Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0/b51dc5b9-c983-3e96-8672-c8d5ce13d82d.roa
File:                     b51dc5b9-c983-3e96-8672-c8d5ce13d82d.roa (raw, json)
Hash identifier:          dKu1i6g7GeRSddnYeX1k1Bxsdx+woZOqLF8xKDxX2KE=
Subject key identifier:   F3:5F:29:0C:5B:8B:13:DA:FA:F3:AB:5C:6F:03:F5:E4:C3:29:03:04
Certificate issuer:       /CN=ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0
Certificate serial:       010D0C9F4328584D316F6A6A289ED7AC1084CEA0
Authority key identifier: 52:7A:49:74:BA:82:82:68:ED:97:35:DC:BE:AB:72:D6:94:92:F6:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0/b51dc5b9-c983-3e96-8672-c8d5ce13d82d.roa
Signing time:             Tue 17 Mar 2026 01:00:32 +0000
ROA not before:           Tue 17 Mar 2026 01:00:32 +0000
ROA not after:            Mon 15 Jun 2026 01:00:32 +0000
asID:                     46274
IP address blocks:        170.212.0.0/24 maxlen: 24
                          170.212.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:31:6f:6a:6a:28:9e:d7:ac:10:84:ce:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0
        Validity
            Not Before: Mar 17 01:00:32 2026 GMT
            Not After : Jun 15 01:00:32 2026 GMT
        Subject: CN=037753eb-a552-464f-97d9-07b9acd7918c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:15:02:45:9e:99:23:b1:aa:be:12:e6:fc:b4:
                    ad:12:1c:ef:11:8b:9a:9b:31:75:e2:4a:09:20:4a:
                    cc:4f:36:d7:93:9d:94:dc:ce:f8:c6:30:1d:e6:c6:
                    ea:28:23:fa:86:66:96:39:cc:0e:ce:9a:42:79:7f:
                    f9:48:7b:02:a0:f9:a7:90:08:cb:db:0e:7d:e4:35:
                    19:a3:cc:3d:06:9e:af:b2:59:80:d6:75:75:be:c0:
                    39:e2:51:83:5c:bf:de:bb:2c:06:0e:e2:52:5b:46:
                    ea:d2:cd:d9:9a:9f:21:09:42:be:63:51:0f:8c:10:
                    79:ac:83:e8:4e:69:a9:3c:76:f0:7c:6c:a4:e3:d8:
                    00:43:53:29:56:de:f7:8b:e7:de:31:98:37:65:32:
                    5f:b4:d0:3a:7a:3f:3e:2f:ef:03:17:5a:d3:a3:ab:
                    3a:95:cc:40:44:4b:ce:df:ed:24:18:f8:b3:2f:6a:
                    92:30:20:24:01:34:79:e0:66:b9:99:63:35:6d:6b:
                    a7:d1:70:b3:ae:f0:98:40:31:1f:f6:ca:55:5b:2c:
                    ee:c8:67:a0:a9:41:30:be:ab:a9:56:00:b5:22:88:
                    b8:ff:f9:64:90:d9:24:84:fd:e8:26:fe:ae:5b:85:
                    67:7f:06:76:56:60:8c:28:0f:f2:f4:fd:b9:72:69:
                    be:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:5F:29:0C:5B:8B:13:DA:FA:F3:AB:5C:6F:03:F5:E4:C3:29:03:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0/b51dc5b9-c983-3e96-8672-c8d5ce13d82d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0.crl

            X509v3 Authority Key Identifier:
                keyid:52:7A:49:74:BA:82:82:68:ED:97:35:DC:BE:AB:72:D6:94:92:F6:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.212.0.0/24
                  170.212.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:f7:5f:6a:8d:8f:33:8b:1d:61:19:28:cb:20:a4:15:54:8a:
         f3:e8:d8:3c:45:f1:7d:66:b0:ad:c5:ea:e0:7f:d3:d2:80:fc:
         dd:3a:b8:13:b3:d0:2b:9f:65:bb:c8:98:99:c1:3a:f1:10:21:
         4c:ef:dc:07:c8:44:9a:02:fd:f1:15:c9:63:b1:c4:65:0c:2f:
         15:de:2a:05:1f:13:59:84:fa:87:b3:d7:ec:0b:1a:55:40:ff:
         8e:1f:50:3d:ab:6d:fb:41:73:d0:56:b8:46:4c:e8:0a:0b:eb:
         5f:cf:65:70:7e:f5:20:26:9d:9a:d7:0e:07:82:51:77:b8:19:
         e4:38:02:a5:80:12:e0:79:e5:b8:55:17:44:34:9f:fe:16:b9:
         55:87:03:53:dd:2a:13:89:fb:19:d8:c9:24:2f:f4:b8:5e:1f:
         bb:9f:2d:32:56:d8:f5:95:9d:6c:86:88:4c:9b:37:65:b8:a9:
         cd:61:bc:e2:4f:5d:af:86:f4:94:50:6b:16:1f:8d:29:df:5f:
         a1:cf:0a:b3:6f:b1:c6:43:54:0d:9d:4a:8f:74:ee:d3:cb:a1:
         c6:57:d5:2f:54:4e:39:70:34:b4:71:e9:75:36:47:b4:a6:8e:
         d1:c5:14:9d:33:81:8a:8b:62:b7:90:21:5a:22:75:d2:0b:4b:
         27:7b:20:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:44:01 2026 by rpki-client