Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c7d8612c-3fad-4feb-b744-b008bcc4ab8c/44f62ec9-f843-310b-97b2-1158f8708fa4.roa
File:                     44f62ec9-f843-310b-97b2-1158f8708fa4.roa (raw, json)
Hash identifier:          jhbDoJXoVXVwX825bA1atTKAthjMdNXWBda9/AMrI20=
Subject key identifier:   A4:CC:B7:70:D2:BC:9A:8E:6F:58:35:9A:ED:69:88:30:28:CF:9B:42
Certificate issuer:       /CN=c7d8612c-3fad-4feb-b744-b008bcc4ab8c
Certificate serial:       010D0C9F4328584D23BF6E59823B4C5544C90800
Authority key identifier: A8:D3:B9:A6:AC:D7:A8:AA:8A:B8:C6:E6:E6:9D:74:62:A7:3F:DF:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c7d8612c-3fad-4feb-b744-b008bcc4ab8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c7d8612c-3fad-4feb-b744-b008bcc4ab8c/44f62ec9-f843-310b-97b2-1158f8708fa4.roa
Signing time:             Thu 12 Mar 2026 03:20:35 +0000
ROA not before:           Thu 12 Mar 2026 03:20:35 +0000
ROA not after:            Wed 10 Jun 2026 03:20:35 +0000
asID:                     399116
IP address blocks:        45.42.220.0/22 maxlen: 22
                          2606:4740::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c7d8612c-3fad-4feb-b744-b008bcc4ab8c/c7d8612c-3fad-4feb-b744-b008bcc4ab8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c7d8612c-3fad-4feb-b744-b008bcc4ab8c/c7d8612c-3fad-4feb-b744-b008bcc4ab8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c7d8612c-3fad-4feb-b744-b008bcc4ab8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:bf:6e:59:82:3b:4c:55:44:c9:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7d8612c-3fad-4feb-b744-b008bcc4ab8c
        Validity
            Not Before: Mar 12 03:20:35 2026 GMT
            Not After : Jun 10 03:20:35 2026 GMT
        Subject: CN=b4e96b00-1ea1-4e2d-9bc7-d139c2b4fa9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:60:23:24:23:52:4f:3f:bf:4f:39:2c:65:de:
                    d8:af:78:7d:1c:18:79:07:4e:c0:67:0f:a4:c2:ce:
                    e5:cc:6b:b9:2e:ef:f3:a2:52:5e:d7:20:44:c7:16:
                    72:52:07:61:74:4d:14:a1:e6:4f:20:86:2c:ad:d1:
                    14:72:e5:32:4b:6d:b3:b1:49:57:80:40:68:f5:8d:
                    16:96:b5:14:92:dd:e9:83:2c:1b:80:9b:60:62:6e:
                    bb:04:8a:58:bf:a1:3c:7a:b3:5b:ac:66:3b:a5:a3:
                    8c:b4:62:42:b6:db:70:1c:f6:f4:23:b9:e1:7b:b5:
                    01:17:c6:12:4d:93:f8:12:10:d0:a9:73:1b:89:2a:
                    8b:25:2f:f8:e3:a9:07:ec:c6:ff:8e:f8:8f:39:64:
                    d7:e3:15:8b:27:39:d7:7b:f6:d7:27:f1:7c:83:2e:
                    1b:68:4d:eb:75:bc:f8:7d:01:e9:af:86:29:15:14:
                    a1:b9:d4:64:70:69:bb:9a:bb:a4:4f:a1:57:95:29:
                    20:a5:c2:92:af:28:c5:4f:e7:2d:f0:7b:7e:95:e7:
                    f4:ed:5b:5e:79:08:75:c6:e8:12:a2:b9:70:12:57:
                    ed:6d:1f:6b:b9:d2:c2:a0:48:16:e5:1c:bc:08:6e:
                    ff:68:ab:69:90:c4:18:af:3e:7e:1b:52:17:07:49:
                    8b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:CC:B7:70:D2:BC:9A:8E:6F:58:35:9A:ED:69:88:30:28:CF:9B:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c7d8612c-3fad-4feb-b744-b008bcc4ab8c/44f62ec9-f843-310b-97b2-1158f8708fa4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c7d8612c-3fad-4feb-b744-b008bcc4ab8c/c7d8612c-3fad-4feb-b744-b008bcc4ab8c.crl

            X509v3 Authority Key Identifier:
                keyid:A8:D3:B9:A6:AC:D7:A8:AA:8A:B8:C6:E6:E6:9D:74:62:A7:3F:DF:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c7d8612c-3fad-4feb-b744-b008bcc4ab8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.220.0/22
                IPv6:
                  2606:4740::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:36:31:d9:92:43:c7:d3:8c:bd:2f:f6:df:d5:89:2b:7b:ef:
         36:e1:82:b9:a6:5d:3d:b7:5c:03:96:f9:0d:74:04:03:9a:30:
         2f:32:57:10:f2:94:e8:b4:72:8e:34:16:bf:9d:d9:e2:d4:73:
         ff:c0:f1:4e:3e:5e:9d:2e:c4:66:72:e7:d2:20:65:d4:8a:4f:
         f2:61:e9:13:72:1e:21:3c:5d:0d:fd:4f:48:7b:88:d2:05:a8:
         09:d3:08:1c:20:a2:73:ab:15:07:12:73:0f:94:c5:7e:f3:23:
         49:75:44:9b:e9:98:41:26:b5:e8:f0:58:da:fd:c9:ab:0b:b9:
         97:3c:64:6b:13:f0:42:e2:77:ae:25:44:71:b1:2c:5f:dd:4a:
         f9:81:13:d3:e1:b2:8c:33:a6:a9:87:bf:ab:9f:60:ec:cc:46:
         9d:c7:aa:de:f6:58:70:48:25:a4:67:e8:cc:be:cb:2f:85:67:
         db:63:7a:9d:86:83:eb:1e:52:e2:11:cb:90:52:7e:ae:a5:a2:
         ef:55:ed:22:10:a0:fb:91:8d:fc:0e:e8:59:a2:b5:41:2c:83:
         99:5a:f4:96:c1:95:0e:89:c7:0f:f3:51:5d:2e:f1:fe:69:c2:
         0b:a5:e4:2c:0f:36:49:62:7e:52:0f:4d:51:a8:fc:a3:21:81:
         3e:57:12:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 08:23:26 2026 by rpki-client