Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/bd87b42a-cb7c-39c4-8fda-3f3a8fc69336.roa
File:                     bd87b42a-cb7c-39c4-8fda-3f3a8fc69336.roa (raw, json)
Hash identifier:          4h/qpHS3RNwgQ84PyCJLxezEq4EIpI2cTibnxrF/KQQ=
Subject key identifier:   0A:59:7C:E1:8F:48:B4:39:D2:9E:02:A5:BB:FA:45:0D:17:B1:18:8C
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F4328584CD13CAABC75482E63EB0FD808
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/bd87b42a-cb7c-39c4-8fda-3f3a8fc69336.roa
Signing time:             Tue 10 Feb 2026 14:00:41 +0000
ROA not before:           Tue 10 Feb 2026 14:00:41 +0000
ROA not after:            Mon 11 May 2026 13:00:41 +0000
asID:                     10397
IP address blocks:        162.244.96.0/24 maxlen: 24
                          162.244.97.0/24 maxlen: 24
                          162.244.98.0/24 maxlen: 24
                          162.244.99.0/24 maxlen: 24
                          162.244.100.0/24 maxlen: 24
                          162.244.101.0/24 maxlen: 24
                          204.16.48.0/24 maxlen: 24
                          208.67.12.0/24 maxlen: 24
                          208.67.13.0/24 maxlen: 24
                          208.67.14.0/24 maxlen: 24
                          208.67.15.0/24 maxlen: 24
                          208.85.128.0/24 maxlen: 24
                          208.85.133.0/24 maxlen: 24
                          208.85.134.0/24 maxlen: 24
                          208.85.135.0/24 maxlen: 24
                          209.42.166.0/24 maxlen: 24
                          209.42.191.0/24 maxlen: 24
                          209.209.128.0/21 maxlen: 21
                          209.209.139.0/24 maxlen: 24
                          209.209.140.0/22 maxlen: 22
                          209.209.141.0/24 maxlen: 24
                          209.209.144.0/20 maxlen: 20
                          209.209.160.0/20 maxlen: 20
                          209.209.163.0/24 maxlen: 24
                          209.209.167.0/24 maxlen: 24
                          209.209.176.0/22 maxlen: 22
                          209.209.180.0/23 maxlen: 23
                          209.209.181.0/24 maxlen: 24
                          209.209.183.0/24 maxlen: 24
                          209.209.184.0/24 maxlen: 24
                          209.209.186.0/23 maxlen: 23
                          209.209.189.0/24 maxlen: 24
                          209.209.190.0/23 maxlen: 23
                          209.250.32.0/19 maxlen: 19
                          2607:b600::/48 maxlen: 48
                          2607:b600:1::/48 maxlen: 48
                          2607:b600:2::/48 maxlen: 48
                          2607:b600:4::/48 maxlen: 48
                          2607:b600:5::/48 maxlen: 48
                          2607:b600:6::/48 maxlen: 48
                          2607:b600:8::/48 maxlen: 48
                          2607:b600:10::/48 maxlen: 48
                          2607:b600:12::/48 maxlen: 48
                          2607:b600:13::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d1:3c:aa:bc:75:48:2e:63:eb:0f:d8:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: Feb 10 14:00:41 2026 GMT
            Not After : May 11 13:00:41 2026 GMT
