Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/ea32300b-ee9f-3975-a89c-6ee3af1def4e.roa
File:                     ea32300b-ee9f-3975-a89c-6ee3af1def4e.roa (raw, json)
Hash identifier:          NphdBLmPoFD1uaWXIAudiNMAZmZZYOB/q80sxhPL2TM=
Subject key identifier:   9A:00:41:1C:C9:A8:C3:9E:C3:BC:5C:78:0F:D7:E2:6F:3F:A6:23:84
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F4328584D5CB4FD2CD2B3B8357E756880
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/ea32300b-ee9f-3975-a89c-6ee3af1def4e.roa
Signing time:             Wed 01 Apr 2026 13:00:30 +0000
ROA not before:           Wed 01 Apr 2026 13:00:30 +0000
ROA not after:            Tue 30 Jun 2026 13:00:30 +0000
asID:                     62468
IP address blocks:        107.151.224.0/21 maxlen: 24
                          107.151.232.0/23 maxlen: 24
                          198.44.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5c:b4:fd:2c:d2:b3:b8:35:7e:75:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Apr  1 13:00:30 2026 GMT
            Not After : Jun 30 13:00:30 2026 GMT
        Subject: CN=ea440246-6b86-43df-995c-c31b91379f2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1b:8f:fc:9e:f4:a2:c8:cf:45:87:e7:7d:67:
                    a8:9a:67:f1:8d:b8:b4:b2:ae:06:3a:2f:d1:d2:bc:
                    11:16:ef:13:a2:04:c1:56:82:93:87:ba:0d:7d:79:
                    28:ee:24:cc:7b:02:5b:32:10:05:3c:8c:45:ee:56:
                    a6:95:d5:05:f8:99:f2:6a:ba:af:f7:2c:b9:4e:35:
                    73:65:c4:7b:d4:e0:a4:6e:de:4e:5f:d2:50:0b:c5:
                    74:31:38:31:da:3a:95:f6:28:e7:56:1b:83:5b:9e:
                    19:87:50:bb:eb:51:ce:8c:2c:26:69:74:55:f3:a7:
                    25:88:b2:93:d7:71:07:12:4b:7c:fc:75:5c:46:f4:
                    10:a2:91:4c:2a:e3:e8:8b:a9:be:82:cb:1c:97:93:
                    06:18:6f:44:ae:99:5c:2f:1d:c1:80:0c:74:a3:f7:
                    cb:95:f7:d0:54:e6:99:0c:aa:1a:17:03:ab:00:4e:
                    9a:e2:81:2b:fe:f6:e3:a4:6f:8c:33:fb:8f:85:40:
                    a4:c2:e1:f9:86:12:25:77:c7:ad:1d:bb:41:0c:83:
                    60:7b:50:5c:bc:51:aa:c6:47:8d:b7:60:2e:91:7e:
                    e1:fc:75:f8:f8:a9:05:92:09:c0:33:a0:2a:d2:15:
                    b1:98:e1:12:9d:bc:9f:c6:f5:b4:0f:e9:3a:cd:45:
                    10:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:00:41:1C:C9:A8:C3:9E:C3:BC:5C:78:0F:D7:E2:6F:3F:A6:23:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/ea32300b-ee9f-3975-a89c-6ee3af1def4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.151.224.0-107.151.233.255
                  198.44.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:a7:de:09:cc:ba:e8:7c:bc:a5:dc:0a:83:f3:d0:27:0c:fc:
         05:d4:a7:ab:e4:8d:d8:c3:5e:30:f9:f6:25:e1:0a:48:3d:73:
         c0:3c:20:18:4e:0b:03:71:0e:21:df:e3:96:cc:6f:5a:1d:cc:
         ae:fb:a6:77:0e:e2:87:41:f7:d4:3a:05:4b:16:96:70:56:f0:
         1c:56:1d:96:41:e5:19:13:f0:76:05:0e:6d:3c:fe:c2:a8:0f:
         10:70:0e:47:4d:d5:81:6e:ad:eb:7f:e9:d9:30:46:09:2a:b4:
         30:b9:2f:05:36:0f:c9:89:5d:db:cb:d8:58:da:93:09:24:bf:
         8a:f3:d4:c5:27:23:e5:39:a6:00:ad:b3:13:ea:d7:5b:dc:fc:
         69:e6:85:eb:37:fd:d8:49:c6:36:91:24:32:f4:a4:b5:cd:f4:
         18:fd:30:71:10:07:bc:a0:41:24:b1:5b:65:16:d7:59:31:fb:
         f8:4a:f3:11:0e:86:54:eb:98:04:d5:51:5c:76:be:0a:d9:f1:
         4c:d8:e9:8a:cf:79:50:8c:88:3d:75:db:57:80:2a:6d:be:14:
         97:ae:23:64:8b:f2:37:58:a8:14:67:f6:1b:1f:02:ea:da:5d:
         ef:98:13:be:6f:a8:78:8e:4d:50:3b:98:f0:17:bf:b8:1e:62:
         03:54:e2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:17:07 2026 by rpki-client