Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91/511b6f7f-8a8a-3ecb-a475-ac970b33cbe8.roa
File:                     511b6f7f-8a8a-3ecb-a475-ac970b33cbe8.roa (raw, json)
Hash identifier:          5IjgSmrCn0fduKaH7B5wzHdm39p0ujqjHO1RbuK4GLg=
Subject key identifier:   86:58:69:70:00:87:8E:A7:4D:5A:89:58:F3:64:D9:72:80:88:5F:54
Certificate issuer:       /CN=654fbbab-11f5-4ada-bd8c-77eec4615c91
Certificate serial:       010D0C9F4328584CCE71FE4E890BDF9159CA89A0
Authority key identifier: A2:E1:81:0E:2E:B5:14:6A:80:75:C4:0B:2E:F9:56:3C:30:D2:39:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91/511b6f7f-8a8a-3ecb-a475-ac970b33cbe8.roa
Signing time:             Mon 09 Feb 2026 14:00:39 +0000
ROA not before:           Mon 09 Feb 2026 14:00:39 +0000
ROA not after:            Sun 10 May 2026 13:00:39 +0000
asID:                     46475
IP address blocks:        63.143.32.0/19 maxlen: 24
                          64.31.0.0/18 maxlen: 24
                          69.162.64.0/18 maxlen: 24
                          74.63.192.0/18 maxlen: 24
                          162.253.40.0/22 maxlen: 24
                          192.169.80.0/20 maxlen: 24
                          208.115.192.0/18 maxlen: 24
                          216.144.240.0/20 maxlen: 24
                          216.245.192.0/19 maxlen: 24
                          2607:ff68::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91/654fbbab-11f5-4ada-bd8c-77eec4615c91.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91/654fbbab-11f5-4ada-bd8c-77eec4615c91.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ce:71:fe:4e:89:0b:df:91:59:ca:89:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=654fbbab-11f5-4ada-bd8c-77eec4615c91
        Validity
            Not Before: Feb  9 14:00:39 2026 GMT
            Not After : May 10 13:00:39 2026 GMT
        Subject: CN=8c31ac86-898e-4f36-8812-f4f3b1938a56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ae:e6:6f:8b:d8:a0:a1:7e:8e:a9:76:1c:93:
                    0f:47:5e:8c:c3:90:69:d3:c1:64:03:73:78:67:7e:
                    64:fc:70:5d:62:42:43:d6:36:74:5f:57:a2:b8:31:
                    f6:f0:88:05:90:d8:1d:ba:3e:94:d7:21:de:1e:2e:
                    1c:bd:f1:ea:44:f7:23:1a:7a:da:67:c8:87:9b:d7:
                    28:f7:5f:fd:10:f3:f3:37:db:03:a1:7b:83:43:ba:
                    b5:e7:60:93:68:82:19:f5:60:4a:1e:28:d2:b9:70:
                    16:1d:b9:09:8b:2a:31:3c:ed:01:83:26:5e:78:b8:
                    89:d2:5c:4a:9a:c6:df:8e:21:a2:11:e8:fb:bd:41:
                    77:7f:f7:b4:fe:b9:be:9e:cf:06:e2:03:14:f0:63:
                    05:05:a1:8d:71:5f:06:f0:0b:e5:74:21:80:0a:f7:
                    ef:9b:1c:18:37:09:03:65:9f:33:87:ae:bc:57:e3:
                    40:8e:7a:cb:6a:cc:93:2b:3a:c7:e6:21:6d:5a:d6:
                    f4:ec:42:8d:3d:18:e2:f7:51:c9:69:16:b5:8e:8c:
                    aa:e9:dd:e2:35:d6:87:90:d5:9c:8d:30:4d:b2:3f:
                    32:78:88:93:2f:c5:13:8e:94:da:8d:27:ba:19:6c:
                    4c:3b:62:02:e8:60:da:c3:54:3d:0d:4e:00:a8:7a:
                    2c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:58:69:70:00:87:8E:A7:4D:5A:89:58:F3:64:D9:72:80:88:5F:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91/511b6f7f-8a8a-3ecb-a475-ac970b33cbe8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91/654fbbab-11f5-4ada-bd8c-77eec4615c91.crl

            X509v3 Authority Key Identifier:
                keyid:A2:E1:81:0E:2E:B5:14:6A:80:75:C4:0B:2E:F9:56:3C:30:D2:39:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.143.32.0/19
                  64.31.0.0/18
                  69.162.64.0/18
                  74.63.192.0/18
                  162.253.40.0/22
                  192.169.80.0/20
                  208.115.192.0/18
                  216.144.240.0/20
                  216.245.192.0/19
                IPv6:
                  2607:ff68::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:fe:f6:f5:e3:28:a2:97:e2:c1:4f:c0:e7:1c:ca:3b:7d:11:
         4d:7b:ae:e4:44:6d:59:7c:90:e1:98:eb:89:52:18:59:5c:9e:
         95:96:b3:94:51:c4:d5:b1:57:5f:78:2f:06:a4:66:e9:da:ab:
         02:76:b2:58:f2:89:f8:ae:a3:f4:38:69:47:23:1d:87:51:f7:
         b3:c6:82:7c:cc:1c:1e:09:0d:7e:e3:33:38:33:9f:4e:9e:9d:
         f3:bb:c5:9b:cf:51:a7:e4:82:7b:e0:89:81:56:02:cb:78:a9:
         f6:a9:ef:0d:67:f8:55:1e:fc:30:ce:9f:a3:45:b7:32:19:69:
         e9:a7:ad:5c:9f:6a:27:55:22:d3:fd:48:80:bf:46:10:0a:f1:
         95:7c:da:bf:ef:c7:3d:c0:cf:80:81:58:1a:82:56:59:df:8f:
         2e:74:de:15:1a:e8:04:66:b2:d9:1a:ae:77:a2:a2:47:9d:7f:
         1c:d6:d8:1f:d0:b8:af:13:3a:08:61:dc:82:88:f2:0b:96:58:
         fe:26:eb:6c:af:ef:02:40:4e:92:ed:6e:96:0a:8d:c8:10:8c:
         74:34:af:a4:52:d0:71:32:dc:96:a4:83:c2:26:99:70:e9:cf:
         95:35:8c:22:f4:8c:45:21:02:f4:58:cf:5a:c0:d2:37:4e:33:
         a2:33:9b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:01 2026 by rpki-client