Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9a5b5033-d8da-42ef-92ee-144938eb4535/52df7b1a-51be-36d9-b447-64893a51f4ac.roa
File:                     52df7b1a-51be-36d9-b447-64893a51f4ac.roa (raw, json)
Hash identifier:          SgJQn2iCmKM5/SAaU6iBC6YsTh8l3NMW59aGv+on4q4=
Subject key identifier:   CB:7A:D9:2D:DC:84:7A:58:E7:9D:08:50:F7:52:9F:3C:B9:7D:F1:2A
Certificate issuer:       /CN=9a5b5033-d8da-42ef-92ee-144938eb4535
Certificate serial:       010D0C9F4328584D00B26E703D74093164245840
Authority key identifier: 61:D8:B3:17:DD:B6:24:E7:4C:7E:84:36:37:92:85:44:72:6B:1E:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9a5b5033-d8da-42ef-92ee-144938eb4535.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9a5b5033-d8da-42ef-92ee-144938eb4535/52df7b1a-51be-36d9-b447-64893a51f4ac.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     30174
IP address blocks:        68.70.32.0/20 maxlen: 24
                          162.220.128.0/22 maxlen: 24
                          162.251.40.0/22 maxlen: 24
                          162.255.28.0/22 maxlen: 24
                          192.76.4.0/23 maxlen: 24
                          209.203.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9a5b5033-d8da-42ef-92ee-144938eb4535/9a5b5033-d8da-42ef-92ee-144938eb4535.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9a5b5033-d8da-42ef-92ee-144938eb4535/9a5b5033-d8da-42ef-92ee-144938eb4535.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9a5b5033-d8da-42ef-92ee-144938eb4535.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:6e:70:3d:74:09:31:64:24:58:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a5b5033-d8da-42ef-92ee-144938eb4535
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=9d48ed39-19fa-4514-b226-45fb6bd64638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:2d:9c:20:22:7e:bb:a0:6c:94:9d:c3:9c:24:
                    17:88:3a:08:16:f6:6a:1b:3d:17:89:e1:26:bf:25:
                    1e:f7:49:e9:86:95:28:ea:f8:3f:ad:ef:a8:d8:34:
                    d0:5c:13:5f:85:42:be:07:cd:0a:cc:c5:b8:cc:86:
                    c4:80:be:26:09:f2:7c:bd:96:3e:e0:a8:69:cc:fc:
                    66:7e:f0:be:62:8a:c2:ea:a8:b2:87:e8:e7:da:6a:
                    72:a7:51:0b:a3:8d:ed:7f:4a:90:da:91:3d:0d:c0:
                    6e:64:41:90:a8:b5:90:f7:3b:4a:8d:a8:1a:c4:bd:
                    dd:24:fe:ac:ec:33:48:87:71:46:a2:6b:75:9f:20:
                    58:a1:4f:20:cf:ca:7a:41:dd:84:ed:f5:e9:4c:77:
                    cb:b5:ef:36:74:2c:18:f9:f9:ae:e2:50:0a:41:57:
                    73:2c:b9:e3:d5:41:46:9e:58:c7:b7:cd:b0:60:a7:
                    47:cf:93:7f:74:b7:99:cf:06:87:95:6e:79:90:27:
                    12:05:66:86:8c:ab:4b:7a:e6:a3:59:cf:66:9e:94:
                    7a:06:31:b7:58:4a:5f:ef:f7:60:25:31:5d:7d:66:
                    03:ca:53:3c:62:5b:6b:c1:78:f7:da:ed:a2:40:89:
                    ab:f7:e5:56:57:ba:2b:51:ac:de:99:4d:6d:3d:71:
                    6a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:7A:D9:2D:DC:84:7A:58:E7:9D:08:50:F7:52:9F:3C:B9:7D:F1:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9a5b5033-d8da-42ef-92ee-144938eb4535/52df7b1a-51be-36d9-b447-64893a51f4ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9a5b5033-d8da-42ef-92ee-144938eb4535/9a5b5033-d8da-42ef-92ee-144938eb4535.crl

            X509v3 Authority Key Identifier:
                keyid:61:D8:B3:17:DD:B6:24:E7:4C:7E:84:36:37:92:85:44:72:6B:1E:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9a5b5033-d8da-42ef-92ee-144938eb4535.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.70.32.0/20
                  162.220.128.0/22
                  162.251.40.0/22
                  162.255.28.0/22
                  192.76.4.0/23
                  209.203.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:df:4c:85:96:14:49:ec:4c:e7:2c:9d:a8:0c:66:ba:34:94:
         b5:a4:88:4e:5a:cb:6c:7b:bf:45:a4:27:26:11:0f:ad:46:35:
         14:a6:cf:a3:ef:4c:43:62:44:44:ee:af:9c:ee:7c:15:cd:55:
         35:61:de:21:e6:d3:ec:2c:b3:25:6f:e7:a7:6c:c7:4d:1a:f0:
         d4:d7:75:de:e2:ae:f8:5b:ec:cd:72:a4:95:a9:81:18:28:2a:
         46:77:51:74:72:9b:f4:5e:ba:e2:1d:20:aa:43:02:76:e8:16:
         b5:f7:fe:d1:1d:70:e9:f0:af:85:16:ac:a6:99:3a:57:19:8c:
         12:5c:c7:aa:f6:7d:8b:de:7d:2e:7d:ea:10:6f:4f:ef:bb:ac:
         71:61:12:5b:85:cb:a6:59:7c:ba:9a:c1:93:a8:98:d0:f0:73:
         38:1c:11:d3:31:b5:e9:bb:2d:f4:36:59:78:62:0e:0d:c6:14:
         87:7d:03:d0:86:ba:78:50:62:0b:2f:86:78:7c:45:f3:ee:c8:
         01:cd:40:cf:ff:77:e3:30:c3:17:5c:85:c3:71:61:dc:ad:67:
         5d:73:1d:42:80:4c:b1:85:f3:1a:3a:64:4c:11:13:eb:b4:dd:
         64:9d:84:81:2d:c9:fb:51:b7:73:e0:a8:f1:e3:f0:34:92:8e:
         ce:af:48:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:24:59 2026 by rpki-client