Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945/87da4f25-f5c5-376e-a232-31fdb9491bd9.roa
File:                     87da4f25-f5c5-376e-a232-31fdb9491bd9.roa (raw, json)
Hash identifier:          AnIOaucleuL7ilGkhez2r6mZRMwIr4Ruwkj2CzOUJlo=
Subject key identifier:   93:FC:F0:82:70:6A:8C:A7:54:09:EF:D6:DB:7A:6C:AD:C4:39:89:D9
Certificate issuer:       /CN=445d9dfe-8c66-4b5b-bc81-6ebebd514945
Certificate serial:       010D0C9F4328584CA5F704D06342575271B4C280
Authority key identifier: A7:14:B0:F8:01:52:04:F5:65:D7:EC:99:3F:C9:98:58:BC:85:C2:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945/87da4f25-f5c5-376e-a232-31fdb9491bd9.roa
Signing time:             Mon 26 Jan 2026 02:00:32 +0000
ROA not before:           Mon 26 Jan 2026 02:00:32 +0000
ROA not after:            Sun 26 Apr 2026 01:00:32 +0000
asID:                     15317
IP address blocks:        162.221.224.0/22 maxlen: 24
                          162.252.20.0/22 maxlen: 24
                          173.214.240.0/20 maxlen: 24
                          192.133.136.0/21 maxlen: 24
                          199.182.160.0/21 maxlen: 24
                          216.172.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945/445d9dfe-8c66-4b5b-bc81-6ebebd514945.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945/445d9dfe-8c66-4b5b-bc81-6ebebd514945.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a5:f7:04:d0:63:42:57:52:71:b4:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=445d9dfe-8c66-4b5b-bc81-6ebebd514945
        Validity
            Not Before: Jan 26 02:00:32 2026 GMT
            Not After : Apr 26 01:00:32 2026 GMT
        Subject: CN=efac536b-1cc0-4123-be49-659583fe7713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a4:23:e2:91:79:55:3b:ef:11:a3:4c:9a:68:
                    09:85:89:40:14:c8:7d:70:aa:04:2a:b2:2c:06:24:
                    da:b8:6f:30:25:d6:87:3d:e7:3d:34:3f:7c:e6:3b:
                    c6:da:02:15:b0:27:8c:4a:86:01:cb:ef:bf:85:85:
                    91:91:10:ce:83:a8:d0:19:e7:5f:59:27:61:89:79:
                    48:87:34:84:48:02:9b:57:40:6e:d9:c8:2f:15:67:
                    c4:34:28:ed:f5:a9:9a:b1:db:fa:31:43:9f:51:ea:
                    6b:4e:6d:0a:de:6f:18:93:50:9c:ce:25:69:9c:d7:
                    2e:9b:58:96:0a:fb:a0:40:d7:86:fc:a7:e3:f2:f2:
                    55:6e:1b:df:bb:02:0c:3f:80:54:40:71:d6:76:eb:
                    dc:7f:29:5a:e6:35:20:c6:88:c2:58:8d:e9:e6:fb:
                    da:c2:0c:b2:35:62:d1:9b:c2:fe:ed:26:c8:31:f0:
                    31:8a:ef:e0:ec:62:45:9b:05:39:37:91:34:c8:ec:
                    fa:64:66:34:15:e2:39:10:ea:ec:26:8b:d4:33:b9:
                    e5:cb:be:fc:48:e9:a2:c8:b4:d8:94:0c:63:ad:78:
                    22:08:3a:6f:28:d1:a5:87:b5:bb:6c:26:45:4e:94:
                    fe:ba:ed:1b:b6:e7:a2:0f:2d:c7:04:73:ef:36:6c:
                    29:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:FC:F0:82:70:6A:8C:A7:54:09:EF:D6:DB:7A:6C:AD:C4:39:89:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945/87da4f25-f5c5-376e-a232-31fdb9491bd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945/445d9dfe-8c66-4b5b-bc81-6ebebd514945.crl

            X509v3 Authority Key Identifier:
                keyid:A7:14:B0:F8:01:52:04:F5:65:D7:EC:99:3F:C9:98:58:BC:85:C2:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.221.224.0/22
                  162.252.20.0/22
                  173.214.240.0/20
                  192.133.136.0/21
                  199.182.160.0/21
                  216.172.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:f5:2c:c3:2e:f5:71:77:3a:0b:8c:6e:17:f2:88:01:26:6e:
         47:c8:a9:c8:66:5c:b6:ef:b7:97:8c:f3:88:89:7b:04:5a:5c:
         30:99:bf:37:22:91:f7:ca:95:18:eb:1a:a8:34:02:9d:4b:65:
         85:73:e6:f8:6e:95:9a:ea:f6:ea:0a:c7:45:41:71:34:fb:77:
         b1:60:09:94:cc:fe:d3:4c:2f:94:d2:56:dd:af:73:2f:9f:a1:
         62:98:b1:4b:b1:ee:4b:17:64:e8:38:f4:80:c5:84:36:c3:be:
         e5:74:a9:18:e4:de:8f:9f:f6:59:67:d7:0c:46:c3:70:32:6a:
         7b:59:e4:0c:6c:f7:66:97:6b:c4:0e:5e:a8:75:7b:5d:1c:e2:
         ed:79:12:b5:ae:b0:fd:3b:1c:53:ec:b8:55:18:d9:cc:58:b8:
         4f:77:c5:af:21:5b:8c:23:bb:1f:df:93:7e:94:69:92:ff:77:
         b7:c8:0e:bc:c5:0a:e7:d0:75:9e:a9:48:82:48:e2:99:b9:51:
         4c:8b:a6:fc:fa:76:7e:df:e4:52:a3:4e:62:78:94:3c:af:ab:
         d0:59:82:2a:cc:68:b0:29:63:48:d0:28:8a:8e:22:b9:d2:3d:
         b5:54:f6:2c:ee:24:13:c2:03:56:3d:30:9f:d9:81:ee:41:0b:
         bc:7b:aa:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:26:08 2026 by rpki-client