Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/b0347528-51f9-3df1-ad01-53232c57299c.roa
File:                     b0347528-51f9-3df1-ad01-53232c57299c.roa (raw, json)
Hash identifier:          qaKUYXTgdmpjI4O30f/AvwuPLqJOKY/llObG1blK/R4=
Subject key identifier:   7F:73:AC:A9:73:EC:65:CD:53:37:81:A9:A7:C0:60:82:2D:C4:69:5C
Certificate issuer:       /CN=b582df16-c65f-452f-ac4a-a1d3af6f8ad1
Certificate serial:       010D0C9F4328584CD99CC13D83B18C482D0A9910
Authority key identifier: 0C:A5:67:C6:89:7E:DC:8D:0C:9A:C7:CB:B3:45:F8:EF:39:13:AD:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/b0347528-51f9-3df1-ad01-53232c57299c.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     55064
IP address blocks:        74.123.28.0/22 maxlen: 24
                          162.210.128.0/22 maxlen: 24
                          2620:a0:4000::/44 maxlen: 48
                          2620:114:a000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:c1:3d:83:b1:8c:48:2d:0a:99:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b582df16-c65f-452f-ac4a-a1d3af6f8ad1
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=e4ae1a1e-fa65-445e-a7e9-e1cc85d04da0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:99:9f:48:36:13:fa:aa:bb:a7:4a:5d:d2:f7:
                    b2:df:b5:df:9b:f2:5f:6e:fc:da:2e:c1:d9:15:df:
                    a8:88:a1:37:ca:81:f2:3e:44:5f:c8:ab:50:e8:74:
                    bc:91:90:14:f5:5b:40:ad:e5:ce:74:4c:12:de:98:
                    f9:37:47:85:cb:7c:b9:00:ee:c5:74:d3:bf:ea:1f:
                    8d:9b:cf:72:92:25:a2:62:0a:6b:0f:e7:0e:8c:61:
                    e2:ef:7b:30:9d:c7:ff:78:62:e2:75:22:37:d4:2b:
                    64:fb:b7:94:b3:23:59:63:d1:e0:a4:90:ce:76:52:
                    68:75:9a:b4:d9:2d:27:eb:67:45:25:da:63:c0:78:
                    2c:ad:23:db:6a:50:36:7a:5a:fe:01:5d:54:89:17:
                    0f:27:ce:57:86:df:ed:2b:df:97:3b:c5:4b:90:c5:
                    b7:71:7e:14:cb:36:ed:94:37:49:47:eb:b5:3a:1e:
                    5d:10:c4:b6:e5:65:8c:ca:2d:2e:13:9c:1d:1a:b7:
                    09:d3:84:4e:f0:4c:4d:56:83:12:45:6b:ac:58:3c:
                    5b:d9:e9:8b:37:59:ff:9f:eb:e4:09:a7:aa:3e:17:
                    c0:10:46:7f:d8:3e:67:17:e1:ea:28:81:3c:f2:c2:
                    e1:03:1f:56:e0:56:00:f8:ee:64:d0:67:df:76:e0:
                    c6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:73:AC:A9:73:EC:65:CD:53:37:81:A9:A7:C0:60:82:2D:C4:69:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/b0347528-51f9-3df1-ad01-53232c57299c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.crl

            X509v3 Authority Key Identifier:
                keyid:0C:A5:67:C6:89:7E:DC:8D:0C:9A:C7:CB:B3:45:F8:EF:39:13:AD:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.123.28.0/22
                  162.210.128.0/22
                IPv6:
                  2620:a0:4000::/44
                  2620:114:a000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:e8:34:28:02:cf:8c:af:31:fa:89:32:7c:29:66:a3:3b:9c:
         be:16:a4:47:a9:75:bf:ad:47:06:13:29:fe:b8:6d:3a:a1:68:
         c3:31:f8:d6:f2:46:41:3f:51:e1:83:ea:65:c1:fa:13:38:48:
         03:2c:55:23:b5:cf:d3:55:ee:3c:a3:67:fa:56:fa:56:2d:69:
         a3:bf:38:da:d0:24:de:3a:19:ce:14:6e:ad:68:02:eb:bf:19:
         eb:04:50:d1:87:b2:ae:c4:a2:ca:3b:a4:3d:ef:51:de:28:06:
         8a:99:00:73:45:12:a7:c5:16:2b:76:aa:87:ab:08:2a:51:1d:
         08:7d:22:8b:1f:20:e5:31:d0:82:ef:ef:c8:bf:c5:e5:66:4d:
         b7:51:71:3d:f5:b5:11:8f:64:f2:83:a9:cc:3c:ac:ce:96:53:
         d8:3e:8f:27:a0:ee:06:71:98:b2:90:74:23:30:da:74:37:21:
         19:f2:55:9f:ed:38:ca:e0:a3:7a:da:80:b5:e3:2a:e4:34:4b:
         40:f5:97:7e:2f:b7:b7:9c:4e:f0:78:c0:48:73:5e:67:16:6e:
         1f:6e:83:84:72:bb:e1:de:52:cb:29:2e:0e:d2:73:5b:8a:3d:
         54:b1:52:81:ac:fe:e9:51:74:cd:88:c8:8a:2d:99:44:9a:fb:
         a2:ce:07:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:12:49 2026 by rpki-client