Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/d65d0f2b-be61-336f-8fc0-c38fcb1a1c10.roa
File:                     d65d0f2b-be61-336f-8fc0-c38fcb1a1c10.roa (raw, json)
Hash identifier:          67vUc0wMevmPcw7UFDyFm8Z9DP209yhfoAzo1jiXjac=
Subject key identifier:   F0:5C:8E:5F:40:55:0D:02:AC:6B:48:0C:2E:8F:D0:A5:F2:B5:62:F7
Certificate issuer:       /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Certificate serial:       010D0C9F4328584CF8523F76A5CC4A90950F6230
Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/d65d0f2b-be61-336f-8fc0-c38fcb1a1c10.roa
Signing time:             Tue 24 Feb 2026 14:00:41 +0000
ROA not before:           Tue 24 Feb 2026 14:00:41 +0000
ROA not after:            Mon 25 May 2026 13:00:41 +0000
asID:                     36007
IP address blocks:        52.144.45.0/24 maxlen: 24
                          52.144.46.0/24 maxlen: 24
                          52.144.47.0/24 maxlen: 24
                          78.138.0.0/24 maxlen: 24
                          78.138.31.0/24 maxlen: 24
                          83.229.3.0/24 maxlen: 24
                          83.229.39.0/24 maxlen: 24
                          83.229.67.0/24 maxlen: 24
                          83.229.112.0/24 maxlen: 24
                          83.229.115.0/24 maxlen: 24
                          103.54.57.0/24 maxlen: 24
                          103.54.58.0/24 maxlen: 24
                          103.89.12.0/24 maxlen: 24
                          103.89.13.0/24 maxlen: 24
                          103.90.160.0/24 maxlen: 24
                          103.90.161.0/24 maxlen: 24
                          103.90.162.0/24 maxlen: 24
                          103.90.163.0/24 maxlen: 24
                          104.128.64.0/24 maxlen: 24
                          104.128.65.0/24 maxlen: 24
                          104.238.214.0/24 maxlen: 24
                          104.238.215.0/24 maxlen: 24
                          138.128.240.0/24 maxlen: 24
                          138.128.241.0/24 maxlen: 24
                          138.128.247.0/24 maxlen: 24
                          147.185.238.0/24 maxlen: 24
                          147.185.239.0/24 maxlen: 24
                          194.113.194.0/24 maxlen: 24
                          194.113.195.0/24 maxlen: 24
                          194.113.210.0/24 maxlen: 24
                          194.113.211.0/24 maxlen: 24
                          195.88.24.0/24 maxlen: 24
                          195.88.25.0/24 maxlen: 24
                          195.88.56.0/24 maxlen: 24
                          195.88.57.0/24 maxlen: 24
                          198.22.162.0/24 maxlen: 24
                          199.19.72.0/24 maxlen: 24
                          199.19.73.0/24 maxlen: 24
                          199.19.75.0/24 maxlen: 24
                          199.244.48.0/24 maxlen: 24
                          199.244.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f8:52:3f:76:a5:cc:4a:90:95:0f:62:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
        Validity
            Not Before: Feb 24 14:00:41 2026 GMT
            Not After : May 25 13:00:41 2026 GMT
        Subject: CN=766cc379-8284-4009-8f94-c3172c2603ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:09:10:d2:aa:f3:8d:c3:e3:d4:fc:96:5c:ab:
                    0f:f5:18:e4:e2:33:98:10:39:ed:b7:3a:07:dd:06:
                    49:52:4a:47:25:c9:54:f4:dd:c5:aa:f2:47:0e:31:
                    05:dd:0c:17:ce:e5:b3:6e:0d:54:32:f8:f2:d4:4b:
                    e9:e6:15:f0:5c:e9:74:55:d2:e1:9f:5d:ea:20:f0:
                    48:3c:c3:72:21:5d:3b:0a:78:08:a5:34:2c:38:be:
                    4c:48:36:12:12:5d:50:71:77:dd:8a:e9:a7:5a:41:
                    8b:fa:21:1c:f6:52:30:8f:38:5e:1d:46:16:3d:da:
                    04:72:3f:82:57:a9:d7:e7:61:f5:fd:6d:5e:7a:de:
                    53:80:7e:dd:7e:3d:19:d8:3a:44:78:93:ba:b9:80:
                    a1:10:9b:93:a8:eb:99:09:e4:5f:bb:04:bc:af:ea:
                    05:a5:72:48:b1:2d:0e:45:61:2b:21:f0:36:47:21:
                    00:7f:31:1e:06:d5:71:be:9d:b0:b9:81:74:fa:a9:
                    f5:5a:e2:ad:52:fb:aa:a8:22:b8:84:50:c2:ad:07:
                    4b:20:c1:30:00:2b:d8:ec:73:48:80:b8:18:80:cd:
                    9b:96:df:e8:14:89:f3:69:d6:0e:0b:2a:55:fa:c3:
                    4f:e8:d5:55:49:5b:5d:84:94:2f:8b:0b:f6:cb:16:
                    98:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:5C:8E:5F:40:55:0D:02:AC:6B:48:0C:2E:8F:D0:A5:F2:B5:62:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/d65d0f2b-be61-336f-8fc0-c38fcb1a1c10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.144.45.0-52.144.47.255
                  78.138.0.0/24
                  78.138.31.0/24
                  83.229.3.0/24
                  83.229.39.0/24
                  83.229.67.0/24
                  83.229.112.0/24
                  83.229.115.0/24
                  103.54.57.0-103.54.58.255
                  103.89.12.0/23
                  103.90.160.0/22
                  104.128.64.0/23
                  104.238.214.0/23
                  138.128.240.0/23
                  138.128.247.0/24
                  147.185.238.0/23
                  194.113.194.0/23
                  194.113.210.0/23
                  195.88.24.0/23
                  195.88.56.0/23
                  198.22.162.0/24
                  199.19.72.0/23
                  199.19.75.0/24
                  199.244.48.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:a4:78:47:de:7c:43:92:15:f3:9f:36:11:62:3d:df:d7:0c:
         8e:52:d5:96:9b:5a:e6:29:5e:b1:5e:50:c7:a2:f2:32:c4:17:
         ed:97:2f:74:f0:17:04:b4:d0:1a:2b:32:02:ac:a3:b3:dc:b3:
         71:5c:5f:79:47:ce:23:b4:59:3d:a4:2b:84:4b:ad:71:4b:b9:
         28:cf:a6:ce:ad:9e:80:3c:6f:9c:15:7d:9f:d9:d4:7d:bb:26:
         1d:23:62:ca:cd:45:79:c0:43:b3:e0:6f:af:e1:03:95:24:fd:
         b3:13:11:f5:5d:92:00:b2:f2:01:6d:fd:c1:d5:df:c0:e3:37:
         0c:af:c2:cd:cf:0b:84:55:37:53:db:2a:90:57:f0:42:3b:01:
         70:ab:d1:3a:86:72:16:54:03:0e:c0:0c:be:3a:fb:0c:b8:11:
         e7:22:28:15:bf:d4:d2:38:97:2a:9f:29:64:07:01:1e:1d:29:
         83:f1:5e:62:c9:84:98:46:a1:f5:90:d0:88:92:5e:89:3d:72:
         75:61:0a:b6:a6:91:32:3c:58:65:7b:b6:69:cb:a5:e7:ca:ca:
         ae:12:79:15:6b:45:81:f1:ba:d3:9d:72:bd:99:0a:73:71:cd:
         c6:1e:69:9f:c8:9e:c7:b9:71:af:6a:20:40:38:88:0f:c1:25:
         f4:72:7f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:14:22 2026 by rpki-client