Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/481293b5-bb93-3141-a0c9-4e867a9a1f09.roa
File:                     481293b5-bb93-3141-a0c9-4e867a9a1f09.roa (raw, json)
Hash identifier:          OHfI8cp+JzapjJuFdEDutlZtenrSM9+UouaTbJMM04Q=
Subject key identifier:   66:80:80:D9:CC:39:59:36:B3:6A:E4:3E:2B:C2:98:70:3C:8C:0D:BB
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584F6292FEA7CA7A07CB21377280
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/481293b5-bb93-3141-a0c9-4e867a9a1f09.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     33363
IP address blocks:        71.44.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:fe:a7:ca:7a:07:cb:21:37:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=3162f69e-7777-4c7b-a7d0-6e2255d44f8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ed:1a:73:8a:54:27:14:ee:99:7e:78:98:2c:
                    4c:d9:44:46:63:1c:12:52:2e:4f:42:9e:e6:b7:f2:
                    10:83:67:87:13:69:f5:43:ee:e7:6e:1a:80:8f:c3:
                    2e:8c:c1:f5:7d:94:98:d1:c2:e2:a0:ee:e9:0b:1b:
                    f1:8a:bc:fa:91:b5:9b:97:a4:04:9a:e2:74:95:c0:
                    4f:0a:d9:d7:fb:86:b7:21:79:13:40:05:8a:76:ba:
                    bd:b8:a9:c4:d0:49:4f:9c:65:db:15:69:43:1b:09:
                    1e:8a:71:eb:c7:00:dd:75:3c:54:87:44:e3:25:82:
                    51:ea:9e:d8:9b:8b:cf:55:36:81:2f:95:9f:a1:82:
                    e6:bc:2a:18:be:c1:6c:69:60:2a:5e:78:54:6f:ad:
                    d8:3e:35:74:bf:21:ca:fc:e1:6c:77:72:1d:4b:cb:
                    81:fb:d1:20:fa:a6:c5:0e:89:d8:c3:9d:36:53:e1:
                    dd:ea:05:3a:6a:e6:3c:06:5e:ef:47:1d:47:7c:c3:
                    71:34:43:c9:af:0c:d2:1e:d2:11:7c:18:52:03:bd:
                    34:79:85:ca:7b:c7:4c:b5:ee:74:9f:63:b6:84:69:
                    e5:f4:d3:4b:d1:77:6f:2a:cd:58:bc:bb:9c:bb:61:
                    93:80:e8:57:8b:c4:55:af:3f:21:05:d8:c3:ec:8a:
                    bd:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:80:80:D9:CC:39:59:36:B3:6A:E4:3E:2B:C2:98:70:3C:8C:0D:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/481293b5-bb93-3141-a0c9-4e867a9a1f09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.44.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:56:e1:15:4d:2d:50:c0:86:6e:c1:16:28:29:fc:6d:40:b2:
         2b:23:bb:e6:36:56:17:ef:f5:77:4b:06:a8:26:5f:c6:5a:55:
         27:89:51:04:aa:79:c0:fa:b7:f0:2e:31:46:b6:1d:d0:ca:dc:
         02:bb:e4:ff:b4:ba:12:f5:b0:44:6e:6a:18:d6:87:43:05:63:
         d8:3e:27:b0:a0:ab:73:8e:71:dc:c2:24:7d:1f:c2:3c:40:ce:
         dc:69:cf:11:08:28:ee:b3:6f:b9:01:90:df:36:12:27:f9:b8:
         8b:ad:78:a7:71:f6:2f:96:94:14:01:73:e7:d4:88:cb:bf:4e:
         e4:d6:cb:95:91:a6:92:7b:a5:39:4f:4f:b8:c4:f1:36:73:d0:
         20:f9:14:44:20:ff:78:ed:8a:6f:59:02:24:c4:17:d8:24:2b:
         9b:cd:ac:7f:fd:ba:ef:49:88:cf:23:32:da:75:fd:69:cc:ac:
         49:da:9e:d9:7f:ba:64:36:80:7b:25:8f:61:03:40:73:84:b2:
         be:b0:39:a2:cc:df:51:92:3c:40:fc:c2:52:0f:2e:75:c0:a2:
         a7:7e:92:a8:d5:39:1a:56:4c:0a:36:b7:6a:aa:f9:6f:a3:ea:
         c0:34:16:5a:9f:91:db:2c:46:f5:75:8b:dd:ef:f0:27:19:71:
         ed:d9:f5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 23:22:32 2026 by rpki-client