Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ace70f2f-fe59-3fb0-bbb4-04ee4acba39e.roa
File:                     ace70f2f-fe59-3fb0-bbb4-04ee4acba39e.roa (raw, json)
Hash identifier:          v+V8dycfUFwZ7bUl+yODXAVZFrQuDRtaiXIaO2BxrVY=
Subject key identifier:   A7:A3:E8:65:60:74:0F:2D:53:AF:E5:FB:FD:43:3D:79:EB:A7:81:BE
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584D9FB5713442AE5BC33A5E2640
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ace70f2f-fe59-3fb0-bbb4-04ee4acba39e.roa
Signing time:             Sat 25 Apr 2026 13:00:30 +0000
ROA not before:           Sat 25 Apr 2026 13:00:30 +0000
ROA not after:            Fri 24 Jul 2026 13:00:30 +0000
asID:                     62904
IP address blocks:        170.130.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9f:b5:71:34:42:ae:5b:c3:3a:5e:26:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Apr 25 13:00:30 2026 GMT
            Not After : Jul 24 13:00:30 2026 GMT
        Subject: CN=dd87c728-a269-4d38-ac57-8873783508ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ba:7a:ab:5f:33:8e:89:fc:2c:67:09:e3:f0:
                    9b:c0:7a:34:7d:69:43:4e:37:42:b0:ef:35:c5:98:
                    8b:a6:46:7c:dc:ea:be:af:c8:5c:ff:bf:15:38:cd:
                    9a:c8:bc:1a:12:77:00:f8:e4:1a:e6:45:a3:89:5f:
                    f4:ae:02:fc:74:a8:72:d6:cf:99:53:25:b3:06:c6:
                    f3:eb:ea:68:ed:42:df:43:a6:ec:4f:62:df:f8:be:
                    ea:a3:3e:02:eb:be:26:10:a9:8e:f5:57:03:e4:3c:
                    84:af:11:8b:33:ca:c8:a5:ac:d3:24:59:9d:69:e6:
                    10:fe:07:b9:f1:f0:03:04:93:79:40:92:fe:17:4e:
                    18:bf:64:c6:33:d3:61:42:ea:7a:fc:d2:e6:48:33:
                    ce:68:b1:82:0b:54:1b:33:ba:3a:e4:51:68:97:11:
                    ae:ea:7f:7d:cc:df:db:cd:47:2f:94:55:41:0c:17:
                    5f:f2:8d:81:8b:f9:2d:c6:be:73:a5:b6:0e:da:8c:
                    48:03:69:ff:e6:ae:40:bb:a0:19:c4:bc:3e:3f:9a:
                    0d:c8:b6:16:f6:d2:54:0b:83:2b:36:1f:51:77:c8:
                    bb:b4:80:d6:21:b7:aa:9c:a8:46:ce:23:2c:9e:11:
                    33:05:58:76:22:d0:68:23:a0:ec:80:4e:85:27:9e:
                    9d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A3:E8:65:60:74:0F:2D:53:AF:E5:FB:FD:43:3D:79:EB:A7:81:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ace70f2f-fe59-3fb0-bbb4-04ee4acba39e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.130.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:17:e6:fc:e6:6d:9f:6f:9e:03:35:e2:08:82:ad:71:e6:1b:
         49:71:e3:b7:9e:be:f9:d3:ba:0e:52:79:97:bf:04:1d:10:29:
         24:55:e4:34:4e:ce:a0:e7:25:15:57:e0:89:f1:a5:b6:53:d4:
         04:7d:ed:3e:cd:57:97:10:bb:cf:a1:21:e6:bf:2a:13:6c:d0:
         20:e0:00:ce:a0:88:6e:e1:42:13:bd:58:7c:0e:bb:5f:8c:57:
         78:5f:88:43:fa:16:65:6e:49:55:a4:3c:ef:d0:cf:34:b3:b3:
         d4:fc:7a:72:7e:2d:53:5e:08:39:5d:e0:d1:24:c4:4f:ed:dc:
         42:ab:12:33:35:dc:f5:91:cb:dd:2f:ee:36:a1:d5:ac:ef:e5:
         29:f1:60:f0:9c:9a:2e:6f:e3:6f:30:f7:30:ce:67:95:7d:ad:
         12:a9:cc:43:68:56:52:8f:42:c9:37:a1:80:ed:a7:c0:4c:57:
         c5:31:04:b4:4d:33:f5:b3:77:90:6a:d2:03:93:d7:71:ff:d8:
         0c:5e:27:e9:c2:f6:cb:03:ed:5b:3f:21:97:35:16:c7:09:60:
         f0:37:56:80:7b:ff:3a:d3:1c:85:82:f9:da:02:64:3c:09:b5:
         65:e5:67:40:77:34:cc:29:a4:bf:45:d6:2e:42:a4:ed:26:aa:
         ac:e4:aa:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:18:15 2026 by rpki-client