Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/42a8a836-8100-4561-9bfc-5462d4161596/e7297b92-13bc-3141-abe3-3ce60a3de965.roa
File:                     e7297b92-13bc-3141-abe3-3ce60a3de965.roa (raw, json)
Hash identifier:          TJ6ToLpxczgwfEk9gdu75qibBdWaXGjZhZfwtg+sPRg=
Subject key identifier:   E4:25:37:10:32:DA:8C:2D:3F:79:F5:70:C8:19:61:77:1D:E1:AC:61
Certificate issuer:       /CN=42a8a836-8100-4561-9bfc-5462d4161596
Certificate serial:       010D0C9F4328584CE8F76C4F22DA7FC3EFCC9280
Authority key identifier: 6D:F4:C8:7A:66:1C:CA:E4:AF:0C:F8:4A:C5:4A:68:0D:E1:83:3F:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/42a8a836-8100-4561-9bfc-5462d4161596.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/42a8a836-8100-4561-9bfc-5462d4161596/e7297b92-13bc-3141-abe3-3ce60a3de965.roa
Signing time:             Thu 19 Feb 2026 02:00:32 +0000
ROA not before:           Thu 19 Feb 2026 02:00:32 +0000
ROA not after:            Wed 20 May 2026 01:00:32 +0000
asID:                     4474
IP address blocks:        24.51.50.0/23 maxlen: 23
                          24.72.192.0/21 maxlen: 21
                          24.72.200.0/22 maxlen: 22
                          24.223.100.0/22 maxlen: 22
                          67.215.16.0/20 maxlen: 20
                          72.21.64.0/20 maxlen: 20
                          96.31.96.0/19 maxlen: 19
                          104.36.40.0/22 maxlen: 22
                          162.248.136.0/22 maxlen: 22
                          2604:8c00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/42a8a836-8100-4561-9bfc-5462d4161596/42a8a836-8100-4561-9bfc-5462d4161596.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/42a8a836-8100-4561-9bfc-5462d4161596/42a8a836-8100-4561-9bfc-5462d4161596.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/42a8a836-8100-4561-9bfc-5462d4161596.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:f7:6c:4f:22:da:7f:c3:ef:cc:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42a8a836-8100-4561-9bfc-5462d4161596
        Validity
            Not Before: Feb 19 02:00:32 2026 GMT
            Not After : May 20 01:00:32 2026 GMT
        Subject: CN=ac43b08b-bcb2-4d27-9093-0583e6eb6490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:cb:2f:54:69:80:bc:d8:40:b8:f5:54:64:35:
                    bc:cc:2a:34:3f:e0:ec:3b:76:66:ca:92:3c:00:3f:
                    6a:87:cc:a9:3a:e6:1b:d7:05:92:3a:6f:fa:ec:18:
                    67:f8:3b:32:6f:52:9a:9f:32:45:46:05:94:e7:2e:
                    d0:b0:51:57:a2:be:39:a7:03:98:cc:ce:a2:b2:69:
                    04:8b:32:08:1e:bd:c2:b1:4b:3e:88:84:21:9e:95:
                    f9:40:5e:34:87:61:c5:77:3b:c6:2a:4f:f6:75:a0:
                    c6:e8:a4:bd:c1:ec:ac:90:61:95:19:f5:7c:d7:7b:
                    a1:f5:63:a6:a6:8f:86:5a:e4:a4:db:d6:82:4d:79:
                    eb:1b:45:22:86:89:ea:4d:86:1e:21:7b:67:e8:64:
                    a7:1c:9c:44:05:d0:ae:9b:21:8d:95:7d:d7:0e:d0:
                    e7:ce:59:b1:51:fd:ca:db:bd:c8:50:38:8d:f0:ef:
                    13:44:d0:0d:b2:64:a2:a5:3f:6a:ce:c4:55:f4:34:
                    3a:5b:1f:30:9d:66:68:b2:a7:d0:ed:fb:37:1b:2c:
                    43:eb:29:e8:0d:5d:15:63:53:d3:bf:c7:8a:84:7d:
                    ca:a9:35:f4:98:2b:32:cc:9d:f6:63:7a:2c:52:e2:
                    31:00:65:a1:15:35:6e:c6:02:40:f9:75:7d:6b:86:
                    9b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:25:37:10:32:DA:8C:2D:3F:79:F5:70:C8:19:61:77:1D:E1:AC:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/42a8a836-8100-4561-9bfc-5462d4161596/e7297b92-13bc-3141-abe3-3ce60a3de965.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/42a8a836-8100-4561-9bfc-5462d4161596/42a8a836-8100-4561-9bfc-5462d4161596.crl

            X509v3 Authority Key Identifier:
                keyid:6D:F4:C8:7A:66:1C:CA:E4:AF:0C:F8:4A:C5:4A:68:0D:E1:83:3F:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/42a8a836-8100-4561-9bfc-5462d4161596.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.51.50.0/23
                  24.72.192.0-24.72.203.255
                  24.223.100.0/22
                  67.215.16.0/20
                  72.21.64.0/20
                  96.31.96.0/19
                  104.36.40.0/22
                  162.248.136.0/22
                IPv6:
                  2604:8c00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:4b:1a:e7:58:d4:8f:ba:ef:c1:c3:ba:90:d0:67:16:27:7e:
         af:64:e6:1c:20:12:fd:a9:14:9d:de:1d:3c:04:53:cf:4f:d1:
         5d:84:66:09:93:0a:3d:10:8c:92:e4:69:c7:71:cc:40:33:f6:
         10:6e:8d:4f:50:57:c8:3f:3f:59:24:8b:de:5f:bf:c7:de:bf:
         59:d3:ad:d9:77:d5:40:99:a7:ea:9c:ef:0a:87:3b:b1:4a:a0:
         65:84:6a:93:a0:a5:40:a4:3e:48:b0:7d:a8:c3:dc:38:23:e7:
         89:37:de:08:0d:6a:db:0e:16:5e:28:1f:07:e8:b1:58:12:0f:
         67:73:14:ba:a9:81:ab:ce:23:6c:b8:dc:84:8c:0a:27:bb:59:
         94:75:1e:63:10:1a:6b:f1:21:b0:d8:2f:01:a0:d9:50:a2:12:
         70:c2:a9:07:38:19:9d:a6:64:2c:d7:36:a0:10:a6:40:ed:73:
         b4:db:e3:06:e6:ce:cd:dd:bc:09:2e:0a:34:e0:09:64:d8:1b:
         77:0e:e4:79:ba:d4:b1:6d:db:a1:e5:96:5f:92:9d:9d:05:63:
         88:7a:28:33:11:87:4c:4a:30:28:c7:e0:9d:ff:eb:05:06:41:
         d7:59:eb:ef:a2:05:3c:7a:b8:42:03:6b:c4:d0:a8:cd:65:df:
         ae:04:d1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:50:46 2026 by rpki-client