Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/58742b16-3ba2-343a-8e1b-26d6ee1c7380.roa
File:                     58742b16-3ba2-343a-8e1b-26d6ee1c7380.roa (raw, json)
Hash identifier:          F/TCzp1fxd+O7vsf7ZDBOfnAgwY+AbBTqZuNEopravY=
Subject key identifier:   3D:20:B0:34:E3:34:DB:82:8C:CC:A1:55:42:A9:A3:9F:FC:AE:C4:12
Certificate issuer:       /CN=d43161e4-dac1-407b-8f16-55e6ef100d0a
Certificate serial:       010D0C9F4328584EA5AA6EB048241D7D66C3D6ED
Authority key identifier: 0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/58742b16-3ba2-343a-8e1b-26d6ee1c7380.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     134963
IP address blocks:        47.52.0.0/16 maxlen: 24
                          47.56.0.0/16 maxlen: 24
                          47.57.0.0/16 maxlen: 24
                          47.74.0.0/16 maxlen: 24
                          47.75.0.0/16 maxlen: 24
                          47.76.0.0/16 maxlen: 24
                          47.77.0.0/16 maxlen: 24
                          47.78.0.0/16 maxlen: 24
                          47.79.0.0/16 maxlen: 24
                          47.80.0.0/16 maxlen: 24
                          47.81.0.0/16 maxlen: 24
                          47.82.0.0/16 maxlen: 24
                          47.83.0.0/16 maxlen: 24
                          47.84.0.0/16 maxlen: 24
                          47.85.0.0/16 maxlen: 24
                          47.86.0.0/16 maxlen: 24
                          47.87.0.0/16 maxlen: 24
                          47.88.0.0/16 maxlen: 24
                          47.89.0.0/16 maxlen: 24
                          47.90.0.0/16 maxlen: 24
                          47.91.0.0/16 maxlen: 24
                          47.235.0.0/16 maxlen: 24
                          47.236.0.0/16 maxlen: 24
                          47.237.0.0/16 maxlen: 24
                          47.238.0.0/16 maxlen: 24
                          47.239.0.0/16 maxlen: 24
                          47.240.0.0/16 maxlen: 24
                          47.241.0.0/16 maxlen: 24
                          47.242.0.0/16 maxlen: 24
                          47.243.0.0/16 maxlen: 24
                          47.244.0.0/16 maxlen: 24
                          47.245.0.0/16 maxlen: 24
                          47.246.0.0/16 maxlen: 24
                          47.250.0.0/16 maxlen: 24
                          47.251.0.0/16 maxlen: 24
                          47.252.0.0/16 maxlen: 24
                          47.253.0.0/16 maxlen: 24
                          47.254.0.0/16 maxlen: 24
                          72.254.0.0/16 maxlen: 24
                          139.95.0.0/16 maxlen: 24
                          147.139.0.0/16 maxlen: 24
                          155.102.0.0/16 maxlen: 24
                          163.181.0.0/16 maxlen: 24
                          198.11.128.0/18 maxlen: 24
                          205.204.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:6e:b0:48:24:1d:7d:66:c3:d6:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d43161e4-dac1-407b-8f16-55e6ef100d0a
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=cd025f4e-f7c0-48da-8ca0-537fc1435441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:46:fb:c7:ec:26:70:2a:96:07:c1:0f:0c:c2:
                    6a:bb:5f:15:6d:a8:47:ef:2f:3f:7d:33:60:2e:06:
                    d7:65:f7:c1:31:d2:b6:80:cc:7f:11:49:4f:03:20:
                    dd:0d:98:0e:5d:41:05:65:e1:3e:a6:ff:a9:f2:74:
                    47:64:20:07:39:7f:71:4e:c6:4f:b0:78:75:39:c1:
                    8b:07:ea:96:b7:6d:8b:19:24:db:2f:3d:ae:5a:5a:
                    fd:f4:44:3c:8c:1c:43:79:7a:46:03:8f:be:3d:5e:
                    fb:7f:c0:f7:7a:a2:7e:dc:d8:0e:58:81:7e:a3:87:
                    da:74:ff:a6:ba:97:e2:cc:ed:15:eb:65:92:ac:09:
                    89:fe:c8:3b:cc:4e:a1:9e:26:1c:21:12:3b:e2:00:
                    70:ac:42:ed:91:6b:ae:4f:73:0a:b3:a4:bf:04:6a:
                    d8:e5:97:b1:82:77:7d:33:b3:48:7b:b1:78:c0:db:
                    99:41:c1:9b:a5:cb:b6:0b:c1:20:8e:67:e9:57:06:
                    2f:cf:bc:1d:8d:21:9e:7f:ac:41:6b:08:5e:97:57:
                    88:46:e2:4a:8c:66:65:17:59:f3:a4:3f:43:14:71:
                    a7:8d:b5:85:53:fe:30:34:55:51:b6:b7:0e:0d:11:
                    22:a3:b0:78:7a:dc:08:2b:ba:c2:e0:22:39:ed:08:
                    a6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:20:B0:34:E3:34:DB:82:8C:CC:A1:55:42:A9:A3:9F:FC:AE:C4:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/58742b16-3ba2-343a-8e1b-26d6ee1c7380.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.crl

            X509v3 Authority Key Identifier:
                keyid:0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.52.0.0/16
                  47.56.0.0/15
                  47.74.0.0-47.91.255.255
                  47.235.0.0-47.246.255.255
                  47.250.0.0-47.254.255.255
                  72.254.0.0/16
                  139.95.0.0/16
                  147.139.0.0/16
                  155.102.0.0/16
                  163.181.0.0/16
                  198.11.128.0/18
                  205.204.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:e5:b6:92:02:d0:c4:ec:eb:d8:a2:ae:d6:0a:42:38:54:bf:
         1c:f9:d6:52:ce:56:13:f5:5e:fd:45:25:41:45:46:c2:2d:8a:
         b4:90:47:08:44:e2:cc:00:67:03:df:64:82:af:2b:e7:ad:01:
         86:74:e5:1a:d3:08:37:86:cb:f4:2e:06:3c:14:d3:9a:18:4a:
         58:b7:1d:d2:59:80:48:46:75:61:98:67:d7:37:4d:fb:cf:50:
         a4:0f:0d:a7:40:6d:8c:a0:0e:09:93:6b:3e:f9:a4:ab:ce:be:
         86:a1:ae:d0:eb:5d:20:ce:69:32:bc:f6:67:d8:d7:09:17:b8:
         4f:63:39:6a:a7:b9:77:1d:4c:ee:19:1a:07:e6:a9:0d:73:ca:
         c8:20:77:bd:47:17:39:6a:f6:ac:ea:0b:c6:80:b8:2d:ec:28:
         15:da:0b:5c:8a:3f:39:e0:af:6b:af:62:b4:2b:b9:ba:e2:51:
         c2:1f:85:fd:8f:1f:8d:44:51:a0:65:60:b9:b4:2a:85:22:11:
         1a:5c:5a:5e:54:dd:92:ed:be:23:0b:1f:54:4f:8d:22:65:96:
         de:d3:92:ea:d4:9c:cd:2e:d9:d3:c2:5d:23:d6:e1:24:b0:36:
         c8:65:58:8c:5e:7e:4e:85:1c:3c:ab:1c:de:ed:bb:63:48:04:
         13:2a:8b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:00:13 2026 by rpki-client