Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db08c0ba-423d-4547-9dee-8ed97f061fff/f463439c-3a81-3b1f-a980-d032e5fb89be.roa
File:                     f463439c-3a81-3b1f-a980-d032e5fb89be.roa (raw, json)
Hash identifier:          HhZwy3hY9ze/SJqpLStPoO62HcChxsjVEY1CASzzEQI=
Subject key identifier:   72:02:4E:74:87:E2:FC:3F:F9:C9:66:BC:13:8B:78:A5:00:93:A6:CB
Certificate issuer:       /CN=db08c0ba-423d-4547-9dee-8ed97f061fff
Certificate serial:       010D0C9F4328584CCFD73579872ED28649C66600
Authority key identifier: 55:07:FA:15:4C:2D:07:5F:22:A7:A7:AD:94:D7:53:B9:EF:E2:B3:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db08c0ba-423d-4547-9dee-8ed97f061fff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db08c0ba-423d-4547-9dee-8ed97f061fff/f463439c-3a81-3b1f-a980-d032e5fb89be.roa
Signing time:             Tue 10 Feb 2026 02:00:31 +0000
ROA not before:           Tue 10 Feb 2026 02:00:31 +0000
ROA not after:            Mon 11 May 2026 01:00:31 +0000
asID:                     400268
IP address blocks:        66.129.32.0/21 maxlen: 24
                          140.106.32.0/20 maxlen: 24
                          152.55.128.0/20 maxlen: 24
                          160.79.96.0/21 maxlen: 24
                          2606:79c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db08c0ba-423d-4547-9dee-8ed97f061fff/db08c0ba-423d-4547-9dee-8ed97f061fff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db08c0ba-423d-4547-9dee-8ed97f061fff/db08c0ba-423d-4547-9dee-8ed97f061fff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db08c0ba-423d-4547-9dee-8ed97f061fff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cf:d7:35:79:87:2e:d2:86:49:c6:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db08c0ba-423d-4547-9dee-8ed97f061fff
        Validity
            Not Before: Feb 10 02:00:31 2026 GMT
            Not After : May 11 01:00:31 2026 GMT
        Subject: CN=e4987c1c-5319-4e9f-8bc0-676ff3378cd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:36:9c:be:a1:e2:1c:3a:5c:81:fe:2a:20:1e:
                    c0:cd:94:54:0f:db:b0:5c:2a:52:9d:44:56:10:b7:
                    fb:ca:c9:9e:33:66:9f:08:d4:d9:e8:20:a6:ff:da:
                    90:e3:06:f0:34:bf:58:69:b3:77:14:ef:6c:ce:6c:
                    da:3c:80:a7:ee:4d:64:ca:0c:45:9f:b7:0c:93:36:
                    4c:57:46:72:32:f8:c9:b3:c0:81:16:ec:7e:83:66:
                    44:14:62:63:6b:90:24:48:99:e4:4b:3b:38:77:cd:
                    ed:a4:be:4c:8a:46:c6:c3:c3:12:e0:6a:03:33:6f:
                    f5:2f:75:42:cd:4b:73:af:b3:a1:f1:8a:7f:30:20:
                    71:88:3b:61:b9:ef:6e:0d:1d:77:60:8d:86:c0:93:
                    a2:00:56:39:ed:8d:3f:ed:49:d3:de:a3:db:d5:81:
                    2d:c5:b1:20:2e:bd:fc:45:42:c3:e3:d0:03:ca:25:
                    fe:a5:6f:67:b5:b3:bb:6a:78:07:6a:72:ef:e6:03:
                    12:71:65:25:1a:91:c3:94:6b:50:a2:19:98:06:71:
                    76:34:0b:63:af:dd:b7:e2:2c:49:b3:fc:de:9f:1e:
                    84:ad:c3:88:29:87:89:93:76:2f:ef:0b:98:72:57:
                    b6:fd:bc:c9:80:87:18:d2:07:d1:1c:31:c5:85:09:
                    f2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:02:4E:74:87:E2:FC:3F:F9:C9:66:BC:13:8B:78:A5:00:93:A6:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db08c0ba-423d-4547-9dee-8ed97f061fff/f463439c-3a81-3b1f-a980-d032e5fb89be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db08c0ba-423d-4547-9dee-8ed97f061fff/db08c0ba-423d-4547-9dee-8ed97f061fff.crl

            X509v3 Authority Key Identifier:
                keyid:55:07:FA:15:4C:2D:07:5F:22:A7:A7:AD:94:D7:53:B9:EF:E2:B3:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db08c0ba-423d-4547-9dee-8ed97f061fff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.129.32.0/21
                  140.106.32.0/20
                  152.55.128.0/20
                  160.79.96.0/21
                IPv6:
                  2606:79c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:75:65:53:91:3a:18:4d:8c:f8:e6:01:f2:49:09:7c:33:37:
         8b:13:38:f9:fb:b0:7e:82:60:30:6c:30:97:ec:da:37:14:49:
         25:9f:4e:ca:c1:15:51:41:3e:48:77:35:39:63:68:1d:d6:7e:
         3f:49:9b:a5:b0:74:e9:14:0d:f8:0d:6f:28:c2:1b:66:07:eb:
         30:6d:43:e5:03:9c:65:10:3e:48:14:f8:f6:c9:0f:57:db:7c:
         95:e4:38:97:5b:47:2e:da:78:5f:40:cd:0c:8a:d1:f7:11:0a:
         e6:29:d8:50:cc:46:01:70:6e:05:3b:3c:22:61:1c:63:22:27:
         4b:fd:5e:95:a5:47:32:5e:be:30:58:e0:6b:d0:02:aa:3a:a2:
         50:ff:d9:9a:f1:0f:9e:8d:a4:b8:bd:2f:95:06:37:8c:8c:d6:
         be:b2:a5:97:05:bd:f8:1a:0a:c5:09:79:77:0e:2d:30:39:0b:
         e6:e8:ea:aa:a8:99:8b:5a:60:4b:26:c3:0e:11:5d:01:93:64:
         b9:61:a5:f7:83:eb:6e:30:9a:26:ce:81:53:4e:7e:5c:a4:25:
         d0:80:85:56:df:8f:72:ac:e5:e3:9a:d4:21:2c:2d:6d:39:59:
         27:54:67:5a:21:bc:13:e7:8e:85:bb:02:cb:60:79:34:7e:b7:
         f7:85:dc:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:16:09 2026 by rpki-client