Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/97be8681-f0a7-30b4-8bac-a34fd63ca7a0.roa
File:                     97be8681-f0a7-30b4-8bac-a34fd63ca7a0.roa (raw, json)
Hash identifier:          FGQh79xVKR0flwRgMEPJJy2kzITMmotGlhTBGUDos8I=
Subject key identifier:   DB:26:3B:C5:72:8E:73:FA:69:50:62:3B:60:DC:A4:E1:80:F3:E0:8D
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584E07009D9B24AD7A8BA6984380
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/97be8681-f0a7-30b4-8bac-a34fd63ca7a0.roa
Signing time:             Mon 01 Jun 2026 13:00:10 +0000
ROA not before:           Mon 01 Jun 2026 13:00:10 +0000
ROA not after:            Sun 30 Aug 2026 13:00:10 +0000
asID:                     33363
IP address blocks:        71.44.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:00:9d:9b:24:ad:7a:8b:a6:98:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jun  1 13:00:10 2026 GMT
            Not After : Aug 30 13:00:10 2026 GMT
        Subject: CN=d1c9ff55-f904-438e-816b-11b8bca9e1b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e2:4e:57:08:b1:6f:bf:21:d9:51:f8:32:b5:
                    49:00:b3:a1:3a:12:5b:09:e8:0d:a2:2f:86:e2:a6:
                    29:a8:97:bb:cb:5f:d0:a1:03:97:f7:1e:67:76:16:
                    2d:6e:d2:2b:dd:e3:98:81:62:7e:6c:97:d0:3f:dd:
                    4a:35:3c:a5:c2:c3:94:82:f7:42:63:be:35:9e:e8:
                    99:0f:86:eb:8c:2e:2b:55:2b:e8:e4:63:55:08:a5:
                    08:81:1c:aa:f9:40:a6:ca:9f:90:a7:fe:f4:39:90:
                    6a:41:0b:39:eb:d0:47:91:ef:2a:61:99:ff:15:8c:
                    49:66:f1:51:20:a6:bf:da:cf:01:df:73:f5:a8:0f:
                    41:54:71:ed:b3:a4:f3:06:1e:6a:6b:dd:db:f8:56:
                    72:f2:76:72:55:36:3c:ba:f9:33:d9:a6:27:66:92:
                    31:f8:97:c0:5e:58:53:76:b8:f1:c5:d2:c7:20:08:
                    46:0a:ee:ee:94:98:a1:42:7b:ff:3f:a2:eb:f3:e9:
                    79:4e:96:88:a0:62:24:51:1d:6c:fc:36:26:c9:6d:
                    fb:4d:a0:9e:25:6f:74:66:09:f6:48:41:4a:86:4f:
                    81:3a:f3:1e:27:c0:f8:8f:94:55:b1:44:95:6a:7d:
                    bc:e4:28:34:dd:db:8d:e0:95:82:34:2d:d4:24:d5:
                    a7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:26:3B:C5:72:8E:73:FA:69:50:62:3B:60:DC:A4:E1:80:F3:E0:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/97be8681-f0a7-30b4-8bac-a34fd63ca7a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.44.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:50:d5:b1:16:7b:0e:2c:f2:56:5e:35:b3:2f:95:dc:3e:02:
         64:9e:61:05:2c:8b:22:07:8a:40:94:44:0e:aa:e0:f8:ea:b7:
         45:64:69:db:b2:50:db:15:06:a9:41:8d:a7:cb:fb:05:78:a5:
         af:bc:61:4c:76:bf:e4:df:70:c6:58:23:51:db:ef:d6:01:5d:
         75:05:b8:ed:c3:be:a5:b1:be:8a:e5:d2:a4:ae:58:90:7e:60:
         3a:33:be:20:59:d2:53:34:71:ca:2a:ed:9e:41:e7:f0:57:30:
         37:5c:3e:b7:96:df:fb:6f:c3:9b:d7:dc:9c:8c:40:93:8b:d6:
         a3:04:bd:90:f9:9d:6a:76:bc:3f:f8:99:72:00:b7:6f:c0:e8:
         7d:94:7c:b6:70:af:52:54:93:56:9a:9a:f5:0e:41:ae:7b:0e:
         1e:db:54:6a:87:f9:b6:ce:44:d3:db:7b:89:5b:bb:92:3f:11:
         54:bd:c8:4c:c3:ba:cf:a6:cf:12:17:79:2d:34:b8:6d:d4:a5:
         44:8f:a6:1f:c3:21:75:6c:2b:44:c6:c9:ec:28:06:0a:c7:66:
         b2:51:6c:f6:b6:01:33:a8:20:66:a4:62:a1:2f:20:92:16:07:
         49:37:c8:a2:41:e0:da:7a:be:69:10:de:88:da:60:6f:12:a2:
         3c:e4:5d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 16:06:59 2026 by rpki-client