Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/c2709bb2-a4fd-3cdf-be31-74b81fdaa856.roa
File:                     c2709bb2-a4fd-3cdf-be31-74b81fdaa856.roa (raw, json)
Hash identifier:          VgksRXtZ3cOrw4AAJVnUq8VTWAq1+rfTIGjpkkSO8R4=
Subject key identifier:   A7:62:E9:32:E3:9D:06:6A:8D:62:5C:88:B2:AD:27:47:6E:E5:97:38
Certificate issuer:       /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial:       010D0C9F4328584CAA271ABE6E6056F0FC13A100
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/c2709bb2-a4fd-3cdf-be31-74b81fdaa856.roa
Signing time:             Tue 27 Jan 2026 14:00:36 +0000
ROA not before:           Tue 27 Jan 2026 14:00:36 +0000
ROA not after:            Mon 27 Apr 2026 13:00:36 +0000
asID:                     394094
IP address blocks:        72.249.184.0/24 maxlen: 24
                          173.237.184.0/24 maxlen: 24
                          174.136.40.0/24 maxlen: 24
                          174.136.44.0/24 maxlen: 24
                          174.136.48.0/24 maxlen: 24
                          207.210.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:aa:27:1a:be:6e:60:56:f0:fc:13:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
        Validity
            Not Before: Jan 27 14:00:36 2026 GMT
            Not After : Apr 27 13:00:36 2026 GMT
        Subject: CN=22236995-3b36-4181-9727-8723b83baefb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d0:bc:29:33:00:c0:f6:2a:10:f8:02:fb:39:
                    75:ff:bc:73:4b:c6:e9:a7:13:78:47:3e:93:9d:ba:
                    4c:95:95:e3:4c:d1:f5:33:c3:83:f8:17:5c:e6:e9:
                    49:aa:75:ac:9f:4e:b4:a7:5e:50:fd:65:65:74:6c:
                    16:eb:29:80:91:5e:1a:d8:94:fe:b7:bd:6d:59:a6:
                    ec:39:55:33:65:fc:ef:2d:61:8b:55:ae:bc:c1:ef:
                    bf:5e:71:41:31:02:c9:dc:b6:51:9c:4d:ea:0f:28:
                    63:9b:50:cf:cd:6b:67:7a:24:18:ae:e5:e8:57:e4:
                    dd:ed:00:a6:42:4d:22:eb:24:e5:ba:db:fd:74:8e:
                    22:85:3d:bb:1c:67:c2:53:18:63:84:56:60:94:46:
                    1c:f4:36:2b:36:2c:97:06:a0:87:89:d9:8d:e9:b4:
                    9c:f2:38:65:d8:d6:4b:69:92:b0:22:68:a7:98:7b:
                    5b:96:a7:d5:34:57:c1:52:af:6c:b0:25:6b:76:4b:
                    0a:9b:b1:f5:74:69:6e:58:12:48:68:70:4c:01:de:
                    18:54:71:21:ea:b1:0f:bc:c9:91:07:2b:ef:fa:04:
                    a4:c6:2b:6c:88:3a:6c:74:f8:19:b1:bb:f4:01:96:
                    db:86:e7:cd:eb:9e:8a:97:db:c3:2a:e6:d8:f8:17:
                    e1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:62:E9:32:E3:9D:06:6A:8D:62:5C:88:B2:AD:27:47:6E:E5:97:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/c2709bb2-a4fd-3cdf-be31-74b81fdaa856.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl

            X509v3 Authority Key Identifier:
                keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.249.184.0/24
                  173.237.184.0/24
                  174.136.40.0/24
                  174.136.44.0/24
                  174.136.48.0/24
                  207.210.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:aa:83:ed:06:f6:1b:93:b8:01:88:a4:3f:36:54:cf:09:32:
         b2:61:fe:0e:e7:3e:fd:d7:54:d2:14:1d:6e:ac:2e:13:46:35:
         ef:9f:d6:45:35:d8:fc:6a:67:f7:5f:2a:1c:8f:9f:62:4c:5e:
         c6:15:8c:30:2a:bb:e7:8c:9a:c8:1e:f6:60:bc:9c:6f:ff:05:
         c6:e2:66:bb:62:76:57:6c:f9:54:c3:40:fc:47:c8:4a:07:69:
         00:8f:03:32:fb:0b:b1:7b:96:e6:49:1f:14:5b:09:03:68:bd:
         34:50:5c:11:c3:9b:e8:82:be:74:c8:d7:8f:4b:c6:9b:4d:46:
         d6:c4:8b:4d:33:24:09:3f:6c:b2:6f:07:05:fc:7b:e8:8f:8c:
         40:a3:a9:23:77:43:29:ae:46:05:12:bc:a8:90:c0:2b:23:a0:
         44:03:bb:37:66:53:a9:da:d2:c5:5d:05:51:9d:22:c4:12:a7:
         f7:60:d5:52:d8:b9:9a:e2:3c:b6:bd:c4:82:9d:2f:65:24:94:
         94:5a:9f:3c:e0:be:c6:36:b8:df:6d:be:a1:33:28:92:57:54:
         6e:8b:0c:27:8a:5e:f9:df:32:b3:b8:56:7e:da:a2:65:ec:68:
         78:1c:0b:ff:c1:62:8c:83:e1:a9:ca:e6:36:33:32:40:c3:0a:
         25:3a:38:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:57:44 2026 by rpki-client