Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f/791de0f2-89d2-3bf0-8407-e85b17cab367.roa
File:                     791de0f2-89d2-3bf0-8407-e85b17cab367.roa (raw, json)
Hash identifier:          Vo2ioT6ZbPvHLPfeU25hxB2GtJ40JCSvT/HY/420ss4=
Subject key identifier:   B4:EC:A1:15:E4:4D:7C:E3:85:05:F3:D6:C0:AB:91:D0:F2:1E:A0:74
Certificate issuer:       /CN=d84f9350-fc3d-4239-80bf-db10d2462a4f
Certificate serial:       010D0C9F4328584D869546077D12224E3119CD00
Authority key identifier: 67:1A:F9:23:95:54:C1:F6:41:95:0B:3E:7C:11:DF:22:5A:28:90:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f/791de0f2-89d2-3bf0-8407-e85b17cab367.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     16545
IP address blocks:        192.74.220.0/22 maxlen: 24
                          2602:ff80::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f/d84f9350-fc3d-4239-80bf-db10d2462a4f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f/d84f9350-fc3d-4239-80bf-db10d2462a4f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:46:07:7d:12:22:4e:31:19:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d84f9350-fc3d-4239-80bf-db10d2462a4f
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=dad850e5-28f6-4de3-9527-7a2f057507f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:59:cc:87:ba:d2:8d:c5:8b:53:de:70:3b:0e:
                    4b:fd:2e:ea:fb:38:75:96:2f:b0:38:12:85:4e:6a:
                    7d:21:8d:73:dd:a5:a5:67:71:3b:4c:d2:e4:6b:ff:
                    4f:c1:1a:9f:7a:a9:f6:85:37:34:b9:2d:26:40:a1:
                    57:6f:bd:47:62:6b:8c:40:dc:0c:47:e4:0a:3d:4f:
                    9f:b4:ee:60:42:cf:7b:3d:99:0f:c1:7e:1b:3c:2c:
                    82:ab:14:68:50:ea:39:12:c6:bd:c9:87:a3:79:d3:
                    fc:f2:56:7b:dc:e6:84:88:b1:91:25:9b:a2:dc:a6:
                    27:bf:6b:ca:24:ee:ad:e1:fd:b8:17:af:3a:0f:d1:
                    e9:15:f5:9a:0d:71:a0:ce:cf:87:59:9a:2a:30:81:
                    50:4b:20:c2:89:0b:fa:63:00:15:22:ac:03:43:a0:
                    d1:05:b1:ca:c5:f4:23:5e:7a:3d:6e:f7:13:26:34:
                    65:36:5b:e3:34:f1:3c:d5:f1:2f:d5:26:7f:0a:4d:
                    86:a0:ea:86:bc:0c:46:f3:b6:38:22:c5:c4:21:36:
                    b4:ab:bd:93:38:2f:cc:91:84:77:58:dc:69:46:3f:
                    d8:f9:3e:28:1d:89:60:9e:39:03:0f:e9:a2:b8:70:
                    cb:72:28:4e:ce:85:48:53:f6:37:d9:d2:8d:05:2e:
                    a4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:EC:A1:15:E4:4D:7C:E3:85:05:F3:D6:C0:AB:91:D0:F2:1E:A0:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f/791de0f2-89d2-3bf0-8407-e85b17cab367.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f/d84f9350-fc3d-4239-80bf-db10d2462a4f.crl

            X509v3 Authority Key Identifier:
                keyid:67:1A:F9:23:95:54:C1:F6:41:95:0B:3E:7C:11:DF:22:5A:28:90:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.74.220.0/22
                IPv6:
                  2602:ff80::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:29:29:0d:9c:df:55:3e:f7:64:9b:ee:c4:05:ab:9f:c1:3e:
         3c:6b:ca:d1:cb:06:b0:bd:e5:5c:f7:b4:80:b2:a2:f7:23:aa:
         9e:e9:d4:7a:03:e0:13:21:90:e3:ae:ca:26:ea:f8:af:1a:b2:
         df:59:ef:7d:d5:4b:d4:7e:31:ba:af:a8:59:07:d7:95:89:32:
         7a:dd:f6:e0:85:ae:62:d1:e9:5a:c5:64:07:b5:2f:dc:ec:3f:
         fb:7d:42:3a:dc:50:cf:77:2b:eb:b0:af:e1:a2:13:45:b6:37:
         ed:64:9f:59:c8:1a:fb:4e:75:b0:76:aa:0b:cc:65:c2:ac:f6:
         00:53:95:7b:53:dc:0a:df:b9:0a:99:00:18:55:3f:86:80:45:
         80:f2:86:1f:a3:b3:4b:04:da:2e:ac:84:a4:d9:fc:a9:32:c7:
         82:bf:17:af:83:fb:0f:fa:d0:db:1d:84:2a:ea:48:86:7d:67:
         cc:c1:b9:30:b3:2e:30:67:4f:1a:ee:ef:2a:c7:47:3e:d0:71:
         54:a9:2e:06:e7:f2:bc:03:15:76:1e:66:06:44:8a:41:c1:75:
         f3:8a:f9:ac:bd:2a:11:90:9b:71:24:e3:78:7d:ab:00:b1:a4:
         4d:ed:46:c4:7f:8c:72:00:70:e7:66:e2:d1:50:c0:0a:34:24:
         fe:fe:02:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:40:40 2026 by rpki-client