Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/df7c5515-0486-333e-8c0d-4be1af31b67f.roa
File:                     df7c5515-0486-333e-8c0d-4be1af31b67f.roa (raw, json)
Hash identifier:          45cZIaEVxpv2o3CW4qxV7DdTWq/2bEFWzlYy4hLheWg=
Subject key identifier:   28:92:2D:BD:09:11:47:31:6B:28:3D:08:C7:40:33:DC:54:4E:5E:A0
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584E0D842539F9D710652D747400
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/df7c5515-0486-333e-8c0d-4be1af31b67f.roa
Signing time:             Wed 03 Jun 2026 21:00:12 +0000
ROA not before:           Wed 03 Jun 2026 21:00:12 +0000
ROA not after:            Tue 01 Sep 2026 21:00:12 +0000
asID:                     31898
IP address blocks:        170.114.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0d:84:25:39:f9:d7:10:65:2d:74:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Jun  3 21:00:12 2026 GMT
            Not After : Sep  1 21:00:12 2026 GMT
        Subject: CN=3ab7991a-22b7-4f7c-bb4d-4c7cb416fcc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:00:47:37:a3:f2:24:cb:45:5c:3e:1c:b0:e9:
                    a9:08:da:20:4b:48:76:fc:87:de:93:90:22:7e:e0:
                    77:79:e5:ae:29:3b:d6:b5:8d:be:6c:1d:ac:3f:84:
                    56:01:a5:84:a2:ff:02:e0:ae:7f:70:29:58:b9:96:
                    be:00:d9:f2:2b:5f:0e:4f:c6:b2:7f:91:45:0e:a0:
                    c4:05:6e:00:e3:b6:48:31:12:dd:1d:0f:64:32:49:
                    b0:14:45:45:0f:22:2d:e2:77:74:a6:1c:ca:f7:96:
                    81:66:ef:67:0a:b5:44:bc:5a:ef:d6:59:4d:bc:60:
                    a9:65:e7:4a:e7:7b:2e:dd:d1:85:00:fa:7e:95:f8:
                    85:14:5d:14:19:f6:8e:3d:78:d9:53:01:c8:2b:13:
                    e3:68:b9:71:ac:a9:e5:eb:e2:b8:71:c4:8d:c3:a5:
                    25:69:86:92:30:38:c2:ae:d7:e4:e0:73:c5:8e:18:
                    a8:a6:4f:99:fc:df:cf:17:f6:0b:5b:af:3d:da:7e:
                    0c:b3:4c:95:83:18:12:4f:8f:0c:47:ff:88:f3:f0:
                    89:df:fd:bf:52:20:0c:ae:77:bc:34:c0:7c:ef:db:
                    be:ab:9c:be:87:07:82:8b:0d:dd:2b:c7:f0:83:3e:
                    1f:22:ad:5c:cb:69:07:ce:e5:6e:dd:84:d9:a3:d8:
                    95:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:92:2D:BD:09:11:47:31:6B:28:3D:08:C7:40:33:DC:54:4E:5E:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/df7c5515-0486-333e-8c0d-4be1af31b67f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:08:39:c1:a7:b2:3e:82:0a:64:79:d9:14:fe:f6:34:90:79:
         74:3c:56:4f:a0:95:3c:54:7a:e8:79:0d:d9:0c:6b:a8:97:6b:
         3a:7d:c5:2a:22:da:89:47:59:56:ff:25:f2:66:f9:c9:51:34:
         76:0c:04:8f:04:ad:72:02:18:ad:c7:d9:ef:99:c4:48:ed:a9:
         4c:b0:1e:8a:35:52:e2:4a:15:2d:31:3e:bf:43:1e:52:ae:fb:
         e9:bf:d0:60:b9:77:5d:a0:a0:15:a8:39:3f:42:d2:e6:cb:6c:
         ca:5b:f9:a6:a2:9e:16:a3:96:66:6d:ee:51:d1:df:4a:9b:8c:
         1b:f9:ae:bb:f6:6a:20:d0:d0:2f:90:af:30:bc:18:1c:d8:8a:
         44:06:ac:ab:d2:02:f7:ff:43:8a:e8:29:98:59:b3:d6:bf:66:
         7a:a5:6d:5c:40:0f:d0:dc:9c:ed:79:44:c0:b7:b1:7a:9f:26:
         00:ba:ef:20:bc:14:9c:a6:a0:4e:bc:c1:16:11:6d:ea:6c:24:
         0f:a0:5f:0f:26:ea:57:60:a6:26:4b:70:a1:bb:bf:c9:4a:12:
         34:2c:ad:34:a8:82:ff:b0:b1:61:73:9d:08:4a:cc:75:fc:f6:
         3c:6a:84:cd:55:bd:ad:6c:8d:cd:b7:e2:6c:53:68:ff:7d:b5:
         e6:21:32:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 19:31:17 2026 by rpki-client