        Subject: CN=c57480f2-2007-4a1e-a880-6f690115a3d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c4:70:a3:8e:2e:57:ce:35:c1:ce:f8:ec:14:
                    bb:ff:4c:74:ae:5e:e5:4e:6c:62:1f:a1:db:bc:ea:
                    5c:a2:bb:e4:da:a0:4f:92:d9:28:b9:29:14:1e:40:
                    c0:f9:b6:2b:ee:81:ca:ea:38:d4:54:f9:69:37:96:
                    65:80:7e:e9:02:7e:82:be:4d:6e:3f:0e:70:11:e7:
                    97:2d:9a:d1:9d:f6:83:ab:a6:12:16:a9:71:01:52:
                    1f:e4:f0:08:ab:f0:64:b2:28:a7:26:d3:8c:50:27:
                    f8:34:a4:b8:92:4f:04:cf:52:4f:b1:db:3d:c7:db:
                    81:29:c6:d5:be:62:25:f4:dd:ca:11:78:50:f9:ca:
                    b3:f5:c4:51:fd:fd:f6:33:d5:df:c6:82:a5:c7:43:
                    89:89:3d:38:48:2e:5d:c5:b8:e5:42:a1:87:bf:37:
                    64:54:46:3e:0b:0f:fb:46:87:38:96:0e:06:f5:5e:
                    65:d2:2b:6c:ad:17:ba:de:94:42:01:1d:57:3f:6f:
                    05:03:68:a2:7e:4e:14:5d:c7:7b:02:6b:0e:b9:15:
                    c8:cb:70:7e:bd:51:b1:0a:85:de:a4:17:05:90:48:
                    6c:5f:a6:61:79:5a:24:9c:73:06:e3:7f:ea:57:b1:
                    e5:0d:fe:17:73:c4:28:2b:c5:cb:5d:ff:57:ed:3c:
                    89:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:59:7C:E1:8F:48:B4:39:D2:9E:02:A5:BB:FA:45:0D:17:B1:18:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/bd87b42a-cb7c-39c4-8fda-3f3a8fc69336.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.244.96.0-162.244.101.255
                  204.16.48.0/24
                  208.67.12.0/22
                  208.85.128.0/24
                  208.85.133.0-208.85.135.255
                  209.42.166.0/24
                  209.42.191.0/24
                  209.209.128.0/21
                  209.209.139.0-209.209.181.255
                  209.209.183.0-209.209.184.255
                  209.209.186.0/23
                  209.209.189.0-209.209.191.255
                  209.250.32.0/19
                IPv6:
                  2607:b600::-2607:b600:2:ffff:ffff:ffff:ffff:ffff
                  2607:b600:4::-2607:b600:6:ffff:ffff:ffff:ffff:ffff
                  2607:b600:8::/48
                  2607:b600:10::/48
                  2607:b600:12::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:f5:4d:fd:40:f9:e9:74:ef:33:c0:82:7e:bf:f6:28:26:a1:
         60:3d:2f:80:ac:35:72:62:1d:e5:61:c8:34:3a:e5:20:d9:61:
         ad:89:3f:8f:eb:92:24:a5:e0:09:00:c4:57:06:0b:3d:ee:8c:
         62:75:19:f0:43:19:91:b8:6f:42:34:96:4a:48:f3:3d:7b:fd:
         e0:ca:c9:5d:7d:b6:d4:b1:17:fe:23:4e:46:0f:cf:e9:85:1d:
         11:0c:6e:bd:b0:3d:17:d3:af:fe:80:8d:44:5a:c4:ce:61:13:
         39:1f:43:c2:b3:4b:88:9d:4a:d1:ae:7b:84:92:22:b5:d5:41:
         eb:17:96:4e:33:a0:bd:03:12:d7:91:bc:f6:9f:ae:f0:ce:55:
         f8:c5:7a:bd:9a:0c:9d:5c:2f:3b:31:54:09:10:f0:d1:b8:55:
         55:d1:3d:85:eb:55:c5:a1:eb:07:de:b1:b9:71:96:5f:c1:dc:
         14:47:a0:5e:ef:b9:14:d9:bd:37:8b:9c:85:67:b4:e4:09:fe:
         44:1e:46:e4:4e:59:ec:d6:df:4a:4a:d6:40:b3:50:8e:e8:41:
         b5:86:74:5c:6b:3b:b9:28:3d:d7:da:7e:75:a0:9e:13:29:25:
         52:80:f6:92:0c:f5:a3:81:a0:7a:b8:f1:7b:b5:95:35:4c:73:
         de:a8:25:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:37:51 2026 by rpki-client