Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/65e74881-80cf-3406-85ca-cec3b622f056.roa
File:                     65e74881-80cf-3406-85ca-cec3b622f056.roa (raw, json)
Hash identifier:          cS4BNnhd7HTrD5gM9Z/5EHFCYwZMqEHGQXMTP7T5/L8=
Subject key identifier:   20:FE:09:37:49:7A:01:B3:AD:BA:0A:E2:01:58:D7:EB:8F:35:00:1C
Certificate issuer:       /CN=44c9f20f-94d3-45ab-b941-cca94fba4981
Certificate serial:       010D0C9F4328584E4AEF7167ED72C84DD63C80A0
Authority key identifier: 03:F6:F6:1C:42:4C:C7:52:8D:DD:05:02:7D:BD:F4:D8:FD:07:A3:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/65e74881-80cf-3406-85ca-cec3b622f056.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     42633
IP address blocks:        170.194.178.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/44c9f20f-94d3-45ab-b941-cca94fba4981.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/44c9f20f-94d3-45ab-b941-cca94fba4981.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:71:67:ed:72:c8:4d:d6:3c:80:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44c9f20f-94d3-45ab-b941-cca94fba4981
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=623e62c6-ef63-4042-8081-83628b0652da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:21:c5:3c:bc:d1:ab:56:4d:aa:e3:a3:09:b8:
                    ec:a8:46:53:eb:d6:17:40:df:7e:4a:67:9b:f7:de:
                    20:19:a7:62:d6:74:2a:46:7b:a1:58:8d:6e:24:c3:
                    a2:8b:10:f7:17:62:68:b4:e0:f1:d6:3a:61:6f:ac:
                    41:d3:e5:b8:14:a0:d7:ad:fd:3d:88:84:4d:d5:8b:
                    9d:63:0c:1c:68:27:39:9d:a8:74:ac:2f:2f:41:9b:
                    b3:71:db:e0:6b:38:2d:61:a3:f3:7f:fc:86:f7:74:
                    2e:a1:76:d6:b1:ef:d1:1c:04:61:d6:56:c0:bf:b3:
                    40:64:72:97:ca:c4:1f:21:25:01:84:01:c9:82:d8:
                    27:73:e9:50:58:15:d8:6a:98:9c:3b:58:4e:06:1e:
                    28:66:b7:ce:5d:35:c8:99:c6:e9:43:96:23:ac:38:
                    e0:0d:56:df:42:02:65:25:35:c6:12:0c:7b:ed:55:
                    cd:46:1e:8f:30:f3:38:88:1b:49:84:5a:84:21:db:
                    e5:d7:ad:db:4e:f6:23:1b:57:36:28:3d:9d:19:8d:
                    cf:d5:fd:05:cb:71:ed:c6:7f:9c:58:8d:5f:64:17:
                    c6:b0:a5:5e:c6:b2:a6:55:4b:b1:6f:64:16:b8:8a:
                    85:5b:00:74:38:c0:dd:2b:cb:7d:35:1b:01:ff:c7:
                    cb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:FE:09:37:49:7A:01:B3:AD:BA:0A:E2:01:58:D7:EB:8F:35:00:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/65e74881-80cf-3406-85ca-cec3b622f056.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/44c9f20f-94d3-45ab-b941-cca94fba4981.crl

            X509v3 Authority Key Identifier:
                keyid:03:F6:F6:1C:42:4C:C7:52:8D:DD:05:02:7D:BD:F4:D8:FD:07:A3:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.194.178.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:12:6e:c3:08:99:05:3b:4c:58:b9:e3:dc:fd:17:11:de:85:
         ff:2e:d0:73:29:22:ef:f6:3c:4d:0f:e8:7c:90:41:a2:55:c8:
         e9:6a:62:eb:d1:89:3b:14:7a:51:36:b1:99:fb:4f:46:63:45:
         24:4d:ef:d6:f6:89:c4:aa:4d:b6:5b:fc:48:32:d9:6c:5f:0e:
         28:7b:38:ba:d0:b4:f9:dc:f6:45:98:f0:7c:60:8b:e4:3c:c9:
         51:4f:c0:00:9d:58:b9:08:38:af:0a:a5:7b:24:1a:8b:6e:dd:
         f3:ad:6d:7b:7f:0d:d4:2d:ea:56:27:a1:cd:a4:d7:31:79:9d:
         99:aa:9d:f3:82:fe:a6:ee:72:29:3c:a9:a7:65:e5:7f:06:6b:
         77:f5:20:83:5a:da:54:6a:42:16:23:d8:88:a7:b9:e6:81:9d:
         25:a8:9b:5c:35:13:c7:18:e7:3f:f5:fb:0b:3d:63:67:f2:cb:
         bd:6b:0f:6f:2d:ca:f4:df:37:32:0c:59:b2:77:44:1c:6a:e4:
         29:16:22:35:6a:91:dc:10:3a:8c:43:42:72:f9:8e:e0:2a:e2:
         b6:0d:15:e1:5c:86:f0:b8:93:d7:56:32:c3:c9:7e:3c:a0:4c:
         ac:8d:8b:13:91:ae:a8:e5:86:f7:4d:5d:50:b1:50:bd:88:94:
         84:41:41:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 22:18:15 2026 by rpki-client