Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/ac0441e3-afb5-3633-b538-75ead7a2914d.roa
File:                     ac0441e3-afb5-3633-b538-75ead7a2914d.roa (raw, json)
Hash identifier:          yBFoQwIQEYwUMNoy4kWShIdTtdKKI2n+fUf6NXNTXg8=
Subject key identifier:   B0:99:87:75:13:51:DC:62:B7:01:44:F3:49:4D:97:D6:76:EE:8E:C6
Certificate issuer:       /CN=5e22d7ae-1224-43fb-907a-6690f7bd9a2e
Certificate serial:       010D0C9F4328584D63AFA4F68A5781BD5F93E0C0
Authority key identifier: 60:B1:66:1F:22:1A:63:15:3A:73:41:10:72:AE:0E:CC:D7:BA:34:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/ac0441e3-afb5-3633-b538-75ead7a2914d.roa
Signing time:             Sat 04 Apr 2026 01:00:25 +0000
ROA not before:           Sat 04 Apr 2026 01:00:25 +0000
ROA not after:            Fri 03 Jul 2026 01:00:25 +0000
asID:                     16509
IP address blocks:        64.40.132.0/24 maxlen: 24
                          64.40.133.0/24 maxlen: 24
                          64.40.136.0/24 maxlen: 24
                          64.40.137.0/24 maxlen: 24
                          64.40.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:63:af:a4:f6:8a:57:81:bd:5f:93:e0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e22d7ae-1224-43fb-907a-6690f7bd9a2e
        Validity
            Not Before: Apr  4 01:00:25 2026 GMT
            Not After : Jul  3 01:00:25 2026 GMT
        Subject: CN=197c28e0-b33c-4ee4-9bfa-898fd838c45b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8e:ac:d8:96:6e:f1:5c:66:b3:d1:83:be:eb:
                    47:79:51:85:96:58:80:b5:3d:a7:19:c0:c6:4b:33:
                    96:09:60:ec:91:ee:de:a7:0c:07:f4:e2:3a:98:73:
                    1b:19:60:78:a7:3d:87:f0:29:27:9c:e9:3f:21:73:
                    b1:87:e5:97:db:f5:c2:69:c4:ec:6e:98:de:72:f7:
                    88:42:d6:fc:56:87:a8:ee:c7:00:0b:90:dd:35:65:
                    84:e6:3d:4b:31:39:5c:c5:f1:31:29:67:8e:4e:eb:
                    2e:23:20:ae:98:1d:f5:ba:ed:f2:c5:7d:87:dc:3a:
                    59:41:07:63:cb:66:fb:db:3e:ce:62:77:da:9e:b5:
                    e7:56:ff:19:08:8e:4d:36:5e:8e:39:83:a1:9b:4b:
                    b5:3f:9c:1a:63:5f:c5:29:f9:fc:e3:bb:61:00:6e:
                    9f:39:0d:8d:a2:54:db:89:9b:a9:7c:9c:1b:e2:4c:
                    03:94:27:d9:97:b6:dc:62:1c:97:51:e2:90:bc:ae:
                    20:03:ef:32:bd:6c:79:bb:ab:5b:2a:85:e7:55:96:
                    01:d0:b4:f5:01:0d:c8:a4:a6:1c:c4:72:01:e8:45:
                    44:23:2c:66:d5:b2:4c:58:cd:06:d0:08:9b:5b:ac:
                    32:e3:71:b4:73:3f:9a:9b:e4:7d:6d:67:80:7f:16:
                    7c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:99:87:75:13:51:DC:62:B7:01:44:F3:49:4D:97:D6:76:EE:8E:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/ac0441e3-afb5-3633-b538-75ead7a2914d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.crl

            X509v3 Authority Key Identifier:
                keyid:60:B1:66:1F:22:1A:63:15:3A:73:41:10:72:AE:0E:CC:D7:BA:34:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.132.0/23
                  64.40.136.0/23
                  64.40.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:13:d9:90:04:a7:77:76:7e:bd:78:d8:5c:a4:af:26:b3:f5:
         76:c9:67:7a:fd:f9:2e:ca:eb:16:1e:17:e0:bf:f4:c8:2d:be:
         f1:9f:96:1f:d0:97:b6:60:61:5d:66:00:66:e8:19:e5:b5:1c:
         65:00:d8:6e:40:c7:88:20:7e:b6:c6:b2:78:d3:dc:00:4d:ef:
         f0:69:2e:70:4f:0f:93:e9:14:0e:76:84:d2:c4:c9:6b:45:f3:
         2a:24:30:c5:9c:23:66:9e:5c:a3:fd:b7:8b:de:32:b4:02:14:
         f0:4c:2b:8d:ff:c9:ff:7c:04:e2:d9:9a:f6:13:4f:2b:54:ad:
         89:1f:25:57:42:f0:51:fe:d6:1a:06:56:04:91:2c:a9:3f:ed:
         88:c2:c5:40:32:1f:70:a8:68:76:9a:73:28:47:db:b1:01:1a:
         ef:82:e9:85:f7:15:f4:45:16:44:a9:4f:7e:d0:26:f8:71:67:
         bc:85:a0:05:aa:e3:b8:c8:6d:ed:e2:07:d6:e9:5a:f7:aa:6f:
         69:52:89:f4:77:03:07:93:f7:4f:14:4e:f1:d9:cd:db:d4:d9:
         95:1c:0c:2f:d8:4d:1a:65:ee:20:00:30:61:f9:24:5e:aa:93:
         2c:7b:91:72:ad:88:0c:5f:6a:44:be:87:0c:c7:3b:34:9e:de:
         f8:29:8d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:44:29 2026 by rpki-client