Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231/b3fdf609-cdb7-3107-8d55-217676e0568e.roa
File:                     b3fdf609-cdb7-3107-8d55-217676e0568e.roa (raw, json)
Hash identifier:          op40BRhoAHlXQKXLxoo1z5pYU4xnlhU5XA4l+/onn0Q=
Subject key identifier:   6B:F3:8C:CE:41:E4:B8:43:EE:82:FE:E1:FE:AA:85:EE:34:82:32:E8
Certificate issuer:       /CN=c75c2a49-d4ec-49ef-affc-f07717c14231
Certificate serial:       010D0C9F4328584DC565C18CD4C1361599610980
Authority key identifier: 1D:AB:A6:60:5B:91:EA:C1:D4:F7:19:D1:23:FC:C0:38:C1:5A:12:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231/b3fdf609-cdb7-3107-8d55-217676e0568e.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     5650
IP address blocks:        170.205.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231/c75c2a49-d4ec-49ef-affc-f07717c14231.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231/c75c2a49-d4ec-49ef-affc-f07717c14231.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:c1:8c:d4:c1:36:15:99:61:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c75c2a49-d4ec-49ef-affc-f07717c14231
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=946bcd29-4388-4421-86ba-4c784c3bc147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ab:a3:57:18:29:12:60:eb:f7:d2:7c:61:c0:
                    2a:e2:59:91:35:41:19:da:60:20:ec:fe:c3:20:07:
                    58:01:27:4c:81:b7:39:50:97:40:83:12:4b:c9:4f:
                    18:78:9a:9f:c4:94:88:87:ec:fe:26:6e:d7:86:b0:
                    ef:5a:73:b9:5e:1c:86:ee:ce:9b:7e:1c:20:4a:5e:
                    93:0d:71:f5:52:cb:e5:e4:d2:28:1a:cc:a6:62:04:
                    59:62:9a:1b:72:84:bd:10:20:84:43:6b:f5:94:27:
                    c3:99:45:f6:62:46:f1:10:1a:46:2c:b4:46:10:97:
                    9b:3c:46:d5:a7:ad:63:a5:b6:80:bf:74:a7:98:d1:
                    f6:92:fa:3b:60:ce:02:bb:1a:a1:ad:1d:96:ad:84:
                    29:8d:86:a5:b6:38:c9:42:2d:c4:c3:fc:30:d8:c5:
                    0e:64:85:c6:6b:16:ea:c9:16:33:7f:bd:75:86:95:
                    6f:4d:71:26:3e:4c:44:f5:45:b1:e0:de:df:9c:07:
                    50:42:f2:38:fd:90:3f:01:f4:60:4a:8a:17:41:5d:
                    9a:90:02:32:4a:0d:07:b5:48:59:8b:5f:82:e0:a4:
                    ac:f7:c1:15:ac:93:35:ae:de:ba:d7:fc:47:6c:e9:
                    f5:e9:16:51:29:2b:49:35:10:bb:5b:bf:ce:4e:72:
                    b5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F3:8C:CE:41:E4:B8:43:EE:82:FE:E1:FE:AA:85:EE:34:82:32:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231/b3fdf609-cdb7-3107-8d55-217676e0568e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231/c75c2a49-d4ec-49ef-affc-f07717c14231.crl

            X509v3 Authority Key Identifier:
                keyid:1D:AB:A6:60:5B:91:EA:C1:D4:F7:19:D1:23:FC:C0:38:C1:5A:12:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.205.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:ad:ff:e9:5b:3b:92:8a:32:d5:0e:9c:19:64:1e:be:ee:1c:
         4c:ea:07:73:9d:b8:88:71:a2:05:aa:33:7c:1c:35:3a:bc:b7:
         4f:2e:56:ae:df:09:c7:ad:c0:67:b6:73:37:8d:16:44:54:39:
         a6:f7:e8:e9:c7:9d:d6:2d:5e:d4:d0:d5:9d:a1:11:c1:24:46:
         80:e6:41:d3:af:19:04:77:1c:aa:c0:4b:45:ef:5c:3e:16:47:
         ab:41:31:9d:79:41:d7:e9:df:67:71:c3:34:9b:cf:e7:06:e8:
         fc:62:07:6a:8c:9c:e4:a9:10:8d:c1:c6:66:ee:fb:b9:87:c3:
         59:7d:46:de:1a:a9:98:55:69:e2:f0:0a:a1:d3:21:c8:4f:dc:
         2a:78:0d:aa:59:4e:9f:13:04:84:b8:96:05:1e:13:2a:26:ae:
         5a:fe:a8:25:3e:ac:b0:71:2b:97:40:4b:9c:0c:89:e1:50:b2:
         af:d3:9d:8b:73:87:25:bb:6a:02:aa:58:e8:4e:d4:d9:eb:00:
         ca:ff:49:2c:c0:86:b2:a3:29:5d:f6:cf:0b:85:b2:ed:ba:30:
         7d:ed:6b:79:f5:50:84:87:f5:83:61:84:b1:ac:ef:6c:d8:51:
         ca:c1:09:4f:d4:48:a2:33:6d:c3:5c:4c:3a:da:0d:52:c4:99:
         1b:0a:4c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:23:16 2026 by rpki-client