Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/4fc976c2-5932-31ad-b787-eed2d11f5e5d.roa
File:                     4fc976c2-5932-31ad-b787-eed2d11f5e5d.roa (raw, json)
Hash identifier:          8ug9IPLOi69wzofRG8en/50x1LzqKRTM8atNYWSOBj4=
Subject key identifier:   59:FC:58:FC:A9:FD:98:F8:6F:7D:50:FB:19:84:3C:F9:56:9F:3F:1E
Certificate issuer:       /CN=a95fce7e-65c2-466f-ae34-eadb8c72156b
Certificate serial:       010D0C9F4328584C61914230B09CE786BB0E7100
Authority key identifier: 5F:8C:A6:E1:84:0F:A2:FE:BD:8D:DA:83:98:81:21:DF:CB:E0:65:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/4fc976c2-5932-31ad-b787-eed2d11f5e5d.roa
Signing time:             Thu 01 Jan 2026 14:00:38 +0000
ROA not before:           Thu 01 Jan 2026 14:00:38 +0000
ROA not after:            Wed 01 Apr 2026 13:00:38 +0000
asID:                     87
IP address blocks:        129.79.0.0/16 maxlen: 24
                          140.182.0.0/16 maxlen: 16
                          140.182.0.0/19 maxlen: 19
                          149.159.0.0/19 maxlen: 19
                          149.161.0.0/16 maxlen: 16
                          149.161.128.0/17 maxlen: 17
                          149.162.0.0/16 maxlen: 24
                          149.163.0.0/16 maxlen: 24
                          156.56.0.0/16 maxlen: 24
                          198.49.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:61:91:42:30:b0:9c:e7:86:bb:0e:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a95fce7e-65c2-466f-ae34-eadb8c72156b
        Validity
            Not Before: Jan  1 14:00:38 2026 GMT
            Not After : Apr  1 13:00:38 2026 GMT
        Subject: CN=31e032b8-e0d3-46f1-b702-e483c3e9b71c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:34:6c:86:31:bd:1c:db:2d:49:84:3e:6b:d3:
                    c3:6d:f6:bf:03:d8:79:8c:2a:5f:9c:d0:bd:a7:bd:
                    88:39:2c:5e:69:72:97:7f:e9:ce:97:cd:35:76:a4:
                    10:03:f7:4a:83:42:5c:5c:71:4c:91:0c:c8:ed:79:
                    f4:64:2f:cd:d9:60:38:e8:ba:42:d6:70:98:56:14:
                    93:d6:63:46:8a:cc:12:c9:b8:6c:86:4d:62:68:bf:
                    90:34:10:b0:11:70:32:df:9d:8e:7e:ad:2c:e5:b1:
                    e1:bb:1b:77:3d:c6:d1:8f:f4:9f:39:99:76:8d:b7:
                    94:85:74:35:eb:53:bb:98:56:a8:e7:3d:b4:f4:d6:
                    c2:87:d3:0f:36:96:cf:67:2e:73:92:87:37:ea:83:
                    eb:e1:ca:cd:5c:d8:e4:a6:14:87:d8:19:3d:e8:76:
                    49:d1:d9:6c:0f:3e:72:9b:56:7e:2a:9e:8a:92:30:
                    4e:f2:65:9b:ed:42:ba:39:f0:44:b3:da:32:26:00:
                    3f:d0:47:d1:7b:93:c0:10:54:3d:7a:97:96:d4:52:
                    75:95:81:c6:21:88:65:20:2a:e1:ae:df:cc:7b:93:
                    7a:e0:bb:43:a0:75:4e:43:9e:40:4c:f8:ef:41:be:
                    06:df:b2:30:a2:7f:2a:a4:ac:74:17:49:3d:e0:d3:
                    11:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:FC:58:FC:A9:FD:98:F8:6F:7D:50:FB:19:84:3C:F9:56:9F:3F:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/4fc976c2-5932-31ad-b787-eed2d11f5e5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.crl

            X509v3 Authority Key Identifier:
                keyid:5F:8C:A6:E1:84:0F:A2:FE:BD:8D:DA:83:98:81:21:DF:CB:E0:65:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.79.0.0/16
                  140.182.0.0/16
                  149.159.0.0/19
                  149.161.0.0-149.163.255.255
                  156.56.0.0/16
                  198.49.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:78:5d:69:ef:6d:42:af:f1:6e:8f:b9:4d:7e:d7:9b:61:99:
         f4:3e:03:7b:0a:10:bb:6d:19:71:bd:6b:9f:52:c8:3e:86:64:
         58:49:24:27:25:13:72:b4:7e:02:cc:6b:c2:18:5f:dd:6c:bc:
         b6:89:06:86:80:ca:63:c0:72:45:85:8e:7d:06:a4:a9:07:df:
         78:16:2b:3f:26:35:d3:c6:8c:ad:7e:a9:39:08:5f:3d:1d:3f:
         b4:88:35:32:71:b2:40:ce:a9:fa:fc:42:42:bf:ce:61:92:19:
         ac:6f:ab:ea:2f:45:a4:f0:db:2e:33:ee:f1:88:ba:ea:b7:9d:
         ca:5f:04:c5:91:5c:c7:b9:3b:91:da:56:82:70:f4:bb:6f:cd:
         49:e7:fd:91:a0:81:63:fb:35:68:ea:63:43:3e:55:64:37:f4:
         a7:d6:3c:fd:b0:e0:b4:5d:bf:5e:aa:e9:43:b8:3b:81:03:c1:
         69:33:da:d8:f9:9a:16:0c:12:98:6e:dd:eb:4a:6a:8f:ed:96:
         89:f7:9e:4c:22:89:04:f3:d4:98:a4:20:d6:c9:e9:cf:ae:96:
         a2:82:67:db:ff:45:13:9a:05:ec:7d:b5:56:c4:be:ef:40:72:
         33:df:e0:fb:ee:3e:5d:27:a3:9d:51:d7:d7:0d:4f:37:50:73:
         7c:fa:bf:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:38:08 2026 by rpki-client