Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55452ee1-697d-484d-b971-7a8c75820ecc/9ba52e2b-162c-30b7-85e3-d3e25718e98e.roa
File:                     9ba52e2b-162c-30b7-85e3-d3e25718e98e.roa (raw, json)
Hash identifier:          Ep6j9AnsI6fZTtk4MV7XDWbYOC8tCsERJovpbMvo/4M=
Subject key identifier:   73:2B:FE:47:F1:13:13:7C:0C:4D:02:A6:11:E0:76:8C:A6:10:D0:2A
Certificate issuer:       /CN=55452ee1-697d-484d-b971-7a8c75820ecc
Certificate serial:       010D0C9F4328584D86955903FB5A59F9B2C61B00
Authority key identifier: B6:86:A0:07:79:5A:6A:89:6F:58:55:92:09:53:B7:56:7D:D3:7C:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55452ee1-697d-484d-b971-7a8c75820ecc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55452ee1-697d-484d-b971-7a8c75820ecc/9ba52e2b-162c-30b7-85e3-d3e25718e98e.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     32391
IP address blocks:        69.49.208.0/20 maxlen: 24
                          74.120.128.0/21 maxlen: 24
                          130.51.0.0/22 maxlen: 24
                          2604:7100::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55452ee1-697d-484d-b971-7a8c75820ecc/55452ee1-697d-484d-b971-7a8c75820ecc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55452ee1-697d-484d-b971-7a8c75820ecc/55452ee1-697d-484d-b971-7a8c75820ecc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55452ee1-697d-484d-b971-7a8c75820ecc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:59:03:fb:5a:59:f9:b2:c6:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55452ee1-697d-484d-b971-7a8c75820ecc
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=47fba783-e1f2-473d-ad0f-b33bcbb581e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:57:c0:a4:6c:c7:52:dd:04:f1:e8:67:ac:4b:
                    b1:0b:11:b8:a0:02:26:1c:b2:83:b4:f9:a8:b3:67:
                    f5:4b:a3:0c:2a:ad:e5:c2:29:f7:75:b0:88:42:53:
                    e2:86:f5:ba:94:50:7c:ad:33:61:de:2e:46:f9:51:
                    0e:65:93:32:ea:02:61:96:7b:fb:99:f8:b1:19:24:
                    d0:19:fa:23:a2:5a:f1:9b:d4:be:c9:43:3f:fc:a6:
                    bb:e0:76:fd:a3:49:58:b3:f8:fb:06:c7:41:34:74:
                    ae:94:17:7f:6d:90:ac:35:8e:30:0e:c4:d8:1f:be:
                    b1:5a:3a:a5:f4:d9:ee:10:9d:fd:25:39:e0:aa:f7:
                    39:22:7a:10:ff:83:40:f6:70:fa:a4:1b:cb:06:6e:
                    72:92:98:af:a0:8d:ac:73:ed:53:c3:14:fa:17:dd:
                    10:a8:36:78:3c:7b:9d:32:d1:ef:63:c3:cc:6f:2b:
                    92:5f:a9:c5:c8:58:79:a4:e9:12:71:41:b8:e5:b3:
                    0d:ce:7a:de:a4:b4:b4:be:92:4c:4b:a1:27:e3:ae:
                    a0:eb:5f:dc:83:a9:aa:61:68:ce:05:c8:85:b5:db:
                    6e:ad:8c:9d:51:99:43:e0:2a:4a:f8:7b:33:98:5a:
                    cf:5c:0a:fe:93:97:a6:fd:71:76:50:cc:08:f9:eb:
                    87:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:2B:FE:47:F1:13:13:7C:0C:4D:02:A6:11:E0:76:8C:A6:10:D0:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55452ee1-697d-484d-b971-7a8c75820ecc/9ba52e2b-162c-30b7-85e3-d3e25718e98e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55452ee1-697d-484d-b971-7a8c75820ecc/55452ee1-697d-484d-b971-7a8c75820ecc.crl

            X509v3 Authority Key Identifier:
                keyid:B6:86:A0:07:79:5A:6A:89:6F:58:55:92:09:53:B7:56:7D:D3:7C:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55452ee1-697d-484d-b971-7a8c75820ecc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.49.208.0/20
                  74.120.128.0/21
                  130.51.0.0/22
                IPv6:
                  2604:7100::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:02:d2:13:67:00:09:fd:ea:41:28:fa:5b:e2:5a:78:4b:e3:
         a4:59:ad:4d:7f:48:b1:4c:a0:86:df:c2:ad:a6:7e:1e:d4:1b:
         e8:f3:02:32:19:14:55:fe:cd:f3:97:43:b0:d9:59:93:11:7c:
         c6:a3:98:21:0e:5a:77:d3:5a:30:cc:12:78:2e:66:2c:32:c3:
         53:57:3d:82:74:9d:47:76:20:57:40:f9:69:c2:6e:ae:e6:66:
         99:45:86:2b:42:dd:ec:e3:1d:d9:01:d7:8a:9f:c2:67:53:1e:
         c0:46:ca:5e:8c:97:38:c3:c8:00:70:65:1d:f1:b9:c0:29:ff:
         be:d9:68:d2:98:2c:4d:98:47:dd:6c:c7:9d:7d:71:2a:df:76:
         75:7a:ee:a2:7f:c7:23:5a:8e:31:16:d6:c5:61:c1:e0:44:42:
         c3:a9:7b:67:33:ed:4d:50:a2:0a:03:d5:2d:18:f1:6f:e0:a5:
         c5:01:db:a7:fe:4a:fe:9e:6e:7f:8c:d9:cf:f0:95:12:2f:3e:
         9a:c8:fb:6f:55:21:00:94:c9:58:a4:58:e3:2a:b3:a5:e9:a4:
         46:8b:ef:93:85:55:ab:57:46:92:13:69:2c:c0:11:3f:47:80:
         58:5f:a5:67:65:d3:1c:a2:07:c2:da:4c:c3:37:92:12:b0:24:
         46:ae:da:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:38:51 2026 by rpki-client