Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa/9ccdb945-7edc-31b8-8022-dda37f616533.roa
File:                     9ccdb945-7edc-31b8-8022-dda37f616533.roa (raw, json)
Hash identifier:          JUtUuyhcg2dMUgmr0/88K4JB0Tw0p/LIj6Is8T0ShkI=
Subject key identifier:   8F:B9:6F:0C:C9:2E:93:DE:D7:C9:71:54:AF:A5:6E:EF:81:DD:DE:A9
Certificate issuer:       /CN=8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa
Certificate serial:       010D0C9F4328584CD485957CC7EF911D941B6904
Authority key identifier: F6:CF:26:45:BA:58:F1:44:50:0E:AF:13:81:D7:CD:59:CF:12:F5:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa/9ccdb945-7edc-31b8-8022-dda37f616533.roa
Signing time:             Mon 15 Dec 2025 02:00:31 +0000
ROA not before:           Mon 15 Dec 2025 02:00:31 +0000
ROA not after:            Sun 15 Mar 2026 01:00:31 +0000
asID:                     27501
IP address blocks:        64.72.96.0/20 maxlen: 24
                          64.250.224.0/19 maxlen: 24
                          74.113.216.0/21 maxlen: 24
                          103.25.144.0/22 maxlen: 24
                          103.78.160.0/22 maxlen: 24
                          103.85.232.0/22 maxlen: 24
                          148.170.64.0/19 maxlen: 24
                          199.88.32.0/20 maxlen: 24
                          199.88.48.0/22 maxlen: 24
                          199.127.116.0/22 maxlen: 24
                          208.95.108.0/22 maxlen: 24
                          209.51.40.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:85:95:7c:c7:ef:91:1d:94:1b:69:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa
        Validity
            Not Before: Dec 15 02:00:31 2025 GMT
            Not After : Mar 15 01:00:31 2026 GMT
        Subject: CN=0b035f06-554f-496c-88f2-7702dc22809f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6c:9b:e6:e2:c4:7d:b3:17:51:95:a9:27:f7:
                    79:fe:8b:b9:44:79:34:3e:cb:73:2d:5f:e4:19:aa:
                    c7:32:60:50:6e:2a:25:f0:52:74:43:c4:b9:26:de:
                    24:27:36:56:1e:04:b7:ff:ff:9c:ee:48:8d:d8:8f:
                    25:dd:44:a3:ad:d0:c2:96:4e:25:a7:e6:5b:2d:7b:
                    35:d2:15:46:aa:cb:49:65:da:93:37:ff:7d:82:12:
                    f8:2f:5a:cf:ee:b4:b3:b6:2c:94:09:75:67:4d:de:
                    0a:0f:ec:3c:37:4f:6e:9e:2e:f3:c4:c7:3e:c3:a0:
                    0f:78:17:ca:fb:cd:8f:b0:19:2f:a3:8f:34:a5:c2:
                    07:e1:fd:6e:a1:7c:50:4b:4b:26:16:51:4f:05:21:
                    b9:56:e9:ab:01:6f:a9:95:d1:b6:ea:82:ac:ec:a3:
                    d2:1d:0b:a0:3e:1a:c3:68:ad:45:7a:0e:38:96:e4:
                    bd:ad:fe:2c:c3:b6:a6:75:32:1a:2d:49:dc:a9:d3:
                    6a:d3:80:f7:15:c5:89:6f:9c:3e:3c:77:e9:f7:0b:
                    b9:7c:e1:d3:7d:89:73:6c:b4:84:f6:a7:5e:1d:c9:
                    39:46:b9:7e:81:2c:d3:f3:f4:8f:09:80:fd:1b:7e:
                    6f:34:6b:94:99:dd:c9:da:94:a7:db:0f:45:6a:48:
                    90:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B9:6F:0C:C9:2E:93:DE:D7:C9:71:54:AF:A5:6E:EF:81:DD:DE:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa/9ccdb945-7edc-31b8-8022-dda37f616533.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa.crl

            X509v3 Authority Key Identifier:
                keyid:F6:CF:26:45:BA:58:F1:44:50:0E:AF:13:81:D7:CD:59:CF:12:F5:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.72.96.0/20
                  64.250.224.0/19
                  74.113.216.0/21
                  103.25.144.0/22
                  103.78.160.0/22
                  103.85.232.0/22
                  148.170.64.0/19
                  199.88.32.0-199.88.51.255
                  199.127.116.0/22
                  208.95.108.0/22
                  209.51.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:dd:aa:e0:90:bf:a0:a4:fc:31:b3:ae:4e:2a:7c:60:c2:35:
         42:36:20:4f:01:e3:b0:28:86:07:1f:d6:27:59:05:b7:b3:4a:
         1f:87:c8:1c:72:b9:81:93:d9:73:1f:d8:df:2c:1d:12:0f:2a:
         d0:be:f1:a2:e4:c6:86:e1:27:37:a6:c2:2a:c2:22:82:fb:d5:
         9c:cd:01:3a:b5:ab:f4:a4:2b:80:55:bb:a2:cc:39:fb:df:48:
         7f:2a:ad:d1:78:73:65:3a:b2:ef:74:a4:49:78:4f:72:aa:c8:
         06:c5:0e:4a:5c:d6:bf:8e:75:63:35:ef:71:70:99:0b:7d:b0:
         dc:c8:8e:40:63:95:ed:a3:09:9d:09:05:1b:d4:0e:3b:d2:b2:
         29:3b:75:21:fa:ab:c6:be:7d:1b:0b:2e:5f:f3:6e:07:af:da:
         65:68:b6:ed:b6:99:6c:a8:f0:23:9c:46:0a:20:70:f0:8c:67:
         a5:5b:3e:65:2d:c3:e5:8f:a5:69:36:a2:7e:33:ae:85:2b:b7:
         24:69:0e:fd:9e:57:83:28:e4:03:00:47:d0:1d:15:7a:e7:96:
         02:30:ab:b3:e8:03:6e:32:04:54:e9:89:4d:a8:53:c1:2a:74:
         40:3b:ae:94:ca:84:fd:b6:6b:b5:40:70:aa:57:9c:7d:84:d7:
         57:6d:92:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:26:40 2026 by rpki-client