Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/99208f7a-b637-317d-948f-963e8e2ce2d5.roa
File:                     99208f7a-b637-317d-948f-963e8e2ce2d5.roa (raw, json)
Hash identifier:          ea32I32m6d0aUmxLWeY+3zh8LLRKI6W9hTNnFqKtsGE=
Subject key identifier:   BA:DE:7A:1D:12:DB:5A:6F:5A:52:E9:8D:0A:4E:E9:33:32:27:F7:37
Certificate issuer:       /CN=44c9f20f-94d3-45ab-b941-cca94fba4981
Certificate serial:       010D0C9F4328584D44FA6BDDC77DC6A6FED4F080
Authority key identifier: 03:F6:F6:1C:42:4C:C7:52:8D:DD:05:02:7D:BD:F4:D8:FD:07:A3:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/99208f7a-b637-317d-948f-963e8e2ce2d5.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     42633
IP address blocks:        170.194.176.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/44c9f20f-94d3-45ab-b941-cca94fba4981.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/44c9f20f-94d3-45ab-b941-cca94fba4981.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:6b:dd:c7:7d:c6:a6:fe:d4:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44c9f20f-94d3-45ab-b941-cca94fba4981
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=dd0e542d-64c1-47d2-8aba-81530ddb525f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:dd:c2:76:b0:ea:d2:a0:2c:de:5e:39:03:74:
                    3b:5f:2a:ed:91:ea:9f:2e:cb:93:cb:7b:22:d7:6a:
                    63:d9:ce:eb:67:81:8a:60:fd:da:a7:54:5d:14:c1:
                    c6:d7:0a:b3:30:ab:a1:ad:91:2c:b0:fc:73:d1:ce:
                    01:92:ed:7d:85:1c:b6:72:c3:5c:6a:4e:9c:37:97:
                    1b:01:cd:0d:b7:b3:6c:a1:e8:78:d7:96:d6:f4:54:
                    95:67:04:c2:bf:25:cb:a6:c4:93:f1:14:54:96:fd:
                    72:aa:25:9c:30:97:67:56:cb:10:5e:54:3c:29:8c:
                    ce:28:78:dd:6e:af:ab:85:bf:ef:68:d1:ef:72:55:
                    6c:5e:d7:bb:ef:6f:ce:27:3a:38:ca:04:6f:70:cb:
                    eb:d1:6c:8b:77:ef:b7:af:fe:f7:46:ad:89:8c:0a:
                    9e:d4:33:bd:23:ae:c5:49:5d:22:12:96:b8:7c:9c:
                    e7:c2:50:e6:38:64:f1:fd:85:77:58:ab:86:10:1c:
                    c5:c5:01:19:8d:cb:f1:9f:21:de:8e:14:f6:67:dc:
                    16:12:48:7a:84:31:6a:6b:ac:86:0f:c6:ad:ba:59:
                    02:32:4f:a6:b2:e6:29:d0:f7:87:a1:3d:66:2f:90:
                    12:8f:c7:c5:bf:f0:e3:83:3b:05:bd:16:be:f4:ac:
                    c1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:DE:7A:1D:12:DB:5A:6F:5A:52:E9:8D:0A:4E:E9:33:32:27:F7:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/99208f7a-b637-317d-948f-963e8e2ce2d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/44c9f20f-94d3-45ab-b941-cca94fba4981.crl

            X509v3 Authority Key Identifier:
                keyid:03:F6:F6:1C:42:4C:C7:52:8D:DD:05:02:7D:BD:F4:D8:FD:07:A3:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.194.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:bf:a9:e5:a8:52:09:53:8b:6b:e9:67:63:51:c0:48:0e:51:
         5d:e3:94:a2:c7:8f:de:79:f9:34:11:89:ce:4e:87:7e:65:1a:
         cb:bc:b9:8e:63:fd:87:eb:b0:8f:d4:5f:38:c8:d1:17:91:fb:
         7b:06:ae:9c:f4:6c:3b:75:67:6b:e6:d5:04:a7:06:7d:6f:d8:
         d0:bd:d8:c8:23:dc:f7:9a:c1:23:2c:10:b9:a9:02:6f:23:59:
         ad:85:49:ae:62:9c:85:67:ea:e3:eb:b4:3d:82:5a:83:60:6b:
         d6:54:94:39:c6:16:38:63:a7:86:ec:97:18:9f:11:24:8e:9e:
         1d:33:f2:42:a2:e3:4e:e9:8f:e8:48:b3:e7:b4:1c:4b:21:14:
         d9:8d:d3:13:39:b5:f9:72:7f:8c:8c:6f:73:bb:d1:3a:09:96:
         21:2d:e3:c8:09:dc:91:47:03:58:71:4b:57:f3:ed:55:ac:27:
         17:26:55:79:75:75:bf:a7:25:3a:8e:45:de:87:56:d7:35:e8:
         50:df:7f:85:b8:aa:f4:ee:a9:5f:05:bc:6e:ac:4a:7b:d3:8b:
         a4:f0:cf:7d:b3:ea:0f:02:a1:75:cb:90:2e:c9:43:a9:d1:8d:
         27:b4:6a:f8:bf:f3:ee:e2:04:4a:0a:3f:f1:a7:8b:8b:22:19:
         e7:df:79:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:44:22 2026 by rpki-client