Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d6c1648c-fad6-3464-879b-aa8dae5ae8fb.roa
File:                     d6c1648c-fad6-3464-879b-aa8dae5ae8fb.roa (raw, json)
Hash identifier:          xiQBZSjmeGXVaOHzf8vtVEAYbEe8P1CwssY7SXo8h5w=
Subject key identifier:   79:1E:EB:15:1B:A1:BC:32:F1:31:89:50:74:B8:AD:4C:D6:95:A7:29
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584DB7703A0EA80D9EF0E649B680
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d6c1648c-fad6-3464-879b-aa8dae5ae8fb.roa
Signing time:             Mon 04 May 2026 01:00:25 +0000
ROA not before:           Mon 04 May 2026 01:00:25 +0000
ROA not after:            Sun 02 Aug 2026 01:00:25 +0000
asID:                     14618
IP address blocks:        170.114.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b7:70:3a:0e:a8:0d:9e:f0:e6:49:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: May  4 01:00:25 2026 GMT
            Not After : Aug  2 01:00:25 2026 GMT
        Subject: CN=4cfc6c13-c150-4bf7-afe6-b273cd4e1bce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6c:c3:62:24:a2:5f:46:59:fd:d6:90:40:45:
                    1e:76:d0:14:fa:92:76:a5:6f:a0:da:f3:c9:f1:e0:
                    14:72:2c:04:cb:10:f1:9b:f6:37:09:4f:2e:35:d1:
                    44:2b:4e:06:2c:e6:30:b0:33:c4:e8:f3:9b:f6:70:
                    73:6f:0f:de:b1:6a:a9:d4:ce:18:85:d9:46:9f:42:
                    2f:07:a8:ba:c6:23:84:12:9a:20:03:53:e0:1c:0e:
                    08:1c:f8:44:de:55:82:09:50:8d:53:47:98:26:db:
                    ff:d0:3c:0a:16:3c:b9:93:8c:96:32:d3:a7:76:a4:
                    19:d4:e1:22:13:3c:02:ee:f1:dc:e9:0b:21:2c:17:
                    3a:18:cc:66:90:c5:2c:91:a9:9a:77:be:b7:8d:63:
                    b1:c5:3e:9a:6a:a6:fd:8b:af:dd:60:4d:1a:6e:f1:
                    79:d3:52:cb:4e:af:cc:90:79:cb:f6:c9:88:1a:5f:
                    e7:5f:b4:64:12:d9:6a:0f:0f:7e:56:e0:e3:be:a6:
                    51:9a:a9:e4:09:57:af:cc:65:3a:08:6f:26:a4:0b:
                    78:47:3d:e1:25:74:4e:12:a2:f4:d1:ec:34:93:5f:
                    7e:26:13:5b:18:75:5a:92:b8:8d:ac:15:6e:fc:14:
                    07:56:ba:fc:78:6c:21:b0:bc:a7:4e:d1:b2:48:f5:
                    c4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:1E:EB:15:1B:A1:BC:32:F1:31:89:50:74:B8:AD:4C:D6:95:A7:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d6c1648c-fad6-3464-879b-aa8dae5ae8fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:c5:6b:1a:e8:e0:9c:f7:de:bc:82:07:8f:1a:6d:80:f0:39:
         db:74:4b:56:26:9a:66:30:8c:76:29:30:a3:4f:94:b7:b5:ec:
         10:d1:c3:bf:1d:8c:80:57:3e:01:2a:69:0e:87:4c:e5:d2:7a:
         a8:70:a2:6a:aa:7b:9a:f0:fb:ff:2c:03:6f:4d:22:f0:d0:a3:
         84:3e:c3:16:a7:4b:4a:18:3e:70:51:47:82:ae:d0:fa:1a:cf:
         26:b1:0d:80:4c:39:fa:e7:80:d4:e0:66:f4:79:d1:2b:36:b3:
         b0:1e:85:4f:a2:9d:14:c6:66:0c:ba:ce:2c:a1:39:05:bc:c3:
         65:28:25:18:6f:3c:e2:57:f3:de:12:96:01:0b:e2:09:2e:a9:
         a3:30:12:7d:3c:03:f2:e1:9e:ad:e2:6d:1c:4d:c2:5c:41:fc:
         9e:20:e4:71:80:a3:33:d1:05:73:96:c5:c4:0c:34:d9:ef:f8:
         99:0e:fa:c5:bd:fb:a1:ad:d6:45:ed:dd:87:e2:5e:c0:94:71:
         2d:fd:4d:1b:b1:40:de:42:b8:30:f3:65:7f:c2:d6:89:23:11:
         25:c8:0e:46:7a:e1:dc:f1:88:74:5e:51:ff:8b:68:50:c4:80:
         36:d5:f9:43:c3:c2:aa:c4:33:6e:6b:2c:2a:40:c2:fe:e5:dd:
         3f:0f:95:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:50:14 2026 by rpki-client