Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/7206b8e5-96b0-3b78-a114-38b6e087b13c.roa
File:                     7206b8e5-96b0-3b78-a114-38b6e087b13c.roa (raw, json)
Hash identifier:          y6S15EGJYfpuRcxr3J2QGP3/bZwefh9wJ+zLbFCcAdk=
Subject key identifier:   3B:49:36:A8:FC:48:1F:2C:FF:58:37:8F:1D:01:7D:6D:96:8D:A7:3D
Certificate issuer:       /CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
Certificate serial:       010D0C9F4328584D86957A74CDD45FD5779C68C0
Authority key identifier: 8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/7206b8e5-96b0-3b78-a114-38b6e087b13c.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     3842
IP address blocks:        107.191.96.0/22 maxlen: 24
                          107.191.108.0/22 maxlen: 24
                          168.235.64.0/22 maxlen: 24
                          168.235.68.0/22 maxlen: 24
                          168.235.80.0/22 maxlen: 24
                          168.235.88.0/22 maxlen: 24
                          168.235.100.0/22 maxlen: 24
                          168.235.108.0/22 maxlen: 24
                          2604:180:2::/48 maxlen: 48
                          2604:180:9::/48 maxlen: 48
                          2604:180:c::/48 maxlen: 48
                          2604:180:f3::/48 maxlen: 48
                          2604:180:f7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:7a:74:cd:d4:5f:d5:77:9c:68:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=4c9225e4-a1a4-494c-9312-6eb38df5ec3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:78:6e:21:00:45:d0:8e:fe:3b:40:b3:ff:c4:
                    51:79:93:8e:66:4b:ea:e1:34:36:52:78:30:6a:06:
                    03:56:8d:4e:c8:c4:e5:29:8f:c6:d9:d0:b1:a9:65:
                    27:1a:7f:2b:1e:22:0e:fc:b5:a9:b9:8f:e5:36:11:
                    8b:b1:b7:97:d2:87:81:ba:5b:48:91:48:6f:35:23:
                    fc:50:78:9c:3a:3a:0b:0f:30:b1:03:55:7a:69:10:
                    bc:70:f3:d0:ca:6b:35:46:d1:99:c5:f8:b2:c0:fd:
                    a1:fc:f1:66:59:84:7e:30:30:ae:9b:1d:79:c3:40:
                    65:05:03:94:d4:03:bf:3d:07:b9:1e:29:66:ad:99:
                    74:62:29:f9:8c:9e:84:be:25:a9:68:81:ab:7a:ad:
                    46:3a:a0:be:b2:bd:3e:d6:82:78:a0:c6:18:34:6e:
                    49:ca:d5:78:9a:e5:8b:f0:e4:3b:e1:d7:b9:1f:58:
                    1d:62:30:5f:9b:a1:66:d9:4b:d2:c1:aa:15:66:20:
                    5b:b3:c4:c8:be:bf:99:b8:00:fd:4a:64:9e:40:ab:
                    ff:99:89:9d:54:49:0d:7e:b8:5a:b0:6d:e5:1f:3a:
                    92:5f:88:4f:9f:39:8f:14:43:d2:a7:d3:26:5c:e2:
                    f7:bd:6e:a8:91:84:f5:86:b3:e7:5f:99:dd:1e:61:
                    41:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:49:36:A8:FC:48:1F:2C:FF:58:37:8F:1D:01:7D:6D:96:8D:A7:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/7206b8e5-96b0-3b78-a114-38b6e087b13c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl

            X509v3 Authority Key Identifier:
                keyid:8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.191.96.0/22
                  107.191.108.0/22
                  168.235.64.0/21
                  168.235.80.0/22
                  168.235.88.0/22
                  168.235.100.0/22
                  168.235.108.0/22
                IPv6:
                  2604:180:2::/48
                  2604:180:9::/48
                  2604:180:c::/48
                  2604:180:f3::/48
                  2604:180:f7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:6d:a3:73:19:26:4e:7e:e5:c7:e1:6e:e8:d4:f2:ce:b5:c7:
         3a:19:a0:b2:4c:74:04:08:bf:5b:9a:85:46:96:fe:d1:cf:74:
         7d:a6:7c:57:d2:b2:b6:15:72:9d:30:67:4b:51:9b:9b:6e:48:
         d8:60:bb:fa:a5:6d:17:01:f7:86:b9:58:7d:0f:6c:b8:09:3a:
         49:13:6f:44:23:d7:fb:55:8c:60:2e:b5:99:23:e7:a3:d7:dd:
         46:15:6f:25:68:0a:ec:83:e6:e8:33:52:7a:3c:4a:33:b7:d4:
         d5:af:2f:01:2c:00:f2:82:5f:7e:9f:fa:cf:bd:f8:8d:c4:fb:
         15:41:cd:ae:29:4d:12:3b:19:64:b0:b7:61:52:42:1f:d4:b3:
         2b:17:bb:cc:0d:42:d8:de:21:a0:5a:be:8b:82:12:14:81:19:
         04:56:f2:61:76:78:7e:77:cc:06:ce:8d:29:1b:2a:98:db:cd:
         f3:30:46:17:e8:19:48:cc:8b:8c:e0:cd:f6:a0:c1:7c:65:5e:
         4c:d0:2d:c9:2d:78:84:8f:62:c3:ad:33:c0:f9:24:84:b6:2d:
         08:09:47:10:fc:27:8c:aa:ec:63:dd:93:f4:c0:a1:41:e1:d0:
         3f:cb:b7:53:00:2d:dd:7a:0a:d0:bb:a2:bf:34:2c:17:a9:5a:
         24:2a:22:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:04:45 2026 by rpki-client