Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/50da1de0-7bfb-3c4d-9183-b2347cdc796a.roa
File:                     50da1de0-7bfb-3c4d-9183-b2347cdc796a.roa (raw, json)
Hash identifier:          YsX9gxMdqEsd4owPDe48ivfFCGv4xwnDXQOR+9o+Ac4=
Subject key identifier:   CC:BE:66:AD:50:36:10:EB:6B:52:A1:14:DE:C7:80:5A:C7:D7:BD:2F
Certificate issuer:       /CN=44c9f20f-94d3-45ab-b941-cca94fba4981
Certificate serial:       010D0C9F4328584D44FA6826EA57FC8E821B6E80
Authority key identifier: 03:F6:F6:1C:42:4C:C7:52:8D:DD:05:02:7D:BD:F4:D8:FD:07:A3:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/50da1de0-7bfb-3c4d-9183-b2347cdc796a.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     42633
IP address blocks:        170.194.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/44c9f20f-94d3-45ab-b941-cca94fba4981.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/44c9f20f-94d3-45ab-b941-cca94fba4981.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:68:26:ea:57:fc:8e:82:1b:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44c9f20f-94d3-45ab-b941-cca94fba4981
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=b57f3d33-6423-46f8-bb85-83b2cde3474d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2c:2d:86:18:b3:c7:c6:1d:44:f3:a5:62:77:
                    bb:fb:d1:5b:40:b4:18:64:df:73:93:cd:f5:01:fe:
                    99:56:8f:da:d3:2e:1b:58:d7:f5:ed:10:06:4b:cb:
                    48:ba:54:5b:58:2d:69:11:04:f6:5a:88:d1:d6:9e:
                    4d:52:a8:5e:0e:b6:f7:df:f3:6f:6d:89:5a:f4:30:
                    d9:12:1d:dc:fa:bc:28:44:68:23:77:41:94:bc:87:
                    0e:43:a5:d7:53:b8:f3:d7:2b:5a:a6:c7:82:2e:fb:
                    14:ff:f7:4c:47:22:18:15:4d:42:a8:e7:c3:de:80:
                    30:84:2a:58:45:04:af:8e:93:1a:87:92:5a:4b:68:
                    1f:ee:c6:cc:dd:c6:b8:52:5c:67:a9:a7:97:83:f0:
                    59:d8:05:c9:20:6b:b7:5b:46:fd:00:07:88:d8:90:
                    70:61:6f:6c:06:77:31:1f:b8:9c:47:6c:64:ee:91:
                    16:d8:e1:c7:c6:60:ad:55:4b:04:0b:24:e8:14:f3:
                    98:fe:d1:33:9c:37:99:a6:a0:cc:45:3e:87:f6:d1:
                    e9:08:d3:f9:fe:5c:64:ef:d7:89:4a:04:5a:f5:ab:
                    4c:70:d8:35:cb:8e:b0:ed:43:d0:70:9b:43:f4:a7:
                    50:6e:dc:75:07:00:2e:b2:6e:32:4c:21:a2:30:5d:
                    a6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:BE:66:AD:50:36:10:EB:6B:52:A1:14:DE:C7:80:5A:C7:D7:BD:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/50da1de0-7bfb-3c4d-9183-b2347cdc796a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/44c9f20f-94d3-45ab-b941-cca94fba4981.crl

            X509v3 Authority Key Identifier:
                keyid:03:F6:F6:1C:42:4C:C7:52:8D:DD:05:02:7D:BD:F4:D8:FD:07:A3:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.194.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:17:96:81:df:9c:4f:d0:22:22:37:2b:bf:3a:b3:57:1c:1f:
         2d:d6:8e:e7:5b:9f:5f:5a:c8:b5:9c:0a:d9:e3:03:e2:a4:8f:
         ac:00:eb:e6:6f:c5:3f:6d:4d:e7:09:f6:82:20:22:be:fd:c8:
         e4:68:ca:03:35:d8:d3:6c:ae:90:c1:ba:0b:98:09:7f:2b:17:
         07:aa:74:e6:02:8e:79:fc:0b:e8:c4:63:45:50:42:3a:0f:3d:
         94:f2:8f:79:13:0c:9b:ba:a6:39:3e:81:f7:04:4a:fa:95:15:
         b0:12:a7:88:7d:b5:ac:99:b3:37:52:4f:c5:e5:72:f0:f7:20:
         1d:84:9a:bf:6c:c7:6c:f9:c5:60:5b:59:f4:f2:f3:5e:ae:a4:
         8d:6a:31:a7:e9:71:3e:46:06:1a:72:16:f7:9b:51:12:b0:a6:
         77:a9:78:6c:ae:51:2f:de:1f:04:5d:bc:94:eb:e8:0f:39:e1:
         db:6c:62:f7:7b:6a:bb:b1:10:62:de:c7:b7:25:76:c9:05:86:
         cb:51:36:a3:a5:ff:05:ce:4f:a3:54:68:18:05:5a:16:a2:e7:
         e1:4b:cb:ef:24:fe:1b:16:20:b2:4e:5d:8f:56:05:74:cd:3e:
         63:aa:d7:a1:93:a5:e0:fa:81:92:b8:eb:94:f2:51:9b:90:f7:
         00:53:c9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:14:39 2026 by rpki-client