Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/40a3da2d-d51c-3714-9f44-526748cc77d7.roa
File:                     40a3da2d-d51c-3714-9f44-526748cc77d7.roa (raw, json)
Hash identifier:          j/cmC1s5Fg5IQ7KOpLgLpajY7Vz6lRJZ3UIbE1IS9zg=
Subject key identifier:   E7:70:C1:7D:EA:9E:68:99:13:E0:5D:91:82:7C:97:6A:27:DC:E1:E4
Certificate issuer:       /CN=e913f922-e9fc-45ee-8396-8a56c0f5bd25
Certificate serial:       010D0C9F4328584D0647A360FD7B7F1C87220980
Authority key identifier: 68:56:3A:04:01:CC:85:41:D9:AE:56:B3:21:0B:FF:86:26:E8:C1:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/40a3da2d-d51c-3714-9f44-526748cc77d7.roa
Signing time:             Sun 01 Mar 2026 14:00:41 +0000
ROA not before:           Sun 01 Mar 2026 14:00:41 +0000
ROA not after:            Sat 30 May 2026 13:00:41 +0000
asID:                     13875
IP address blocks:        204.235.252.0/24 maxlen: 24
                          204.235.253.0/24 maxlen: 24
                          204.235.254.0/24 maxlen: 24
                          204.235.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/e913f922-e9fc-45ee-8396-8a56c0f5bd25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/e913f922-e9fc-45ee-8396-8a56c0f5bd25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:06:47:a3:60:fd:7b:7f:1c:87:22:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e913f922-e9fc-45ee-8396-8a56c0f5bd25
        Validity
            Not Before: Mar  1 14:00:41 2026 GMT
            Not After : May 30 13:00:41 2026 GMT
        Subject: CN=5d94c99c-86f5-4aa1-826d-a22491312168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3d:a5:42:76:1a:1d:55:e1:c9:2b:7c:1f:0c:
                    12:2f:07:50:a3:49:fd:5f:71:ff:72:ba:f3:71:a2:
                    a5:b1:c8:f2:f7:b7:b3:ce:21:14:51:da:ba:d9:dd:
                    38:ec:e7:bd:7d:41:1f:80:44:84:c1:d0:5d:d7:d0:
                    93:61:95:03:41:11:f8:db:56:57:80:69:a6:8d:27:
                    33:32:25:a8:d0:cb:7f:e3:ac:81:6f:8e:35:95:97:
                    6e:c5:64:a1:bf:1b:17:b9:a5:1b:84:a2:5b:f5:ab:
                    32:1a:26:6c:15:49:2b:74:7c:af:49:7e:b2:66:c1:
                    9a:72:1a:68:96:d0:56:e8:35:f3:d7:1b:f4:57:06:
                    d0:e0:27:32:17:02:1a:84:c8:3c:28:cb:3f:32:e7:
                    45:0e:02:be:62:fc:05:af:37:33:e4:5f:7e:4f:66:
                    9d:9c:a6:d1:bd:68:8f:ff:fc:f3:54:8e:67:8d:72:
                    ce:c1:96:89:1d:f9:c0:d6:84:7f:4b:e9:72:ed:db:
                    fb:f5:28:54:8e:81:e1:02:89:dc:e5:07:7a:45:65:
                    78:f4:c1:87:82:5a:24:32:a0:24:c9:48:5c:f4:1e:
                    b4:d2:f3:24:62:92:30:02:77:5a:8c:f0:a5:57:c0:
                    a4:4d:15:9a:69:5b:54:24:e7:fd:59:64:7f:64:65:
                    56:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:70:C1:7D:EA:9E:68:99:13:E0:5D:91:82:7C:97:6A:27:DC:E1:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/40a3da2d-d51c-3714-9f44-526748cc77d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/e913f922-e9fc-45ee-8396-8a56c0f5bd25.crl

            X509v3 Authority Key Identifier:
                keyid:68:56:3A:04:01:CC:85:41:D9:AE:56:B3:21:0B:FF:86:26:E8:C1:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.235.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:f7:97:8e:ed:ca:5d:63:c9:c9:66:51:8b:18:08:22:da:8a:
         4d:5c:33:94:55:bf:5e:95:85:1f:76:f9:15:0c:e7:6d:4d:c5:
         4a:a6:f3:c6:2e:8a:1f:62:61:1c:e8:42:fb:d4:c1:e7:9b:c7:
         f9:11:44:ee:3a:35:25:cb:d4:17:16:49:1f:d9:ad:cb:aa:c6:
         d6:93:ad:d4:ad:a4:05:60:da:01:63:d7:44:68:1c:81:3d:8b:
         dc:b2:54:93:31:d8:99:d1:f7:31:1e:69:e1:50:34:58:af:4d:
         14:92:b1:73:68:33:84:d7:6c:28:49:b7:0d:58:a4:37:71:4d:
         b5:cb:df:6e:56:b4:7b:c1:57:ca:39:a2:b1:88:2b:a8:79:61:
         ca:d9:dd:cf:82:ea:f8:4a:04:d5:dd:66:9a:45:0a:e4:64:04:
         57:8d:cb:8f:d0:f1:39:bb:f6:53:a4:61:48:fa:62:e3:08:22:
         2a:f0:5c:c6:c1:59:b7:9f:d0:57:a8:8d:ea:f9:7a:8c:cb:3a:
         02:df:d0:ad:f8:ad:04:09:83:54:46:7b:45:3b:05:5f:2c:f3:
         9f:9c:16:c2:70:67:23:d9:63:0b:45:e4:79:82:a5:9d:b0:65:
         cb:56:d5:75:f3:37:91:d2:0c:6c:17:50:a6:7f:d3:8b:3c:86:
         5b:0b:de:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:42 2026 by rpki-client