Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/44f2d61c-ab34-356b-828a-c4bce4e5232a.roa
File:                     44f2d61c-ab34-356b-828a-c4bce4e5232a.roa (raw, json)
Hash identifier:          R03RSQJtfdEY9YB3QJBNNUL3KH0BXWjMtCoydewEB6w=
Subject key identifier:   C3:FC:94:4A:BD:34:DA:55:BA:AF:F7:0E:E4:E7:1D:BE:27:26:4B:82
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E908CE9131AFBAB7DCBE01F00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/44f2d61c-ab34-356b-828a-c4bce4e5232a.roa
Signing time:             Mon 20 Jul 2026 19:28:50 +0000
ROA not before:           Mon 20 Jul 2026 19:28:50 +0000
ROA not after:            Sun 18 Oct 2026 14:09:45 +0000
asID:                     328867
IP address blocks:        149.57.63.0/24 maxlen: 24
                          149.57.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:8c:e9:13:1a:fb:ab:7d:cb:e0:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul 20 19:28:50 2026 GMT
            Not After : Oct 18 14:09:45 2026 GMT
        Subject: CN=2264963c-7fd7-48fd-a78f-d2369f2321d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:63:05:7b:b6:9a:91:2a:7e:bf:d8:ca:0f:f0:
                    b7:df:cd:f8:55:14:bc:9b:7d:b6:59:37:e9:6c:ef:
                    4b:64:de:52:69:8c:f3:f3:07:e0:d8:b0:1e:83:df:
                    c1:29:9f:28:8b:3a:70:1f:67:05:7f:b5:cf:ea:84:
                    a4:ae:43:46:1e:d9:69:9b:b7:e4:a2:ae:67:f3:35:
                    47:5f:bc:44:94:6b:d9:18:db:c7:04:61:27:10:d5:
                    4b:fb:22:e0:ea:6c:da:7e:e6:53:32:6b:4e:15:95:
                    d2:cf:0f:db:1a:dc:db:24:9c:37:03:63:ef:b3:bf:
                    37:11:50:c3:67:96:57:28:6e:87:3f:ab:98:f6:2e:
                    ac:76:4b:fc:b6:f0:7f:d7:98:a5:dc:ce:4d:32:b4:
                    70:f3:cb:f2:09:c8:c1:57:a7:3b:61:c7:cc:0f:25:
                    eb:4c:35:35:09:5e:35:8f:be:3e:32:5b:4f:bb:a9:
                    27:84:84:2f:28:4b:fe:d8:75:d1:d1:66:a9:06:f3:
                    f4:ad:f0:46:be:bf:c5:d5:93:ad:ec:0b:fa:67:a3:
                    af:55:fe:02:ab:e3:76:9b:2c:09:64:b8:af:e7:81:
                    04:85:d6:f1:81:5d:64:cb:37:d4:10:5a:87:bc:38:
                    3b:f7:35:31:23:28:65:28:95:53:de:10:0a:14:d9:
                    78:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:FC:94:4A:BD:34:DA:55:BA:AF:F7:0E:E4:E7:1D:BE:27:26:4B:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/44f2d61c-ab34-356b-828a-c4bce4e5232a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.57.63.0/24
                  149.57.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:9b:57:a0:63:1a:c1:60:f2:a2:89:24:e5:81:04:f6:1a:84:
         22:29:57:d9:9b:66:ad:6a:82:3e:92:b9:0c:cc:39:c8:61:ac:
         59:ae:53:9f:57:f8:2e:3d:5a:00:bd:cd:0b:fe:36:59:b8:26:
         de:7f:d2:e6:cc:f6:0d:b3:cd:69:7c:f7:36:a3:8e:ae:dc:53:
         8e:a3:ee:ec:07:58:25:e0:1a:44:f6:e7:73:97:60:12:30:cc:
         94:0d:f1:c9:d9:db:54:9c:f2:58:0b:c2:ac:41:df:2f:b6:a0:
         3c:52:83:b8:b7:1b:b6:8e:92:6a:63:35:3f:68:4d:8b:b6:7a:
         b8:6e:56:14:f3:84:f1:94:7d:c7:ef:a0:29:ec:95:9c:39:41:
         19:09:cb:12:0f:9d:cf:f6:bd:3b:21:0f:25:61:68:f1:36:c7:
         e7:24:75:de:d8:a0:40:67:4c:69:24:63:2d:51:f1:a9:86:cd:
         e5:9e:1d:ac:17:88:90:ad:69:52:e9:95:52:8a:6c:4e:3e:96:
         41:9c:98:df:14:27:6f:a6:dc:aa:30:e2:99:66:c8:f0:3d:99:
         4a:4c:80:59:26:52:66:a4:f6:8d:9f:a2:40:8f:5e:41:f6:a0:
         f3:80:a8:45:8f:3d:30:2e:6f:a7:17:74:43:cc:c3:9c:4b:4a:
         11:89:b2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:58:40 2026 by rpki-client