Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/cc3bfbbb-8fc4-3ea0-94ab-80de15011e87.roa
File:                     cc3bfbbb-8fc4-3ea0-94ab-80de15011e87.roa (raw, json)
Hash identifier:          OLiKdiFUjati498VWmyqi8pq1wS0e3OkFXus9/VWEWo=
Subject key identifier:   A6:BC:DA:A5:D2:E8:5A:F1:C6:0E:EE:B5:37:AF:68:19:D6:D6:C6:13
Certificate issuer:       /CN=44b4119f-34fc-4fce-8dbf-b69ae33a493a
Certificate serial:       010D0C9F4328584DB7703D60241575CCF930E300
Authority key identifier: 92:1C:D0:0D:FE:07:3C:69:E7:56:03:52:BD:6C:5D:11:29:A5:13:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/cc3bfbbb-8fc4-3ea0-94ab-80de15011e87.roa
Signing time:             Mon 04 May 2026 01:00:25 +0000
ROA not before:           Mon 04 May 2026 01:00:25 +0000
ROA not after:            Sun 02 Aug 2026 01:00:25 +0000
asID:                     18594
IP address blocks:        64.57.146.0/24 maxlen: 24
                          64.57.146.64/26 maxlen: 26
                          64.57.146.128/26 maxlen: 26
                          64.57.146.192/29 maxlen: 29
                          208.74.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/44b4119f-34fc-4fce-8dbf-b69ae33a493a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/44b4119f-34fc-4fce-8dbf-b69ae33a493a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b7:70:3d:60:24:15:75:cc:f9:30:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44b4119f-34fc-4fce-8dbf-b69ae33a493a
        Validity
            Not Before: May  4 01:00:25 2026 GMT
            Not After : Aug  2 01:00:25 2026 GMT
        Subject: CN=afc4a4cb-6056-46e9-855b-11cbc7be33ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:64:34:15:b6:13:3b:cf:2f:94:63:61:3d:b0:
                    f2:16:b6:ed:a3:30:39:f8:f4:0a:ee:d0:5f:99:6d:
                    9d:2d:96:50:27:98:bb:e0:e0:1d:90:b4:8a:c8:fe:
                    ad:c6:56:c2:f0:f1:f6:88:31:39:12:4e:1f:97:e9:
                    46:c1:4c:fc:70:73:7c:13:09:39:93:6a:dd:bc:f1:
                    a3:87:34:27:21:a8:0c:4c:12:5a:db:8b:04:eb:e7:
                    41:0b:92:7c:4a:41:93:3c:5a:7a:db:76:ba:b6:63:
                    4d:e0:c9:9e:c1:6a:16:f9:95:98:78:c2:41:c4:31:
                    e0:07:a5:07:3e:d6:a5:d0:8a:91:8a:1c:50:81:55:
                    f4:94:b5:29:04:78:58:20:7a:58:88:5d:63:02:d7:
                    a2:b0:10:ff:e0:dc:80:9e:2b:90:03:b8:7b:64:c5:
                    d6:d0:cd:87:e2:be:8e:3b:ef:58:80:20:56:84:0e:
                    41:f4:ff:02:a6:c8:9d:e5:3a:00:b5:7c:e6:8c:1f:
                    88:8e:34:68:9a:e6:23:58:eb:98:f2:b9:76:9d:40:
                    00:1b:14:2f:26:d3:bd:c5:ce:6e:83:e2:07:b7:85:
                    5a:5a:51:3b:90:f7:91:61:d2:cb:4d:fd:2a:dd:c8:
                    90:c3:38:ac:66:23:6a:c3:d1:5f:f0:43:29:7d:fd:
                    66:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:BC:DA:A5:D2:E8:5A:F1:C6:0E:EE:B5:37:AF:68:19:D6:D6:C6:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/cc3bfbbb-8fc4-3ea0-94ab-80de15011e87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/44b4119f-34fc-4fce-8dbf-b69ae33a493a.crl

            X509v3 Authority Key Identifier:
                keyid:92:1C:D0:0D:FE:07:3C:69:E7:56:03:52:BD:6C:5D:11:29:A5:13:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.146.0/24
                  208.74.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:36:a7:c5:18:1b:4d:52:72:b9:4b:ff:4f:5a:3d:1c:0c:91:
         9a:dc:02:7c:d4:2e:3f:69:b7:d3:fc:84:13:8a:94:cf:c7:eb:
         48:f4:3f:92:d5:00:9e:dc:f0:f2:34:41:d9:7d:31:c4:3b:f3:
         aa:8e:f9:90:c5:6f:b3:32:0c:fc:72:97:5c:b8:04:ac:52:6d:
         07:62:fd:b6:f9:c0:a3:b1:96:e6:de:dd:ec:d6:01:86:79:a9:
         53:a9:16:f4:f3:bd:44:3f:f2:d2:1c:18:b0:73:e4:3c:56:e3:
         ad:a5:d4:d3:73:d2:be:e4:38:4a:eb:6d:df:fe:a5:e8:51:44:
         0f:0d:17:20:41:38:6a:cc:2b:41:93:b8:4e:08:00:9f:bc:70:
         8a:58:f8:a7:b0:be:26:38:24:47:11:c2:1f:a2:d5:0e:af:ab:
         76:62:03:52:5d:fe:c9:0b:9a:ba:24:36:3b:39:8c:da:6c:12:
         b0:ab:d2:f2:d2:ef:7e:a1:79:39:aa:d9:28:a9:a3:87:b0:dd:
         39:6d:54:6a:af:85:13:57:dc:bb:03:99:1e:bc:57:aa:83:b7:
         9a:eb:1e:34:44:6f:37:a2:bc:d6:8a:a3:08:3e:28:78:e2:1d:
         96:10:04:30:47:88:64:c6:0e:da:9f:e3:57:d2:2f:5a:fa:18:
         c6:9e:a6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:35:39 2026 by rpki-client