Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/039e0c96-299b-349e-8b3d-5e0d97e4898a.roa
File:                     039e0c96-299b-349e-8b3d-5e0d97e4898a.roa (raw, json)
Hash identifier:          vGuhosOF60clWvsHdq8+dKuWWAR+Oday6Hs/0NEX8+g=
Subject key identifier:   C5:06:0C:4B:C5:CE:8D:DF:C5:98:14:90:4A:8E:08:2C:DF:D6:A3:EE
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584F6293001BA76E126ABA544680
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/039e0c96-299b-349e-8b3d-5e0d97e4898a.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     33363
IP address blocks:        71.44.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:93:00:1b:a7:6e:12:6a:ba:54:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=8aebb8a5-f99f-45d5-96f6-e400e3c80bb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d6:10:94:5b:fa:14:cf:fe:1b:16:dc:0e:c4:
                    54:4a:5a:23:b0:50:7a:47:95:22:e5:c7:d9:89:9e:
                    f6:05:50:f0:49:d5:42:5d:98:ed:7f:c2:b3:f8:43:
                    0a:32:cc:b6:20:82:95:42:9c:c0:17:50:8d:a5:1e:
                    a5:42:a2:66:35:61:3e:79:94:53:63:01:01:76:bd:
                    58:07:f5:57:0d:99:97:cc:97:81:7f:86:b8:c6:1b:
                    97:e7:5c:c8:f7:bc:69:d8:9c:0a:cc:92:4a:1a:36:
                    a4:0d:d6:db:7e:0d:92:2c:ec:53:c4:07:de:bf:58:
                    34:9b:91:f1:59:2e:cb:01:07:c8:7a:ed:7e:15:e4:
                    6c:0e:25:d5:43:ef:fc:95:bc:40:c8:4f:8d:f5:66:
                    46:a1:ca:20:a0:49:34:69:9d:31:96:36:62:77:1f:
                    43:7c:fe:d5:5b:d8:05:0f:07:60:51:09:c3:ef:1e:
                    65:59:11:bb:86:49:e9:6f:08:4d:86:01:50:76:e5:
                    74:b4:26:4e:3f:a4:4d:01:2e:c2:33:fe:3c:f2:73:
                    b0:e7:42:67:16:8a:a5:df:56:f3:cc:18:b0:71:06:
                    2f:58:e8:0c:1c:c2:d5:c3:f0:09:2a:a1:99:05:d1:
                    22:c3:d4:dc:63:3a:0c:8d:4a:9b:96:f0:81:ad:87:
                    26:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:06:0C:4B:C5:CE:8D:DF:C5:98:14:90:4A:8E:08:2C:DF:D6:A3:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/039e0c96-299b-349e-8b3d-5e0d97e4898a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.44.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:1c:8b:d3:ff:a1:b4:84:86:ce:a7:4f:ab:22:b8:cc:3f:77:
         41:f1:71:fb:d6:66:45:94:3f:c4:32:e7:2d:fa:f4:5a:6c:ba:
         46:62:16:80:50:0a:e8:81:e6:3d:ac:e0:13:53:d6:f9:ca:32:
         a2:d7:99:25:90:eb:de:96:b0:a1:c3:b2:17:6d:19:88:3e:0c:
         91:0e:12:31:ea:00:cc:58:f6:4d:05:5a:6b:51:e7:3d:39:43:
         98:01:6c:fd:3a:5e:92:88:5d:d8:90:87:d4:1d:51:dd:d3:5c:
         b9:fb:f3:55:de:6e:e5:1b:e6:82:5c:72:a6:86:78:f5:dc:32:
         53:e5:d7:88:95:c9:e2:e3:72:c0:2c:84:46:79:62:8d:d2:d9:
         1a:7c:94:55:81:2f:b1:de:6d:5c:25:3b:e3:2d:d6:26:18:f5:
         a3:e4:29:a4:a9:11:53:ee:39:f8:9a:ef:de:7c:b6:3e:1e:a0:
         dd:e7:cd:19:52:41:c9:44:a8:79:f9:fe:7a:dc:4b:23:81:19:
         c2:e1:8a:48:85:9c:5f:d6:08:38:3f:a5:ff:7b:69:16:dd:52:
         82:c8:78:06:0e:81:e3:b7:1a:a2:78:8c:92:f3:8a:83:50:35:
         e0:6b:9f:1b:ed:20:e3:0e:42:68:7b:95:28:b6:f4:42:79:84:
         62:d9:4f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:31:35 2026 by rpki-client