Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0283679c-8839-42d6-90a3-4215f8491683/4c04743b-9968-3403-b6a2-8a262f9ce224.roa
File:                     4c04743b-9968-3403-b6a2-8a262f9ce224.roa (raw, json)
Hash identifier:          ttn+sA0WMUjO57r2HE467JEuowGaRIVjo9Zv07m6zkM=
Subject key identifier:   F5:F9:79:2F:47:B8:AD:FE:19:17:FE:2D:E9:09:30:F1:40:BA:CC:3F
Certificate issuer:       /CN=0283679c-8839-42d6-90a3-4215f8491683
Certificate serial:       010D0C9F4328584D71A52597C0058C7379AD7880
Authority key identifier: 8E:5C:00:A8:45:BF:21:F2:91:4C:77:1E:8C:F2:46:CF:B8:23:6D:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0283679c-8839-42d6-90a3-4215f8491683.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0283679c-8839-42d6-90a3-4215f8491683/4c04743b-9968-3403-b6a2-8a262f9ce224.roa
Signing time:             Thu 09 Apr 2026 01:00:23 +0000
ROA not before:           Thu 09 Apr 2026 01:00:23 +0000
ROA not after:            Wed 08 Jul 2026 01:00:23 +0000
asID:                     33494
IP address blocks:        67.222.96.0/20 maxlen: 24
                          72.34.32.0/19 maxlen: 19
                          162.219.248.0/22 maxlen: 22
                          192.40.112.0/22 maxlen: 22
                          192.69.235.0/24 maxlen: 24
                          2606:5600::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0283679c-8839-42d6-90a3-4215f8491683/0283679c-8839-42d6-90a3-4215f8491683.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0283679c-8839-42d6-90a3-4215f8491683/0283679c-8839-42d6-90a3-4215f8491683.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0283679c-8839-42d6-90a3-4215f8491683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:71:a5:25:97:c0:05:8c:73:79:ad:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0283679c-8839-42d6-90a3-4215f8491683
        Validity
            Not Before: Apr  9 01:00:23 2026 GMT
            Not After : Jul  8 01:00:23 2026 GMT
        Subject: CN=4ad45dbd-5f43-4433-b797-ea35ff02d41c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8b:e9:23:9b:97:0f:27:e3:55:f6:00:79:8e:
                    d4:4e:58:7e:41:1b:0d:47:7a:e6:6f:b1:74:e9:44:
                    0f:c1:42:2d:b5:48:1a:3c:0b:53:3d:54:19:03:16:
                    aa:49:1d:0b:fc:84:e6:37:dd:54:ac:7b:61:a1:8c:
                    ba:4a:ec:80:1f:a5:bd:cd:c8:84:3e:1b:86:61:a9:
                    54:22:34:ed:80:07:39:5d:41:70:b1:bd:12:3a:7e:
                    2b:71:b5:80:15:4d:fc:23:86:ed:f7:5c:82:ae:93:
                    e3:4e:76:ab:8d:a9:1b:bd:1d:80:4d:4c:cd:8f:11:
                    aa:0c:7a:0f:48:9f:a3:51:e3:76:f3:2e:d9:ac:66:
                    7b:6c:8e:94:d7:ad:b5:a2:d5:47:21:3f:ca:c8:af:
                    cc:8a:0d:9e:59:41:c8:d2:5d:fa:ae:46:69:2b:eb:
                    34:e9:b5:72:ee:73:8e:8f:7f:9c:51:b4:6f:5b:9b:
                    dd:20:39:0b:c1:a4:a7:09:8c:8f:0a:a1:97:40:2e:
                    05:c2:5e:38:a9:a7:19:1c:2a:a7:81:e5:4c:47:cf:
                    96:ff:51:e0:73:82:89:f3:63:45:9f:f6:d6:24:e7:
                    9f:fe:64:54:17:44:6e:d7:e9:8f:b1:dc:43:98:3d:
                    61:15:02:e0:4d:69:f3:ea:b5:dc:f2:14:b0:f9:55:
                    2a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F9:79:2F:47:B8:AD:FE:19:17:FE:2D:E9:09:30:F1:40:BA:CC:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0283679c-8839-42d6-90a3-4215f8491683/4c04743b-9968-3403-b6a2-8a262f9ce224.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0283679c-8839-42d6-90a3-4215f8491683/0283679c-8839-42d6-90a3-4215f8491683.crl

            X509v3 Authority Key Identifier:
                keyid:8E:5C:00:A8:45:BF:21:F2:91:4C:77:1E:8C:F2:46:CF:B8:23:6D:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0283679c-8839-42d6-90a3-4215f8491683.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.222.96.0/20
                  72.34.32.0/19
                  162.219.248.0/22
                  192.40.112.0/22
                  192.69.235.0/24
                IPv6:
                  2606:5600::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:4f:8d:02:26:13:af:53:f6:ce:82:8f:fa:a9:be:d1:a6:ee:
         05:c1:17:2a:ec:97:b2:40:c6:5c:14:2a:0b:d2:f6:92:e8:32:
         b9:ed:03:b1:3b:5a:8b:29:f4:39:95:06:11:18:21:ec:25:46:
         17:1f:46:e1:a8:d6:49:14:f5:cf:4a:8b:ba:08:1c:7f:f4:87:
         ad:37:4c:7f:d9:c0:20:9b:2b:b8:1e:15:34:70:22:72:7a:b1:
         28:2a:e3:e2:be:06:d7:40:aa:14:e9:cb:bd:87:88:c2:c3:fc:
         bf:b7:b7:e4:ba:5c:aa:1d:8b:9c:16:fb:26:d9:14:fc:cd:80:
         26:7e:24:ad:aa:d2:cb:e4:87:4a:8f:54:4c:8a:4b:59:a4:62:
         d2:14:24:a6:f4:d6:f1:86:dc:08:c2:28:ce:4d:61:2b:fd:ca:
         8d:13:92:5e:02:75:41:ce:af:4b:b6:b8:73:f6:18:96:34:9b:
         0f:80:6c:cd:54:20:f9:6c:23:a3:07:06:3e:cd:4d:05:2c:06:
         b2:fd:01:fb:ce:cb:c5:da:7f:c2:29:ce:38:db:e0:f6:31:02:
         f9:98:6d:82:f2:4d:e5:89:93:ac:a6:78:4b:0e:26:50:ed:db:
         8c:3e:4b:24:75:bf:a6:6f:d7:f4:83:0e:07:1f:80:18:8f:0f:
         26:72:2c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:03:51 2026 by rpki-client