Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e1775ba-ce9e-4791-8e12-e05afbb9713e/43763c7f-21a8-34a3-a77c-63042ab10e40.roa
File:                     43763c7f-21a8-34a3-a77c-63042ab10e40.roa (raw, json)
Hash identifier:          cpHpeJQqfySwkhM+mJGN/dsRHlu+n1DkW05rNJAMfHQ=
Subject key identifier:   1C:57:53:83:88:41:A1:38:7F:7D:FD:83:92:F8:E2:62:AC:0F:7D:B8
Certificate issuer:       /CN=1e1775ba-ce9e-4791-8e12-e05afbb9713e
Certificate serial:       010D0C9F4328584CC7773DCF179CA923B1D1A600
Authority key identifier: DD:A2:87:E5:BF:D3:2F:D1:0F:AC:E8:2C:49:1E:FA:B1:2E:C7:82:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e1775ba-ce9e-4791-8e12-e05afbb9713e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e1775ba-ce9e-4791-8e12-e05afbb9713e/43763c7f-21a8-34a3-a77c-63042ab10e40.roa
Signing time:             Sat 07 Feb 2026 02:00:31 +0000
ROA not before:           Sat 07 Feb 2026 02:00:31 +0000
ROA not after:            Fri 08 May 2026 01:00:31 +0000
asID:                     27372
IP address blocks:        64.250.144.0/20 maxlen: 22
                          2607:5006::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e1775ba-ce9e-4791-8e12-e05afbb9713e/1e1775ba-ce9e-4791-8e12-e05afbb9713e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e1775ba-ce9e-4791-8e12-e05afbb9713e/1e1775ba-ce9e-4791-8e12-e05afbb9713e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e1775ba-ce9e-4791-8e12-e05afbb9713e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c7:77:3d:cf:17:9c:a9:23:b1:d1:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e1775ba-ce9e-4791-8e12-e05afbb9713e
        Validity
            Not Before: Feb  7 02:00:31 2026 GMT
            Not After : May  8 01:00:31 2026 GMT
        Subject: CN=6265ef71-dc7a-4c2e-be7d-65169868ba56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:72:cf:d5:6a:94:c6:87:b3:be:4f:cd:d4:1d:
                    f6:87:7b:75:09:98:f0:cf:44:9e:be:a6:58:f9:1b:
                    b6:af:3e:da:e1:0c:f6:e3:8c:a2:29:12:89:4c:93:
                    ee:b1:d0:7d:62:d9:eb:60:3a:6f:e5:dd:e9:35:ce:
                    83:16:1a:57:17:f1:b9:60:73:6d:13:e0:c3:4a:d6:
                    f7:f3:51:98:15:1f:e8:01:88:c4:47:77:2b:ab:19:
                    01:d6:7d:d6:a8:ea:7c:65:6a:31:f0:0d:33:2b:4f:
                    4e:47:66:c8:cf:2f:cd:75:10:77:1c:8c:79:53:1f:
                    a7:99:ac:a5:6f:4b:2f:d0:2c:c7:55:79:59:86:35:
                    8f:cb:30:09:02:02:bb:49:49:ce:60:33:72:45:53:
                    75:68:44:f6:dc:b1:21:4e:c4:18:82:83:28:4b:78:
                    42:54:4f:92:fc:04:91:0a:1f:f9:b8:32:6a:d6:9e:
                    25:fb:d1:02:ba:fb:c3:bb:98:4d:a9:ca:75:5c:d4:
                    a6:b1:af:c9:d2:d3:64:16:ea:b4:e1:05:2c:62:fc:
                    51:1a:db:d6:39:73:73:20:07:9c:c5:cf:b4:e7:00:
                    e1:85:9f:ab:52:77:8d:95:fc:30:3f:e1:e4:69:63:
                    a3:10:cf:46:ef:a5:0a:62:48:88:83:e3:f6:4e:44:
                    97:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:57:53:83:88:41:A1:38:7F:7D:FD:83:92:F8:E2:62:AC:0F:7D:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e1775ba-ce9e-4791-8e12-e05afbb9713e/43763c7f-21a8-34a3-a77c-63042ab10e40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e1775ba-ce9e-4791-8e12-e05afbb9713e/1e1775ba-ce9e-4791-8e12-e05afbb9713e.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A2:87:E5:BF:D3:2F:D1:0F:AC:E8:2C:49:1E:FA:B1:2E:C7:82:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e1775ba-ce9e-4791-8e12-e05afbb9713e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.250.144.0/20
                IPv6:
                  2607:5006::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:2a:8a:eb:ef:7b:91:fd:27:9f:04:3f:89:d3:f7:fd:46:bc:
         59:dd:c6:93:01:d4:1f:9c:db:f5:0d:49:1a:06:6e:8e:dd:a8:
         d2:0f:67:1f:71:23:36:15:fb:89:38:1c:ef:97:40:96:0c:1c:
         a8:0b:6c:fc:ab:93:e5:30:8e:da:01:76:7b:5e:9c:52:d7:e6:
         52:e2:8e:6d:7d:3e:8f:0d:fa:24:49:16:46:1b:d9:4f:a4:07:
         10:7c:ce:bd:a3:0b:88:32:8e:84:66:92:26:72:9f:26:99:28:
         d6:33:b0:99:76:0a:e8:c8:ff:dc:f9:ce:00:c0:fe:c9:d1:2b:
         64:1a:1a:db:8e:f5:5d:6c:f5:5e:77:36:a4:b0:fa:68:10:90:
         2b:26:5e:1e:02:c9:85:a4:ba:53:9b:8b:29:47:0e:36:7a:c4:
         9d:ae:6e:12:21:55:74:b2:0a:82:00:ca:e5:ab:c3:d9:7c:b4:
         cd:55:c4:51:ae:d0:79:07:b1:6a:7c:f4:29:ed:b3:36:12:8c:
         dd:2b:44:a3:47:f9:fc:f9:95:ea:e3:61:ba:1b:71:7a:c6:0e:
         bb:e9:30:56:bf:62:82:db:15:2d:47:95:2b:76:4c:8b:fa:6f:
         54:bd:7f:ca:f5:86:aa:50:0f:40:53:90:73:36:27:74:da:0d:
         fe:ff:09:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:16:55 2026 by rpki-client