:df:05:93:bb:
         dc:85:7b:18:fb:e4:78:3e:9d:4d:4f:f6:ce:f7:d7:ed:05:d9:
         bc:57:58:83:28:fb:71:2c:26:7d:08:f4:5a:a4:fa:bb:09:0f:
         c4:c7:6e:1e:0d:3c:85:02:25:6f:ae:25:17:15:e8:6e:44:7c:
         60:51:50:38:da:65:1f:b4:27:b2:ba:58:f1:8b:c5:46:96:d8:
         59:09:54:7e:9f:ba:e5:dc:11:7c:3a:aa:02:68:7a:25:17:2c:
         f4:fc:47:e9:db:38:c0:75:a7:60:68:25:27:0e:fc:b4:31:b0:
         56:10:b2:b0:f5:f4:27:d2:32:48:6b:2f:0c:8f:e9:4f:36:00:
         ff:4d:00:44:fc:ab:5f:cf:b8:ce:af:63:ba:83:d7:b4:b1:7f:
         85:46:b3:bb:d3:ca:ae:72:3d:36:a9:c6:05:01:f1:71:29:8e:
         a3:3f:15:5c:e7:c7:c3:8f:28:a1:48:57:f7:91:44:a8:6f:d6:
         f8:1b:94:e3:d1:3e:ef:93:7d:40:f3:14:f2:72:69:42:1d:c7:
         2a:9f:79:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:01:02 2026 by rpki-client